Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NeOuBw0AnFY4TXzX0Du431GX7HE.roa
File: NeOuBw0AnFY4TXzX0Du431GX7HE.roa (raw, json)
Hash identifier: hoA0+fIz26wcTWzBL+Pg6NJIKZYG0zkIyqeIGMI/s5Y=
Subject key identifier: 35:E3:AE:07:0D:00:9C:56:38:4D:7C:D7:D0:3B:B8:DF:51:97:EC:71
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0AA2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NeOuBw0AnFY4TXzX0Du431GX7HE.roa
Signing time: Sun 30 Jun 2024 01:54:24 +0000
ROA not before: Sun 30 Jun 2024 01:54:24 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.159.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2722 (0xaa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:54:24 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=35E3AE070D009C56384D7CD7D03BB8DF5197EC71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:55:60:20:aa:0b:52:73:ae:35:52:55:c0:
cb:1c:6a:b9:8c:0c:87:98:e5:5b:65:1c:82:82:a3:
59:08:2c:65:42:b7:e0:65:68:f1:e6:00:37:53:23:
48:4b:9a:1e:7f:1e:08:c5:9c:19:31:70:a9:8c:91:
d7:32:e9:0d:5e:6b:8c:fc:82:86:3e:73:d7:f4:4c:
ea:92:0a:95:04:8e:1f:40:45:0b:96:f9:98:3f:56:
a6:ff:0f:b7:98:fb:60:86:52:7c:4b:44:92:ea:aa:
b9:51:b2:5a:9d:b5:94:ce:a8:cf:f7:eb:77:f7:0c:
31:ff:22:72:6a:e9:0c:83:b9:06:2f:d1:19:4d:fd:
72:7a:31:65:f7:b6:5a:7a:d6:57:47:72:56:7a:ba:
06:aa:9f:70:65:df:4d:14:b1:99:c4:72:4a:85:b3:
e5:74:dd:4b:cf:9e:b7:9a:8b:a1:7f:64:cd:b5:a0:
33:9d:64:c2:40:c4:51:47:ff:03:bb:f7:cd:ea:1f:
3d:9b:a6:42:ce:dc:1d:43:20:a8:a9:33:22:35:9e:
a1:a4:99:43:1f:b8:0e:5a:84:c6:a0:b4:af:48:c0:
e7:16:b1:ad:09:d8:98:0c:49:40:da:7b:18:02:b7:
02:db:02:a4:db:1b:8c:4b:75:e6:8e:7a:0b:59:48:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E3:AE:07:0D:00:9C:56:38:4D:7C:D7:D0:3B:B8:DF:51:97:EC:71
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NeOuBw0AnFY4TXzX0Du431GX7HE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.96.0/19
Signature Algorithm: sha256WithRSAEncryption
81:98:ac:36:16:c5:88:55:9e:ac:3a:a8:19:fe:e2:b1:f4:91:
cf:6e:ce:d1:07:95:66:7b:76:08:d3:52:4b:dd:11:83:f7:60:
85:95:42:e2:30:28:36:5a:36:17:7d:35:7c:15:5b:c8:e9:7f:
a4:d5:13:bc:e2:9b:76:f4:d8:de:7a:16:cf:26:f2:ef:a2:e9:
b6:6f:0a:31:90:f8:90:58:0b:e2:59:e0:9d:2b:6b:12:69:76:
56:d9:3c:25:df:32:7e:0c:9b:98:53:e6:7f:07:01:dd:71:e9:
de:87:33:c4:c7:e3:bf:7e:aa:cb:b7:13:3a:91:c8:95:03:8b:
4a:e1:ee:e0:d2:4a:53:86:c9:ad:54:88:89:61:8d:64:ec:bf:
81:46:55:7d:fc:4b:60:d4:ad:b3:bd:5d:bf:48:52:71:7b:99:
17:d4:91:57:42:50:10:33:79:8e:9b:1d:cd:9e:68:7f:e2:f6:
00:9b:e3:2a:fe:14:43:d6:fc:ed:b9:1d:c1:ed:33:fb:80:ab:
19:95:35:49:e7:e8:f5:ec:31:3e:65:86:64:aa:1e:3d:81:6b:
d6:05:74:53:2d:6d:22:4e:a9:3c:84:c2:41:1b:5d:ac:c1:93:
81:d6:3c:4f:ae:cf:0e:43:8d:a6:9e:5c:19:0a:f7:d9:99:a4:
b1:49:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:33:43 2025 by rpki-client