Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QD-Wl0iVZ0zr4n8HNl0YXfJNmuw.roa
File: QD-Wl0iVZ0zr4n8HNl0YXfJNmuw.roa (raw, json)
Hash identifier: snDiLnN4vL8f9p1W7FLktrKAM/Ys8FPve4GO71g+XJ8=
Subject key identifier: 40:3F:96:97:48:95:67:4C:EB:E2:7F:07:36:5D:18:5D:F2:4D:9A:EC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 09D5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QD-Wl0iVZ0zr4n8HNl0YXfJNmuw.roa
Signing time: Sun 30 Jun 2024 01:40:31 +0000
ROA not before: Sun 30 Jun 2024 01:40:31 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.159.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2517 (0x9d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:40:31 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=403F96974895674CEBE27F07365D185DF24D9AEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:85:c4:f2:16:12:d8:bf:da:4e:b5:ba:0d:
51:c4:5a:b8:c5:0a:7c:e1:2b:e7:ff:a1:73:63:37:
5b:3f:99:91:10:5c:37:e8:70:52:ef:56:6c:75:d6:
47:31:5c:4d:1e:5e:ca:16:0f:29:af:d5:5b:88:57:
eb:ca:8f:b4:53:e4:44:42:4f:48:a3:cf:ab:9c:1d:
26:60:8c:13:1f:d4:07:db:7d:c9:42:51:73:0c:63:
75:60:07:aa:ab:37:8f:09:b4:a4:01:f4:8f:05:e6:
11:6b:55:71:2a:57:46:1d:6f:fb:e7:60:56:5c:eb:
dd:dc:da:ac:8a:cf:a3:3d:25:08:2f:ae:54:df:49:
cc:c5:a8:56:19:71:7f:ea:90:dd:3f:1b:a6:0f:82:
89:54:59:ff:44:9e:dd:20:b9:fd:d4:bf:25:52:a6:
1f:df:d0:d4:39:d4:a3:fc:8e:8a:bf:96:b4:e5:96:
61:de:5c:d2:d0:74:27:5c:63:08:b8:44:f7:62:d5:
c1:c1:ba:f0:46:e2:74:af:e3:b8:51:8a:0a:57:00:
f6:34:a6:82:18:d3:be:44:3f:62:ad:17:56:70:c9:
88:01:41:0a:22:f5:17:fd:1c:57:63:76:ef:c4:ce:
a0:ea:3e:1b:af:a5:97:84:4e:00:11:0f:90:8c:73:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:96:97:48:95:67:4C:EB:E2:7F:07:36:5D:18:5D:F2:4D:9A:EC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QD-Wl0iVZ0zr4n8HNl0YXfJNmuw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.251.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d8:17:73:be:96:36:a8:22:ac:1f:15:52:e9:41:09:d7:61:
77:21:26:03:99:7e:c6:1d:0b:9c:e8:18:a3:52:e5:4c:45:c6:
62:c4:e6:7a:32:52:49:25:93:e5:31:6c:42:f2:86:cd:d1:1c:
a4:96:a0:5b:0c:cf:02:e7:c9:37:3b:38:bb:18:18:ae:6d:6e:
77:43:3d:85:0f:fe:6a:30:0b:d7:14:df:39:be:bc:fe:40:51:
95:f5:f6:63:3c:13:a1:a8:2f:e5:7d:99:98:88:3c:17:81:f8:
9e:ec:e9:64:cf:7e:07:e8:e1:f1:42:c6:ac:ef:7e:09:b9:dc:
a8:f9:4a:f7:e6:71:4b:07:a1:c3:5e:15:94:37:e6:5d:2b:04:
47:4c:d6:a9:c6:27:94:c3:e1:bd:65:5f:49:f4:cc:1a:2d:65:
c4:de:fa:f8:6f:df:7e:f5:6d:ec:14:d8:be:cf:39:11:0b:c5:
2a:69:bf:75:78:9c:e9:77:d0:b7:49:9a:a8:62:69:ac:40:ea:
ee:1c:eb:72:63:e4:ba:3f:c5:54:ce:4e:d3:32:61:67:77:bf:
5d:6a:96:ca:8b:7a:39:68:03:de:89:c5:99:1f:e2:97:e2:23:
9c:44:cd:9b:55:7c:47:ea:9c:4f:a8:56:15:d0:e7:17:84:39:
b5:b8:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:49:49 2025 by rpki-client