Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fcnpmmnf3tQ1NzCKtrXMydLaYAQ.roa
File: fcnpmmnf3tQ1NzCKtrXMydLaYAQ.roa (raw, json)
Hash identifier: OorU0Z6J3nhBzG8FFpo2s0U3tJ8GC5XSXkuIqoDC9u8=
Subject key identifier: 7D:C9:E9:9A:69:DF:DE:D4:35:37:30:8A:B6:B5:CC:C9:D2:DA:60:04
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 07D0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fcnpmmnf3tQ1NzCKtrXMydLaYAQ.roa
Signing time: Tue 30 Apr 2024 02:08:52 +0000
ROA not before: Tue 30 Apr 2024 02:08:52 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:08:52 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=7DC9E99A69DFDED43537308AB6B5CCC9D2DA6004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:42:c8:12:fd:8c:c2:21:18:9c:51:8f:c0:
02:62:5e:35:03:8c:ba:ce:a0:2e:c4:6c:17:51:dc:
0b:d2:8e:c4:da:46:ba:44:ef:48:d7:fc:43:38:d0:
45:5e:50:2c:b1:0f:a9:dc:ee:22:43:85:01:bd:6f:
b9:18:c5:6d:dc:5f:8e:58:66:af:a3:77:97:87:8d:
55:2e:45:f8:2d:63:dd:76:c7:7b:97:96:f3:97:96:
4f:b3:d8:24:c7:72:9d:a6:0a:1a:60:7d:4b:06:2c:
f7:2a:c5:28:ae:0d:7d:13:ec:00:c4:45:b5:72:37:
2a:42:ac:11:8a:46:f3:88:9c:7d:5d:9a:7a:ca:4d:
79:b3:1b:3a:22:96:01:16:c5:35:32:ae:d8:0f:70:
01:91:f4:34:e9:68:15:fd:fc:cd:c4:8b:4f:b0:55:
6c:13:eb:05:1a:1a:5a:24:3e:51:47:27:66:6f:be:
a5:28:b6:25:1b:32:78:d3:a7:d4:8e:6f:20:2c:05:
f8:8c:fb:f4:a3:e8:2c:78:2d:f1:43:79:2d:78:55:
c3:32:ad:b1:41:06:ec:ec:ab:31:9a:89:04:b2:20:
35:93:ef:c3:d3:91:81:52:d4:2b:1c:8b:75:02:57:
48:82:c8:a5:3b:3a:ad:8e:69:2d:78:4e:1f:43:bb:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C9:E9:9A:69:DF:DE:D4:35:37:30:8A:B6:B5:CC:C9:D2:DA:60:04
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fcnpmmnf3tQ1NzCKtrXMydLaYAQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.46.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:b1:a4:a6:ca:e8:d5:5e:63:cd:0d:5f:25:59:2e:da:8f:31:
e3:09:bc:83:8b:d4:9a:8d:f5:72:97:a8:38:d2:c3:55:65:49:
da:59:58:39:81:e7:00:db:fa:04:ed:e5:4c:b6:f9:15:af:ac:
e5:2f:0c:29:19:c9:87:ec:52:8f:c2:15:70:be:79:2e:1b:bd:
f9:bd:fa:95:cf:01:7d:66:c1:af:e5:8d:43:4a:ac:d3:1f:64:
99:98:83:fc:66:78:50:36:94:31:bd:a7:70:97:67:bb:7b:a3:
e8:19:f1:8a:6f:e8:f6:dc:87:62:b1:3c:8c:8c:8f:c2:bf:ec:
21:c0:0d:46:6c:28:06:38:c2:ec:1d:b0:12:77:e1:53:26:ad:
3c:a5:83:54:a4:c8:80:49:75:4b:4a:df:2a:99:75:d2:ba:23:
55:50:c1:25:8f:5f:02:e0:e3:46:07:88:1f:e4:83:d1:96:09:
58:51:9d:55:0e:81:18:46:ec:11:11:b2:00:18:d6:73:89:73:
e9:da:37:70:b2:d7:4e:38:d4:a9:d1:b1:08:2e:73:f9:78:a7:
80:c5:d8:c7:5b:fd:7e:b4:9f:a0:5d:d6:66:6f:43:35:c4:39:
fb:c8:6c:1f:83:37:10:07:ba:8a:52:c6:91:c9:4d:be:4c:eb:
6c:69:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:44:21 2025 by rpki-client