Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hYE9upvDUdxQNkOekGl8X9BNBMg.roa
File: hYE9upvDUdxQNkOekGl8X9BNBMg.roa (raw, json)
Hash identifier: iZiGUJXcqzrhNJ+3CuBYdIc/rq//tvm8bAeJNnyX7Mo=
Subject key identifier: 85:81:3D:BA:9B:C3:51:DC:50:36:43:9E:90:69:7C:5F:D0:4D:04:C8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B03
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hYE9upvDUdxQNkOekGl8X9BNBMg.roa
Signing time: Fri 31 Jan 2025 01:34:20 +0000
ROA not before: Fri 31 Jan 2025 01:34:20 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.97.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 31 01:34:20 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=85813DBA9BC351DC5036439E90697C5FD04D04C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:ad:43:54:c5:39:68:af:f5:39:14:7d:5c:
c7:23:20:cd:1d:dc:2a:15:3f:a1:68:42:44:58:95:
6a:fb:c7:42:7c:4c:c8:af:10:58:a5:69:f0:06:3e:
e5:ac:77:7f:48:2d:2f:ec:a1:2b:ef:cb:49:42:f5:
70:05:55:90:eb:eb:2e:07:c5:3c:4f:22:c7:05:45:
5e:5b:55:8b:bc:44:75:55:91:1a:23:dd:93:78:33:
73:94:3a:a6:de:2a:91:56:6a:5a:1e:a1:2b:dc:c5:
dc:d4:5b:6c:ca:7e:4f:54:cf:ae:69:63:7b:ea:7e:
84:ea:55:68:ff:e0:57:4a:d7:17:9c:5b:17:59:b9:
0e:32:b1:b4:af:f0:1f:21:e7:b9:cd:ca:49:9c:73:
76:f3:7e:ca:ad:cf:c9:50:b0:9d:43:2d:08:8a:fb:
42:6b:ee:8e:db:02:46:93:02:0b:88:3b:8c:e3:20:
81:7e:1f:27:89:c1:74:62:66:da:6f:7f:6f:48:10:
9d:ed:1c:5b:6d:cf:a3:8f:b7:ca:ab:af:fb:49:60:
50:2a:fa:bc:22:a9:ee:8a:ce:1c:f1:8a:55:bc:20:
c5:d4:bb:b2:dd:3c:fd:f8:d5:95:c0:f3:f0:1e:b9:
75:fa:6b:ec:0a:c3:6e:1e:d7:86:99:9b:0a:3a:bc:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:81:3D:BA:9B:C3:51:DC:50:36:43:9E:90:69:7C:5F:D0:4D:04:C8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hYE9upvDUdxQNkOekGl8X9BNBMg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.99.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4f:a6:95:8c:68:81:bd:0e:4c:95:39:a2:28:2f:8a:11:d4:
c4:07:27:49:17:00:46:9f:80:c4:c9:7d:6c:90:04:47:d0:0b:
b9:9b:ba:4a:8e:a6:4c:98:49:f5:6e:b7:a3:e2:bd:a5:34:e3:
8b:13:cc:1f:f2:93:67:1d:96:ad:c4:98:36:88:8c:7b:11:53:
d9:31:8a:e3:b8:73:4b:07:4e:09:6a:a5:d3:86:44:c1:32:1c:
8e:cd:f3:93:34:96:54:4f:a3:05:12:a0:58:9d:76:24:2b:6c:
4f:1c:ac:8a:c3:0a:57:79:b6:7a:f2:b6:d6:6f:0f:16:78:45:
7d:5f:2f:27:86:14:e1:8e:18:5e:c1:6f:a1:0d:c0:2b:30:cd:
16:a4:12:2a:93:7f:dc:a9:6d:51:7e:de:6c:b6:39:97:32:be:
e9:99:cd:92:f1:b7:9f:c6:fc:64:bc:75:d6:35:48:87:71:1e:
12:43:01:73:8f:8b:7a:e3:98:f2:43:a3:5b:c7:e9:2b:e2:f3:
27:1a:20:c1:eb:93:0e:3a:ff:9c:3d:2e:98:ea:2f:d0:df:f2:
47:68:72:8d:1d:42:bc:bb:6f:5c:30:5d:6c:9c:49:5a:9b:3a:
5f:66:8a:cb:a7:f6:c4:1b:e3:a5:c7:a8:59:75:46:9e:73:82:
60:ec:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:19:10 2025 by rpki-client