Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uf0himmQ69IyT6DvwOiIsY4PZPo.roa
File: uf0himmQ69IyT6DvwOiIsY4PZPo.roa (raw, json)
Hash identifier: ubl0C7jj83vi31zgkqiIyqTXnjoQYkBeyn+i7zTJ+n0=
Subject key identifier: B9:FD:21:8A:69:90:EB:D2:32:4F:A0:EF:C0:E8:88:B1:8E:0F:64:FA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0958
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uf0himmQ69IyT6DvwOiIsY4PZPo.roa
Signing time: Sun 30 Jun 2024 01:29:40 +0000
ROA not before: Sun 30 Jun 2024 01:29:40 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.106.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392 (0x958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:29:40 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=B9FD218A6990EBD2324FA0EFC0E888B18E0F64FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:b9:fe:1c:e9:95:36:2e:7c:73:f4:ce:00:
8f:dd:6d:6c:02:48:c8:d4:3e:13:aa:6b:d1:b4:f4:
99:ba:9a:a5:46:4c:d5:69:79:de:32:9c:5c:1e:dd:
80:a4:5d:27:ab:85:4d:33:5b:16:5a:88:96:ea:33:
7f:9b:15:22:54:c4:7a:30:2e:23:e0:53:12:95:4d:
62:e5:e9:20:57:c2:77:88:37:70:3d:69:87:99:3c:
3c:77:1c:a6:a4:be:fb:65:a8:74:34:63:ca:30:01:
fa:c0:ae:2a:2a:d3:22:6b:44:28:7b:b1:bb:bd:f6:
5b:0c:9c:ab:bd:98:cd:e5:dd:13:97:bf:28:1a:3d:
47:a7:04:a0:0c:58:9f:27:dc:42:29:9f:8e:7a:89:
a6:10:aa:5f:1b:8e:d2:a1:fd:05:0c:07:ee:ca:03:
27:6b:08:ab:1e:26:0f:55:e5:25:01:7f:ce:aa:a5:
35:44:6f:84:8f:4a:f2:b3:5a:4e:23:9e:16:c3:ab:
46:74:38:fe:a8:5f:2c:cc:73:03:33:42:71:78:16:
e6:44:b5:47:48:ed:92:c7:d6:42:83:32:52:51:1a:
4f:c2:44:84:f0:1c:a9:04:5e:6c:50:dc:d2:e2:0f:
61:8d:4a:fd:64:27:f1:93:77:71:d0:95:d9:25:6d:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:21:8A:69:90:EB:D2:32:4F:A0:EF:C0:E8:88:B1:8E:0F:64:FA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uf0himmQ69IyT6DvwOiIsY4PZPo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.94.0/23
Signature Algorithm: sha256WithRSAEncryption
36:d0:a0:1b:6c:02:b8:f8:e8:dc:ee:c0:07:e1:f1:03:c8:18:
45:21:59:1a:70:04:7d:55:0c:be:20:33:39:4c:6e:3b:e3:4c:
db:26:23:9b:07:20:f5:bf:ae:3e:38:ca:6e:48:f2:57:a0:09:
53:bf:5c:e9:6c:0f:f4:a6:7e:1c:69:cb:24:3b:67:3a:12:eb:
43:65:28:af:ef:0d:19:09:45:1c:d5:c8:57:37:d2:5d:11:b5:
69:91:a2:72:d2:e1:a6:1a:b0:fb:a2:99:49:57:0a:97:cc:e3:
64:19:0f:b7:dd:2d:5a:9d:5f:f9:eb:cc:57:df:62:08:a7:e5:
13:7b:8a:32:6e:24:ff:01:f4:a8:7c:d7:a9:16:86:f0:cc:32:
34:23:2c:f1:b4:64:6e:be:6b:72:06:92:2b:5a:a6:74:fa:df:
f3:f6:1b:44:43:43:d5:87:f1:5f:c7:c5:3e:a6:1e:17:e0:92:
ee:d5:6b:8c:16:94:cc:42:3c:c9:17:1a:d7:89:42:d9:f4:2a:
c2:a6:6b:0c:00:cc:eb:be:06:c8:a7:3f:2e:60:01:ff:9d:d7:
ff:6a:93:72:2e:10:a5:46:d9:71:c7:e3:ea:9a:cc:14:f4:69:
c2:32:8d:fe:79:84:fb:22:8c:5e:0e:5c:ca:e5:d1:dc:0b:ab:
7f:e3:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:18:37 2025 by rpki-client