Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q9b4maPvBDwwELK9rjm_FPSfeJE.roa
File: Q9b4maPvBDwwELK9rjm_FPSfeJE.roa (raw, json)
Hash identifier: GM8PC79FHPVPvPFyQ2gt7Jguby/KSwsswoARPaLpEEQ=
Subject key identifier: 43:D6:F8:99:A3:EF:04:3C:30:10:B2:BD:AE:39:BF:14:F4:9F:78:91
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 018C
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q9b4maPvBDwwELK9rjm_FPSfeJE.roa
Signing time: Sat 31 Aug 2024 01:29:14 +0000
ROA not before: Sat 31 Aug 2024 01:29:14 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 2497
IP address blocks: 133.238.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Aug 31 01:29:14 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=43D6F899A3EF043C3010B2BDAE39BF14F49F7891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:49:3e:ba:a9:5b:ce:59:12:1a:a3:e2:17:
8d:4f:10:5d:82:ff:81:3d:2d:73:c1:b3:c5:c0:ff:
bc:42:d8:53:e4:3d:24:8b:f2:37:3b:19:da:b2:32:
48:c9:54:98:57:65:99:31:9d:c9:b0:9a:bd:bd:93:
45:63:38:18:7c:a7:ac:94:03:27:63:c7:23:f2:c7:
2a:fc:ec:64:f0:d8:70:c2:59:e8:c0:da:d0:50:31:
12:d3:5a:4b:4c:04:f2:1d:ad:db:b4:83:3e:56:31:
ee:bd:23:8e:18:9b:60:a0:eb:3f:dc:84:0a:83:8b:
a1:c2:24:e4:e5:9d:2d:c4:9c:ad:6b:6b:76:76:4c:
04:64:3b:2c:fa:d6:4a:f1:91:dc:f1:81:58:be:2b:
f5:7c:28:00:00:39:07:cb:26:7a:2e:71:91:83:65:
6a:a0:f6:83:e7:bb:98:38:f9:af:06:c9:ca:e7:89:
9b:5e:d7:49:4d:08:18:60:b4:1b:a9:a8:85:54:e3:
c6:f3:dc:1e:24:90:39:cc:ce:9b:d8:09:ac:a2:cd:
e2:2a:2f:c3:60:37:11:00:68:e9:4f:e9:83:c1:f7:
e5:74:62:74:32:99:82:1c:2f:47:6d:7f:ca:e7:77:
a4:c6:0d:0c:39:15:80:dd:2f:bb:50:b5:99:17:e9:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D6:F8:99:A3:EF:04:3C:30:10:B2:BD:AE:39:BF:14:F4:9F:78:91
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q9b4maPvBDwwELK9rjm_FPSfeJE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.238.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:3e:fc:d1:71:d6:4f:89:af:e8:52:dc:aa:75:74:94:44:a9:
e8:a9:41:79:54:ad:b0:a2:7b:4b:64:a7:82:5d:16:8d:52:90:
76:50:71:54:b0:d5:f6:5d:48:ab:ba:f4:6c:19:0a:f6:20:b3:
92:40:92:b2:de:d0:59:d9:20:87:b4:82:3a:eb:cc:a4:6f:bd:
d4:d3:80:77:bb:75:47:48:4f:0a:bd:9a:88:83:a9:66:36:91:
49:f2:bd:aa:1b:8d:ac:65:3e:29:29:34:d1:58:17:dc:c9:f6:
b6:52:92:5b:58:cb:37:ff:00:b1:d6:67:d5:6a:d0:25:55:5a:
05:0c:34:b1:8c:52:0c:41:02:33:0d:d2:d1:95:9d:70:cd:74:
3f:ea:67:cd:da:89:88:cf:05:26:6b:88:bd:ed:e5:f8:01:2d:
17:fb:ff:cd:35:14:7a:f8:80:71:66:76:36:61:d8:32:ba:98:
1c:a0:90:aa:e0:ee:2a:a3:4b:e7:01:2a:39:f2:de:2a:84:f3:
4b:a7:96:d8:23:e1:7e:46:da:bb:cd:e6:34:c5:46:59:97:a8:
d0:b3:f8:f9:6a:5d:af:a6:4b:7d:f2:bd:01:b7:25:94:c8:ac:
8e:53:b4:e1:41:c5:1b:64:7c:28:c8:91:85:f8:44:6c:40:fa:
3d:8f:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:01:32 2025 by rpki-client