Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/kXC1vk8XN0pEehOLgdMBrUqSSOE.roa
File: kXC1vk8XN0pEehOLgdMBrUqSSOE.roa (raw, json)
Hash identifier: VSSxLhKCiYYgdFNKBWvmgg6pODGvl1cW2RIggtd4c14=
Subject key identifier: 91:70:B5:BE:4F:17:37:4A:44:7A:13:8B:81:D3:01:AD:4A:92:48:E1
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 3241
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/kXC1vk8XN0pEehOLgdMBrUqSSOE.roa
Signing time: Fri 31 Jan 2025 01:31:17 +0000
ROA not before: Fri 31 Jan 2025 01:31:17 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 7671
IP address blocks: 210.233.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12865 (0x3241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: Jan 31 01:31:17 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=9170B5BE4F17374A447A138B81D301AD4A9248E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b7:a4:f3:15:a4:7f:61:c1:ce:6e:eb:5f:01:
bd:e8:ee:e8:9a:08:61:6e:3b:25:c2:4a:5f:cd:95:
dd:7a:bc:7a:60:79:87:d8:2a:19:c3:c2:c3:39:9c:
c6:6e:8d:06:53:12:ca:94:91:bc:59:7e:53:2b:44:
07:ba:73:70:c7:2b:e2:80:28:5c:2d:4e:76:9c:e5:
97:2a:95:6a:c6:80:91:87:fd:85:0a:a5:bf:ce:d4:
ef:5c:3f:88:65:a1:b8:5c:d5:e0:4c:b3:26:20:92:
05:1e:7e:f3:48:2e:43:8c:60:8d:98:69:22:12:ef:
7f:bd:40:e4:35:b0:e4:9a:3c:31:5c:2d:12:9c:fc:
8b:ff:50:b9:64:f5:e9:52:a1:02:93:a8:02:23:9e:
e0:ac:96:ba:a7:fd:c4:e6:77:e1:32:10:2e:f1:2f:
13:85:66:08:d5:f6:f6:1f:b4:f1:bb:71:04:2e:f8:
bf:3f:3b:da:65:6b:71:c6:43:45:f0:35:e5:ce:33:
9b:fb:f9:05:92:35:35:b6:2c:7c:cd:8b:af:d3:37:
fc:5c:51:f9:65:f3:14:29:df:b7:49:7f:05:d4:e9:
55:1a:a4:15:e7:eb:36:5a:b5:13:a8:f8:05:21:7f:
c1:3c:e7:e9:c6:61:6f:e3:28:f7:25:ee:13:c7:e8:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:70:B5:BE:4F:17:37:4A:44:7A:13:8B:81:D3:01:AD:4A:92:48:E1
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/kXC1vk8XN0pEehOLgdMBrUqSSOE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.233.240.0/20
Signature Algorithm: sha256WithRSAEncryption
13:13:f3:85:a3:d4:4e:ea:15:e5:cd:00:99:ef:01:b4:d3:e3:
4a:2e:9b:56:ab:32:6c:62:df:4f:15:e8:19:92:a2:79:ef:dd:
a8:a9:36:8a:7a:24:da:2f:41:a3:f0:e2:fb:27:ad:5b:3f:77:
77:2e:99:ad:0a:d3:42:b1:d3:95:8f:c2:9c:a1:d1:28:f1:d2:
40:8c:49:f8:73:33:1d:11:50:64:68:a5:34:70:73:23:f2:13:
26:93:e2:7c:fb:be:9e:1f:c1:61:89:c5:1e:10:d6:b1:e8:db:
46:74:d1:98:60:97:0e:11:e5:30:f4:b2:7e:ab:37:a7:c9:b4:
b4:53:8b:60:ce:c6:9f:c6:63:11:60:2d:4b:70:2a:61:ea:4d:
70:6d:0c:33:c9:ce:fc:9f:77:31:56:00:89:be:ae:44:91:a9:
d2:66:47:5d:0e:f2:e6:11:2f:77:4e:cb:e8:36:50:0a:77:1e:
3d:6c:e1:c2:44:84:33:f0:5d:b4:da:9a:73:92:ea:74:74:02:
b2:06:26:a0:c5:5d:5d:d8:0b:ec:1f:a9:84:85:eb:f5:b6:87:
78:52:36:cc:c9:db:4c:5c:5b:29:72:ba:e2:55:e9:10:61:7e:
87:c1:3f:a6:a4:72:0c:f7:71:30:fe:79:16:e4:ff:4c:fd:b6:
02:a9:89:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:26:37 2025 by rpki-client