Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/v94AeX_MBcx9LFH2UGyTpYVSnpI.roa
File: v94AeX_MBcx9LFH2UGyTpYVSnpI.roa (raw, json)
Hash identifier: KwUla+A6xiYVGnbsUxCc9fVg9Iwo4jTAnRbw5PQZhO8=
Subject key identifier: BF:DE:00:79:7F:CC:05:CC:7D:2C:51:F6:50:6C:93:A5:85:52:9E:92
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01FC
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/v94AeX_MBcx9LFH2UGyTpYVSnpI.roa
Signing time: Mon 30 Sep 2024 01:29:54 +0000
ROA not before: Mon 30 Sep 2024 01:29:54 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 9371
IP address blocks: 103.15.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 30 01:29:54 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=BFDE00797FCC05CC7D2C51F6506C93A585529E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:8d:b9:57:1b:dc:88:96:d9:cc:47:7e:a4:
3b:f4:74:1f:c7:7e:bb:66:d8:ee:8c:a4:f9:fa:dc:
66:99:87:ff:92:c8:7d:68:f8:99:f1:c1:dd:02:95:
61:e2:13:92:56:4f:7b:34:0a:f8:da:2a:c3:e8:ff:
20:f8:7a:e9:52:39:f8:b5:ba:d1:3c:9b:0a:32:2b:
2a:4e:87:11:fe:7b:c1:f1:6f:3a:df:b7:10:52:d8:
6e:4a:42:95:8d:74:3f:6f:1b:29:e6:32:27:64:43:
4d:f6:3b:44:2a:48:ef:7c:bc:ee:95:4c:e3:c0:31:
5c:2e:95:96:ab:9b:cc:74:fa:43:ae:98:e8:7c:97:
c4:ca:36:17:d4:5f:cc:32:e9:bc:1f:f5:0b:92:81:
84:8a:4a:78:39:5c:c6:4b:9f:c0:68:94:8e:d4:71:
db:75:fe:cc:45:9f:84:81:2b:e6:bf:86:c6:3c:ac:
19:e3:b9:07:2a:97:bb:59:ff:fd:3d:ac:a7:7a:c3:
81:77:35:42:f4:57:0e:4a:c3:95:b9:cc:4b:a3:8f:
47:dc:50:1f:04:45:50:0a:1d:12:4c:06:ee:00:c3:
0d:82:a4:a9:e7:2b:f6:f9:18:54:c8:1b:d6:3b:d1:
dd:97:7b:d4:6f:e1:7c:39:38:25:f3:90:cf:bc:53:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DE:00:79:7F:CC:05:CC:7D:2C:51:F6:50:6C:93:A5:85:52:9E:92
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/v94AeX_MBcx9LFH2UGyTpYVSnpI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:8a:b2:a8:ce:4f:58:93:2c:69:62:db:31:cc:dd:68:ab:13:
44:87:93:af:9e:91:f1:d0:07:9b:36:8a:b6:f1:05:e3:a0:0e:
30:c2:15:e5:05:95:00:51:9d:dd:d0:14:25:14:b7:48:8d:bf:
fe:b9:d2:d2:73:49:92:1e:84:e8:5f:c2:1b:92:7a:b6:59:38:
39:ee:75:fb:c4:80:b9:c0:81:6d:fa:8d:bf:e1:f2:2d:c8:b2:
76:1f:a3:7e:8e:94:8e:d9:9e:6d:f7:e2:be:7d:bb:d4:4e:0d:
d1:f4:25:70:52:da:1c:9c:fc:c5:0f:dc:7c:65:6d:50:c0:8b:
9f:3a:30:8b:2c:6b:b4:47:5b:2a:ca:c6:7e:c3:c2:46:99:aa:
d1:9a:24:aa:d4:ac:16:06:0a:ef:de:13:c6:e1:57:e1:2d:9c:
2b:fe:82:45:2e:ae:9d:67:dd:d8:f6:7c:ba:79:d1:d3:8a:d7:
7a:70:33:e0:9b:71:ae:65:68:36:37:f7:39:1f:13:0c:21:78:
92:d2:77:8d:b9:2b:a2:4e:43:47:25:48:54:7d:c4:31:c2:2c:
92:fe:57:6a:3b:e6:0f:d8:7c:e8:86:8d:2b:ce:36:c4:ee:99:
38:22:3e:6b:ed:9a:33:ac:85:11:13:6e:15:71:3c:92:fc:1b:
f4:ae:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:47:25 2025 by rpki-client