Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/GvaPYFq3kaJfq22AHlsQQ-WVicc.roa
File: GvaPYFq3kaJfq22AHlsQQ-WVicc.roa (raw, json)
Hash identifier: wk4pm8o3EjEJQ+3v1FCDBd5h9VRZouFzRe1akcJ4Snc=
Subject key identifier: 1A:F6:8F:60:5A:B7:91:A2:5F:AB:6D:80:1E:5B:10:43:E5:95:89:C7
Certificate issuer: /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial: 64
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/GvaPYFq3kaJfq22AHlsQQ-WVicc.roa
Signing time: Fri 31 Jan 2025 01:31:02 +0000
ROA not before: Fri 31 Jan 2025 01:31:02 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 7671
IP address blocks: 122.50.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Validity
Not Before: Jan 31 01:31:02 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=1AF68F605AB791A25FAB6D801E5B1043E59589C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:ae:e0:b5:8e:4e:7e:29:89:78:4f:33:57:
6d:21:98:32:41:f0:8d:57:72:2a:bc:3a:ab:b8:3f:
b0:b5:49:75:4d:01:0e:d4:76:07:7d:12:d2:e2:c4:
76:44:70:8f:4a:d2:be:bb:8d:ff:8f:d4:a4:f3:06:
ba:93:a3:ee:cd:99:48:83:bd:16:9c:21:4d:60:f7:
5e:d8:11:69:0a:c3:74:80:c0:aa:2e:5d:fb:09:9a:
8e:fe:5e:f2:ad:33:f9:c4:89:ea:68:b3:5a:a0:99:
ea:ec:d2:c0:80:5c:02:99:71:92:b7:a4:f7:e9:e8:
38:b7:da:4d:dc:f9:6b:6d:56:62:bc:6a:95:6e:72:
55:0a:0d:17:d7:81:94:53:72:95:1c:27:a8:31:55:
92:9c:2e:89:f1:69:b7:e9:a9:65:25:a5:6f:14:ea:
93:91:70:13:bf:0d:d1:b5:7c:a2:5d:87:28:b6:9b:
5a:15:70:e9:b1:b9:de:a6:e1:d7:62:1b:27:43:7a:
e3:4e:c5:f1:51:f6:9d:32:67:c3:7e:0e:7c:31:0d:
02:3e:a9:b2:f1:33:c0:fd:96:84:36:6d:82:42:db:
2b:77:09:7a:41:f2:55:d7:7f:92:60:21:9b:73:d4:
7e:48:80:a2:71:1b:9c:54:97:2c:02:94:e4:78:2c:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F6:8F:60:5A:B7:91:A2:5F:AB:6D:80:1E:5B:10:43:E5:95:89:C7
X509v3 Authority Key Identifier:
keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/GvaPYFq3kaJfq22AHlsQQ-WVicc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:a2:e4:82:07:9a:80:a2:f3:2c:a1:70:1d:c2:90:58:0e:14:
82:df:38:d0:95:44:41:75:12:ba:4e:7e:f1:b1:1a:35:d8:4a:
87:20:a4:0f:33:14:da:11:7e:85:be:b0:b7:21:bc:a2:77:24:
a9:b6:2d:66:90:a4:af:51:3d:d5:2f:74:af:47:b3:1d:d8:ad:
0b:fc:3e:86:50:3d:b1:f7:2b:6c:10:ab:8e:c5:cc:45:f4:08:
58:40:a2:6e:4c:a0:f5:64:8f:55:d4:e7:f8:4b:8f:18:c6:2e:
34:d8:be:fc:56:e7:ba:be:2d:6e:14:f6:25:70:13:7c:83:7e:
fa:70:b1:47:66:45:4e:7b:1b:76:d6:8f:7c:56:f0:6d:45:89:
8e:42:a2:bc:62:af:5d:07:17:23:0c:81:e1:3b:cc:31:02:1d:
b1:27:23:94:02:b7:63:2d:c0:ad:c7:af:7c:85:cc:4a:be:21:
c8:4f:2d:70:a7:f1:b5:bd:c1:f7:30:24:17:f6:45:3c:29:05:
ce:a6:6a:74:7a:92:28:18:18:77:21:f9:70:a9:6f:31:4f:36:
2d:49:75:41:c2:b0:3a:81:05:7b:dc:9b:50:e7:de:58:ce:f7:
6e:10:b1:8a:7f:2a:6b:74:01:23:5d:ed:40:5c:a0:0f:92:c9:
a8:2f:01:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:06:36 2025 by rpki-client