Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ItkZcH8JcuZCz1k1g4dvr4prYjM.roa
File: ItkZcH8JcuZCz1k1g4dvr4prYjM.roa (raw, json)
Hash identifier: CsNPv1Pj/aBT5VazDeNrB4hICXHo47Y6aoaw97nQSP4=
Subject key identifier: 22:D9:19:70:7F:09:72:E6:42:CF:59:35:83:87:6F:AF:8A:6B:62:33
Certificate issuer: /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial: 51
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ItkZcH8JcuZCz1k1g4dvr4prYjM.roa
Signing time: Sun 30 Jun 2024 01:31:47 +0000
ROA not before: Sun 30 Jun 2024 01:31:47 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 24296
IP address blocks: 203.95.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Validity
Not Before: Jun 30 01:31:47 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=22D919707F0972E642CF593583876FAF8A6B6233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:be:b6:02:0d:e3:8d:06:cb:be:e4:bb:04:
f0:4a:bb:03:8f:5e:2c:93:aa:21:1e:c4:18:40:cd:
d1:2f:9a:62:d3:0c:95:0e:ef:16:37:27:4d:3f:4c:
7b:16:96:98:6d:53:df:98:ac:35:75:25:7b:0e:da:
c2:4d:31:cc:e6:cc:ea:89:eb:16:4d:2f:bb:fe:22:
9d:a3:a0:94:26:bc:81:86:22:28:df:ff:9d:39:e1:
1d:f5:96:8a:8d:aa:d5:90:6c:a1:e4:71:29:83:55:
3c:05:bc:b0:2f:59:d8:e7:0f:37:b3:67:60:c9:38:
3c:2f:8c:fc:96:41:e5:13:12:7e:20:63:fe:69:65:
29:29:20:0a:29:9d:44:36:0e:bf:5c:f1:d8:4c:7a:
95:d4:7f:fe:c6:49:c9:ea:08:66:9a:b3:9b:ab:98:
4e:29:d5:eb:85:f0:e0:13:05:42:79:b8:10:33:17:
e0:96:ea:5a:60:c5:b5:a7:67:82:65:76:d8:48:15:
45:6e:e2:45:aa:50:10:a5:bf:8d:d0:6d:35:11:61:
6a:fa:e3:01:c5:42:dc:71:3e:7f:3d:04:44:8e:02:
5b:04:e9:49:d3:84:47:08:3d:79:00:bf:3b:1f:11:
ea:3f:3b:95:05:fd:e3:c2:d2:c1:10:c8:93:a0:f6:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D9:19:70:7F:09:72:E6:42:CF:59:35:83:87:6F:AF:8A:6B:62:33
X509v3 Authority Key Identifier:
keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ItkZcH8JcuZCz1k1g4dvr4prYjM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.95.16.0/21
Signature Algorithm: sha256WithRSAEncryption
45:7f:17:a9:c3:aa:28:af:cd:1f:b0:eb:f0:4c:85:45:ec:09:
23:94:a6:63:50:c0:d1:8a:32:61:c5:81:d3:8a:1e:2b:bd:d1:
61:7b:17:32:33:23:7d:29:6f:f6:68:11:17:9c:d7:8f:25:dd:
a7:12:3a:f1:0b:83:f3:7f:c9:db:5b:0e:0a:70:f4:13:6d:d0:
80:24:2a:39:e1:97:bc:0b:de:90:1a:86:d0:57:d6:64:5f:63:
31:36:f9:51:30:e5:cf:35:18:8a:48:35:b2:22:30:58:3d:b7:
f4:b7:a0:11:4e:0f:57:13:1c:e8:be:8b:3d:ae:90:a6:0b:5e:
b5:21:3b:55:83:24:41:ad:58:cd:e7:05:fb:06:e9:b6:5f:b4:
95:e6:60:09:48:16:1c:a0:23:45:1b:3e:d7:4a:d6:46:bb:32:
80:4d:99:46:6e:3c:55:e0:1b:d3:a1:bb:37:04:ae:55:9f:d4:
bc:b6:a0:9a:a9:40:9b:b7:5f:a6:f6:f5:8e:e6:af:3a:02:79:
24:56:3f:a3:5c:26:ea:fe:7b:1e:2b:64:7e:61:64:64:29:2f:
53:dc:d6:14:08:d8:3c:52:7b:21:cb:d6:d8:e7:0d:5a:44:25:
c1:71:af:16:83:e5:fe:96:0e:58:1f:9d:48:5e:e1:b7:af:f7:
35:07:ab:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 1 05:27:42 2025 by rpki-client