Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/PVKfMFwAIo9zoKYtxMd1rpaCh68.roa
File: PVKfMFwAIo9zoKYtxMd1rpaCh68.roa (raw, json)
Hash identifier: 5wsWv2ChAN9HpXxBfJc04DQp+RHZFLH668NQjNl6VlU=
Subject key identifier: 3D:52:9F:30:5C:00:22:8F:73:A0:A6:2D:C4:C7:75:AE:96:82:87:AF
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 6E
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/PVKfMFwAIo9zoKYtxMd1rpaCh68.roa
Signing time: Sat 30 Nov 2024 01:32:06 +0000
ROA not before: Sat 30 Nov 2024 01:32:06 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 2514
IP address blocks: 157.65.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 30 01:32:06 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=3D529F305C00228F73A0A62DC4C775AE968287AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:b9:b5:99:8e:33:43:f8:90:bb:99:c7:b5:
6e:53:b0:95:97:eb:85:5c:44:ad:f2:71:bc:f9:3b:
a7:49:bb:60:55:39:ca:21:65:0c:d1:20:34:1f:e1:
cb:8f:55:af:99:86:a4:49:ac:29:57:64:d7:f9:a1:
a6:c7:66:98:a2:1c:b3:e1:a2:69:75:ec:a9:2c:27:
c7:9b:5b:ad:5b:79:0f:d8:7c:8a:e0:83:10:72:21:
03:25:93:c8:c4:b4:78:d9:f1:43:80:56:b1:cc:e1:
91:d3:f5:15:18:6a:30:41:e7:56:b0:51:c7:f1:a3:
19:1a:ce:88:ed:7c:91:15:79:a0:52:5a:ef:3b:29:
e5:f8:d2:1e:99:22:05:db:b2:98:01:a5:e7:d0:cf:
56:03:bd:b8:b6:0e:41:c0:e3:6e:c5:e6:ae:fd:cf:
59:e3:6d:7c:c7:eb:3a:2a:8a:69:c9:78:b1:ab:66:
be:83:de:ae:2b:e4:b4:71:a1:da:16:02:04:d1:77:
c9:fb:ae:bf:ee:cf:21:c6:c1:c5:b2:38:00:d8:af:
79:15:5f:23:22:09:f0:85:8a:69:5f:53:76:6d:ed:
b4:b9:b7:8a:a0:3c:d9:e4:b0:f3:cb:32:4c:07:df:
08:fd:01:e3:2c:01:ca:cc:75:1f:b0:7d:37:47:76:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:9F:30:5C:00:22:8F:73:A0:A6:2D:C4:C7:75:AE:96:82:87:AF
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/PVKfMFwAIo9zoKYtxMd1rpaCh68.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.160.0/20
Signature Algorithm: sha256WithRSAEncryption
34:91:17:99:2c:2c:17:8a:24:ee:e6:75:2b:54:09:00:5f:7a:
67:aa:97:a2:fd:13:29:74:9e:67:41:1a:ca:c1:43:f9:f4:cf:
b8:2e:4c:23:9f:dc:3d:c3:19:57:7c:61:0b:ba:f5:2f:a7:94:
e6:bd:74:54:2d:4e:e6:f6:29:36:ff:d9:e3:ca:4b:20:02:7c:
a2:ba:d1:7d:95:78:18:de:82:a1:bc:e8:1e:39:00:17:ca:1f:
c7:73:1f:d4:34:20:ee:d3:31:54:86:4e:c5:f2:69:49:17:b4:
d7:d7:27:74:ca:0a:43:94:c6:f4:01:51:ac:df:f7:f5:c6:c3:
4c:85:88:39:b5:89:a3:4d:a8:0e:0c:7c:9b:26:f3:31:12:bc:
9c:0c:b4:2e:29:93:95:db:e5:c6:0f:4a:1f:e5:4c:e4:02:ad:
9c:66:d4:58:a6:60:45:c1:8c:ad:f5:0e:fa:46:47:fe:23:cc:
00:d1:63:b4:f3:01:48:0c:e8:ad:6e:e0:2a:51:78:a2:0e:46:
4f:4e:22:ff:3a:7c:81:d3:ab:42:7f:6b:7d:e8:31:e8:b1:89:
f1:b0:e8:b7:ab:df:59:53:cb:e7:37:c0:c9:76:9d:c8:47:3e:
69:14:27:b6:4a:db:5b:30:81:96:e2:88:84:45:0a:a8:82:53:
84:bf:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:06:07 2025 by rpki-client