Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0B6FGGU9SqhyjFnq9Ca_c_CAaNw.roa
File: 0B6FGGU9SqhyjFnq9Ca_c_CAaNw.roa (raw, json)
Hash identifier: znjFm2akW0Qg49qJWmsScQ5Q62MBUT3I/Qxssic+Rd8=
Subject key identifier: D0:1E:85:18:65:3D:4A:A8:72:8C:59:EA:F4:26:BF:73:F0:80:68:DC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A56
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0B6FGGU9SqhyjFnq9Ca_c_CAaNw.roa
Signing time: Sun 30 Jun 2024 01:48:32 +0000
ROA not before: Sun 30 Jun 2024 01:48:32 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.159.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2646 (0xa56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:48:32 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=D01E8518653D4AA8728C59EAF426BF73F08068DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:2f:df:32:cb:7e:b7:b2:18:26:eb:20:1b:
a2:ee:52:16:da:7b:78:08:1c:67:40:8c:79:30:bb:
ff:a6:c8:b4:03:a8:51:cc:14:0a:34:f4:92:dd:45:
7d:82:a4:33:23:70:73:d5:4b:fd:21:95:77:dc:9a:
70:04:60:48:be:a9:26:16:7e:ac:b0:fa:9c:12:92:
51:ba:40:d4:01:7f:f5:ce:b2:39:c3:9d:a7:f7:1a:
fd:02:36:0f:8b:de:76:25:6a:22:f9:e8:1c:66:11:
4e:2d:11:cc:a7:2f:fa:70:60:5d:5c:91:35:65:02:
71:d0:80:59:d8:e2:c1:b0:c0:15:a4:77:11:9a:57:
2d:5e:a1:2f:0c:62:55:46:d1:8a:88:bf:d1:49:5c:
0a:2a:1d:c1:1c:41:7f:c5:33:15:2d:f5:ec:0c:2b:
bb:5f:a3:9f:d3:3a:76:e9:a4:ca:b4:51:7e:5c:d1:
4d:8b:03:7f:3f:3e:ac:ba:c6:52:60:4d:3c:23:e4:
d0:23:12:95:67:88:fd:35:be:f2:cc:3e:1a:e2:71:
53:4a:4b:6d:9f:60:ae:f3:78:92:29:2d:50:f1:9c:
17:e6:17:a7:ef:00:2b:63:bf:91:dc:db:b4:8e:27:
2d:44:0a:09:9c:8a:8e:cd:58:34:c0:00:23:e1:94:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:85:18:65:3D:4A:A8:72:8C:59:EA:F4:26:BF:73:F0:80:68:DC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0B6FGGU9SqhyjFnq9Ca_c_CAaNw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.60.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:8b:1a:b7:92:be:fc:4c:bf:6f:f2:e1:a3:c1:55:20:00:a8:
2b:39:22:38:f6:5c:66:b2:58:5e:70:29:71:a6:7e:39:71:d6:
61:4c:44:c8:13:dd:0a:45:6d:2e:a3:1e:0b:da:98:e2:84:08:
eb:38:fe:01:90:4b:32:8d:d4:53:ef:38:c3:a6:df:42:45:a9:
8a:ee:19:cb:c0:33:f5:3b:82:1e:b7:95:85:4c:09:3d:c2:4c:
56:20:69:46:e3:9f:b0:c7:36:36:1d:84:95:47:65:97:0c:9f:
48:6f:90:a1:4c:ca:f2:d3:ca:92:0b:ef:cc:ee:c8:e0:7d:d4:
4a:52:19:91:1e:a7:5b:7c:1f:75:8a:67:18:03:86:7b:c5:a2:
81:3f:7d:48:d5:8b:ad:0e:27:71:a5:ab:4f:1a:c9:9d:d3:37:
53:eb:4d:b6:de:49:4a:01:f4:0c:52:65:f6:61:b7:57:b9:54:
39:78:40:08:ef:ce:aa:ab:e0:c3:e7:1d:d0:34:78:13:f9:24:
22:b1:e1:42:42:ce:75:46:f0:ba:9e:12:48:3c:a3:d6:64:fa:
b8:5b:21:82:cb:d8:44:9f:26:9f:01:9c:b7:b6:ec:d4:86:3e:
b6:86:52:fa:c0:2f:d8:b1:3a:c7:8e:4b:06:d6:8d:ac:86:fc:
fa:b7:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:13:12 2025 by rpki-client