Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7EzhjIdVcz5lsqHe20KVFad3Kqk.roa
File: 7EzhjIdVcz5lsqHe20KVFad3Kqk.roa (raw, json)
Hash identifier: ueerOGg2IG+HMMrDzMEpAl8NMsuq8H86b+taJAHgX+M=
Subject key identifier: EC:4C:E1:8C:87:55:73:3E:65:B2:A1:DE:DB:42:95:15:A7:77:2A:A9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 09C2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7EzhjIdVcz5lsqHe20KVFad3Kqk.roa
Signing time: Sun 30 Jun 2024 01:40:24 +0000
ROA not before: Sun 30 Jun 2024 01:40:24 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 110.161.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2498 (0x9c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:40:24 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=EC4CE18C8755733E65B2A1DEDB429515A7772AA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:6c:d3:b8:a9:04:5b:df:d9:d0:d6:53:36:
b0:a3:a2:4d:6c:c6:9e:55:59:48:38:b7:cf:bf:3d:
d8:cf:17:95:e6:08:8f:7b:cf:9c:76:d2:6e:ff:6e:
72:a0:34:e0:a8:a4:49:32:d1:2f:ec:df:39:7b:e9:
52:6a:f7:3b:c0:bf:18:c7:7e:bc:b3:11:37:ba:f7:
5c:c8:62:f8:c3:0d:d1:bd:a1:72:33:cf:83:14:7e:
e5:c8:f1:c3:14:0d:42:46:26:6f:f6:91:5c:ee:96:
73:21:17:f1:dc:a1:93:58:7a:85:8b:09:ff:bb:89:
cb:16:c0:fb:93:20:4e:fd:61:b5:a1:1f:be:c2:93:
12:78:41:48:b8:4a:71:e5:c1:2b:ab:57:fa:1d:a3:
16:c4:e7:a5:c2:b6:97:f2:34:26:bb:ad:8b:f4:d3:
3b:f6:0e:53:51:22:d4:75:14:1e:ed:a4:0b:ea:e5:
15:86:86:11:d1:1a:ea:a8:03:33:f1:61:8a:25:66:
17:65:71:e7:4c:05:7f:29:e6:d7:05:4c:9f:8d:16:
09:60:66:90:ff:1b:a0:ab:ef:cb:35:9a:ae:7b:2d:
41:d9:c0:55:39:b3:2b:2d:06:a2:a1:1f:25:04:24:
ee:52:af:da:3e:a6:56:59:23:b2:42:c2:cf:7a:7f:
f2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4C:E1:8C:87:55:73:3E:65:B2:A1:DE:DB:42:95:15:A7:77:2A:A9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7EzhjIdVcz5lsqHe20KVFad3Kqk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.161.0.0/18
Signature Algorithm: sha256WithRSAEncryption
28:94:0b:e2:fd:3b:e2:52:55:52:e1:a6:2e:1e:11:af:36:ed:
05:75:9b:c9:6a:34:97:2d:55:d7:5f:b9:d2:0d:a0:fe:64:37:
6b:5b:ea:33:f1:cd:7d:6f:df:4d:94:5d:5d:40:c0:d4:ee:d5:
f5:d8:b0:91:e1:1f:88:93:9b:3a:08:0c:17:11:25:99:66:cd:
4d:47:76:bd:8b:8e:6b:24:7a:da:17:c7:91:32:32:15:6b:9d:
51:51:f4:6c:a9:71:86:9b:28:6b:3f:1f:47:5f:cf:dd:dd:35:
f4:f6:a8:ca:22:4b:7a:90:b2:b7:e0:a0:ab:aa:69:8e:34:9b:
b2:34:d7:d5:17:fa:21:41:d4:a2:69:ee:30:5e:c6:0c:74:a7:
ac:90:a0:76:c1:8b:b6:23:a9:01:82:97:45:19:c8:29:e4:ee:
e9:bc:cd:eb:72:45:3c:61:b1:d2:d2:ee:c8:03:b1:ec:55:d9:
8d:57:cb:b1:f4:8c:dd:c5:c8:5f:8e:74:46:93:59:2b:7f:e0:
a3:f1:6a:cf:02:8c:cd:07:2c:d9:1e:0d:4c:1d:90:2b:3a:d2:
44:9e:38:ce:86:cb:79:9d:4e:61:bd:6b:3e:7c:67:c8:cf:10:
75:00:94:44:4e:10:70:5c:54:cf:a9:51:9b:f7:28:44:ca:c7:
35:16:c5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:05:38 2025 by rpki-client