Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8SA-GJDRtMpBIKDWDWcK0Pcc4ns.roa
File: 8SA-GJDRtMpBIKDWDWcK0Pcc4ns.roa (raw, json)
Hash identifier: q/na6paiuQxNtCcuJBRxu2Bp6PNm04E3mP9vr5y0rEM=
Subject key identifier: F1:20:3E:18:90:D1:B4:CA:41:20:A0:D6:0D:67:0A:D0:F7:1C:E2:7B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 09F5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8SA-GJDRtMpBIKDWDWcK0Pcc4ns.roa
Signing time: Sun 30 Jun 2024 01:42:27 +0000
ROA not before: Sun 30 Jun 2024 01:42:27 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.108.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2549 (0x9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:42:27 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=F1203E1890D1B4CA4120A0D60D670AD0F71CE27B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:d5:d6:4b:2d:97:3b:68:18:cb:a8:4e:06:
18:f5:60:7b:8b:39:6c:c7:2f:c6:25:24:f7:9b:99:
85:0b:f9:d1:d4:8a:31:01:9e:c1:94:15:17:0d:ed:
91:9a:39:d0:4b:d7:4c:34:73:64:87:4c:e1:22:02:
45:87:93:9d:4b:a5:2e:19:bb:33:f9:d8:0f:63:a8:
90:08:48:22:ad:7d:b5:92:4a:90:8e:fe:23:a5:31:
0f:9d:b9:95:f6:3b:1d:73:b5:06:63:de:01:28:6c:
ad:a2:d3:39:0c:d4:87:34:fb:39:d5:26:34:74:a7:
b5:23:aa:1c:94:b0:d3:d1:31:6a:28:cd:65:0f:61:
00:a3:11:4b:95:ae:14:d6:cc:e2:14:e4:9a:d3:da:
3f:04:51:78:f5:fe:54:3e:6c:ac:62:ec:ee:52:18:
23:ce:e6:9f:b0:dd:6d:8e:25:1d:1a:1a:b5:f7:e6:
85:1a:23:fd:a8:68:b9:17:a4:53:8d:07:10:a0:56:
4e:91:60:7f:ed:4a:f6:af:df:b5:5d:2d:ca:75:93:
be:d8:4b:5e:ed:70:d9:00:c2:3c:6b:27:45:a8:9c:
30:fa:ac:03:0e:27:93:db:fe:d2:3b:e7:0f:90:b8:
93:69:a9:29:83:4a:c4:11:16:58:29:ba:18:99:7f:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:3E:18:90:D1:B4:CA:41:20:A0:D6:0D:67:0A:D0:F7:1C:E2:7B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8SA-GJDRtMpBIKDWDWcK0Pcc4ns.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.108.64.0/18
Signature Algorithm: sha256WithRSAEncryption
30:2e:da:3b:db:05:45:20:44:e1:d0:85:d8:c4:f0:20:e5:5b:
18:02:11:71:1c:9c:45:68:56:31:e1:e1:30:12:cc:9d:56:bf:
bc:57:f4:68:0d:dd:5b:c6:79:22:25:c8:6a:38:99:c2:4f:2d:
3c:35:4b:e8:23:e6:3c:cb:9a:ed:51:17:9d:fb:97:ca:48:6f:
22:0e:46:79:75:d2:ba:0c:63:9c:08:ec:25:41:86:52:6d:a9:
93:fe:8c:5e:8c:da:14:1a:d3:e8:37:9a:74:76:61:4c:05:a9:
17:a2:ff:66:94:6d:8c:56:6e:7c:cf:bc:fb:a3:a4:7e:a0:28:
7c:cf:23:32:9f:96:ef:9c:2a:15:c6:47:0b:08:d7:85:ce:a0:
0e:a3:3c:c3:09:42:97:ad:35:1b:5d:42:94:53:1b:13:c2:45:
b3:6d:61:cd:25:14:a6:e5:62:a0:96:e0:c3:e4:23:3c:fb:44:
f2:2a:53:26:d2:7f:01:1a:6b:74:47:27:85:6f:e5:ac:09:dc:
b0:b2:d9:bc:a1:0b:83:7c:5c:ec:90:a9:5a:ae:e6:e7:49:8b:
42:6a:ee:f2:e8:43:a7:25:ae:2c:cc:d6:52:2a:82:45:0a:75:
b1:6b:ee:4e:5c:f7:d5:18:fa:2c:13:af:ec:40:19:46:c6:bb:
5e:4d:b4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:20:06 2025 by rpki-client