Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bw5r6vjPNro80ILDURmK0bVdAX0.roa
File: Bw5r6vjPNro80ILDURmK0bVdAX0.roa (raw, json)
Hash identifier: rjGU5sy5UlFPrYP2Nqwwvfv12+1+8Y45TEindTOcx3c=
Subject key identifier: 07:0E:6B:EA:F8:CF:36:BA:3C:D0:82:C3:51:19:8A:D1:B5:5D:01:7D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 09F0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bw5r6vjPNro80ILDURmK0bVdAX0.roa
Signing time: Sun 30 Jun 2024 01:42:25 +0000
ROA not before: Sun 30 Jun 2024 01:42:25 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.72.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2544 (0x9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:42:25 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=070E6BEAF8CF36BA3CD082C351198AD1B55D017D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:9d:6b:07:ee:f2:c2:98:d7:48:a1:8a:1e:
aa:7f:76:44:7a:a4:ff:fc:0b:71:90:70:04:96:9d:
f4:9b:28:24:a9:a5:49:dc:ef:f2:0d:3d:0e:f0:d5:
52:8e:c1:bf:29:2e:a5:88:cb:be:9e:6a:6e:41:f8:
47:a0:5d:1a:9f:b0:7e:6c:1d:d7:a0:26:23:0e:26:
64:3e:67:84:de:08:c2:59:b9:3d:54:8f:3a:b9:cf:
f8:4a:38:2f:f8:b0:59:83:54:c7:c8:66:fe:9c:95:
1c:7f:bb:b9:03:db:9c:88:fb:3b:59:81:99:ff:dd:
c3:9d:39:35:3d:ba:51:1e:8c:7f:65:f7:64:19:e3:
59:65:27:0b:76:cb:01:ed:88:ec:b6:a4:53:10:ac:
ca:45:cd:8b:c2:94:4e:88:aa:15:68:af:4b:e8:7a:
c8:dd:b8:0a:ed:d5:b1:6f:d4:e5:24:d4:c6:12:30:
d5:41:a5:13:d9:78:38:92:01:73:d2:ac:83:22:5d:
3f:3c:7a:81:63:84:23:e6:8f:46:c5:92:94:1c:28:
e4:75:10:f8:78:d6:68:2b:9f:3c:f5:44:93:0e:90:
b3:25:4c:d0:d6:65:58:9b:ad:5d:a7:01:95:07:48:
f7:3b:39:53:98:07:e8:d8:a7:2f:63:0d:6e:75:25:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0E:6B:EA:F8:CF:36:BA:3C:D0:82:C3:51:19:8A:D1:B5:5D:01:7D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bw5r6vjPNro80ILDURmK0bVdAX0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.32.0/20
Signature Algorithm: sha256WithRSAEncryption
65:40:eb:aa:fc:a3:ad:70:fc:21:5c:87:8d:29:5d:30:d0:2c:
43:76:67:da:1c:2c:dc:65:97:43:40:3f:93:d8:6c:92:14:ae:
96:8b:69:c3:cc:a3:f2:7e:bf:06:21:b4:81:83:48:82:d9:a8:
58:62:4e:9a:f0:2d:41:37:c5:b2:59:8b:f3:f3:dc:da:95:06:
7c:d8:13:5e:d4:61:ca:db:ce:27:e6:38:0e:a7:99:ef:71:7a:
c3:a0:9b:8f:eb:92:1d:19:5e:e3:95:d3:03:f7:a6:b1:25:d5:
31:32:9a:c7:c5:92:c3:b5:a2:eb:ee:db:91:7c:23:94:b1:fe:
18:82:5d:86:80:c4:85:4b:f4:6b:f5:ff:e5:f4:23:c5:8d:9b:
6a:61:e7:b5:b7:69:90:d4:57:2b:b5:7b:93:76:2b:4d:af:ea:
66:c0:28:26:a7:99:b2:eb:40:0c:c1:8c:65:a3:91:19:ac:cd:
07:ef:a2:42:58:5f:fd:2c:8e:42:54:ed:38:d7:ec:33:02:83:
22:4f:ad:29:6e:5b:8f:0f:0f:0a:29:ad:fd:d0:2a:e5:2d:dd:
e3:2c:ec:fc:a2:67:7a:d8:80:db:cd:62:d8:9e:79:a0:1f:85:
17:89:d3:d8:56:01:37:7e:b8:6e:f5:07:6f:51:c8:6b:d1:b7:
6f:3d:6b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:25:12 2025 by rpki-client