Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FD_4NR5ghe9IrEQLrEFsI-WDMio.roa
File: FD_4NR5ghe9IrEQLrEFsI-WDMio.roa (raw, json)
Hash identifier: ZRxMe+/DoJqLejWJIkE9XZNm9wmCOyjyafw9BXd0RvY=
Subject key identifier: 14:3F:F8:35:1E:60:85:EF:48:AC:44:0B:AC:41:6C:23:E5:83:32:2A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 07E8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FD_4NR5ghe9IrEQLrEFsI-WDMio.roa
Signing time: Tue 30 Apr 2024 02:10:33 +0000
ROA not before: Tue 30 Apr 2024 02:10:33 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2024 (0x7e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:10:33 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=143FF8351E6085EF48AC440BAC416C23E583322A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e0:fc:52:9b:26:a6:6e:ae:22:e6:41:13:3e:
38:c6:1f:ea:19:36:6d:ec:21:c8:e9:6d:69:6e:3d:
5b:99:48:6b:4f:cc:ab:94:7c:cf:4e:24:04:38:2b:
7d:9b:78:8b:03:c2:e2:c3:23:c2:7b:07:20:ec:5f:
cd:92:8a:65:09:d3:27:d2:df:08:57:ba:30:68:9c:
98:1f:cf:ef:20:9e:c1:f3:b9:de:1f:51:6e:26:90:
82:aa:c7:ee:e8:8d:6a:8d:a8:be:f7:9d:4b:52:bb:
6a:d1:bf:73:b1:5f:11:15:c2:9b:f4:93:29:6e:1e:
5f:7d:10:55:0e:6c:57:fc:cc:b8:08:a5:61:c0:e2:
5f:1b:89:ba:d5:06:2d:2f:96:8d:dd:80:87:9c:48:
83:18:8d:a8:fc:88:90:f4:2a:d0:6d:5e:ce:d7:a4:
74:29:3a:ff:69:05:4a:b8:80:4b:6b:7c:33:fb:8e:
a9:55:eb:f0:b8:d5:5e:4d:aa:15:8e:bb:ed:e0:04:
9a:18:a6:94:72:92:12:0b:71:77:36:0d:cc:8e:62:
ec:80:24:b3:36:d1:b9:f8:9b:61:cc:38:d4:42:53:
de:97:71:ec:26:f6:53:94:89:ed:bc:16:68:01:f1:
92:3b:6a:93:8b:97:7f:bb:50:7d:56:1e:d8:c4:c3:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:F8:35:1E:60:85:EF:48:AC:44:0B:AC:41:6C:23:E5:83:32:2A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FD_4NR5ghe9IrEQLrEFsI-WDMio.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.160.0/23
Signature Algorithm: sha256WithRSAEncryption
89:42:9a:f8:ee:bc:23:51:52:a3:9f:da:c6:93:a6:0d:5d:81:
19:94:e4:5f:73:bc:3e:93:11:28:01:ab:c5:18:d6:45:0f:f6:
e2:72:24:ec:df:b6:ea:e3:96:1e:5b:6b:dd:68:ee:89:96:58:
89:c4:81:2f:ac:e7:75:96:85:3a:dc:b0:4d:d0:ec:25:66:2a:
dc:b6:d3:08:42:6e:d1:55:4c:fa:3e:48:1b:1c:92:02:74:b8:
09:c6:f2:af:72:d9:f3:35:b0:d9:ec:1e:a4:76:bb:53:bf:07:
d4:50:57:d4:93:57:ce:67:35:19:a5:ec:2b:f6:25:66:ff:90:
b8:02:3d:5e:91:f7:b2:ad:ed:c3:92:72:97:69:9f:09:57:4a:
68:52:1a:86:fc:87:a1:28:d8:0a:b1:05:15:1b:11:5f:9d:ec:
0d:80:7e:d5:d8:f8:43:17:98:f0:64:ed:2a:65:7e:9d:d9:bb:
69:61:e7:45:6d:ca:2d:6a:7d:01:ef:43:de:41:d5:2a:69:5f:
ef:e3:25:92:73:d5:0c:0b:be:ae:b5:a7:55:26:61:23:95:ec:
4b:bf:43:d9:80:4f:b3:d8:33:ae:08:7c:5b:b7:25:99:7a:40:
5d:66:84:9f:45:d9:c2:2f:31:5f:43:7e:72:02:bb:00:94:28:
da:84:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:57:04 2025 by rpki-client