Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9S0dItSL4WzADvbkTFhXN3WGYY.roa
File: N9S0dItSL4WzADvbkTFhXN3WGYY.roa (raw, json)
Hash identifier: ZJ3wnyASO8LIYU046dSeOKSg8bEYD+slq3ANxUym6zo=
Subject key identifier: 37:D4:B4:74:8B:52:2F:85:B3:00:3B:DB:91:31:61:5C:DD:D6:19:86
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B13
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9S0dItSL4WzADvbkTFhXN3WGYY.roa
Signing time: Fri 31 Jan 2025 01:34:27 +0000
ROA not before: Fri 31 Jan 2025 01:34:27 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.73.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2835 (0xb13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 31 01:34:27 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=37D4B4748B522F85B3003BDB9131615CDDD61986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:cc:fb:64:79:b7:24:85:e5:bd:f4:c7:6a:
e9:d0:aa:85:cf:5f:a6:e0:0c:1f:88:71:bc:c7:64:
7d:6b:3a:49:bb:d5:84:c8:21:20:bb:2f:74:be:b7:
d1:39:75:64:bb:06:0d:ab:48:64:5c:82:3a:fd:9d:
9d:c5:dd:b5:80:ed:1e:43:3e:61:89:11:87:fe:fc:
98:b8:77:a8:2c:c6:31:fb:ce:1f:15:78:01:ac:1a:
a1:51:48:93:fa:9f:99:29:81:63:93:de:25:f8:58:
45:f6:8b:cb:c8:22:b1:96:69:a6:c0:c9:8c:1f:68:
6e:ed:09:fb:7b:b8:04:0c:38:ed:28:c7:bd:5e:99:
0a:c8:22:4a:d8:93:2f:8d:c4:e8:12:aa:73:49:67:
8d:a1:8d:3f:e1:f4:b8:1a:b2:a1:d7:4f:aa:5c:73:
57:4a:41:81:d3:d7:5e:d1:b4:03:5f:f0:1d:38:f9:
83:26:06:03:8c:ee:3c:29:ce:41:a0:31:93:09:19:
ec:bb:d1:16:e1:c7:9d:22:79:b1:d7:2a:8a:76:86:
6d:0d:1f:7d:d0:c1:c5:b8:7e:f5:f5:ca:6d:fa:e1:
17:19:86:12:db:9a:e9:53:c1:ba:56:a3:32:f3:90:
79:f9:9d:04:1f:b1:30:b7:b4:21:74:49:19:98:e5:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D4:B4:74:8B:52:2F:85:B3:00:3B:DB:91:31:61:5C:DD:D6:19:86
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9S0dItSL4WzADvbkTFhXN3WGYY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.128.0/18
Signature Algorithm: sha256WithRSAEncryption
62:d2:e4:a5:92:21:b0:a6:21:de:02:95:a8:07:48:9a:65:4c:
50:7d:14:17:54:dc:3e:df:22:95:25:6a:36:16:d9:4c:e2:22:
b0:0a:d9:8a:cf:f9:4d:d9:ce:b0:6f:c0:73:dc:14:f2:24:22:
71:aa:29:d6:c0:12:e3:31:88:c6:b4:7d:28:76:e1:c3:77:d9:
99:ba:0d:bc:ec:3f:ab:7d:1b:97:05:17:a1:a1:3d:d3:82:ad:
3e:59:a8:c1:ec:a8:21:7d:01:86:40:fe:de:15:6e:66:26:9a:
be:7d:8d:8d:ff:5a:91:1d:cb:ba:fd:31:a9:f4:7a:91:07:e7:
6b:30:6c:46:33:17:b2:98:80:19:88:73:f4:7b:22:91:46:fc:
fe:17:02:e8:ac:77:c1:d1:b0:39:18:be:01:5a:fe:8e:f0:31:
6c:00:d0:88:27:06:39:db:0c:d4:7c:36:47:ab:1b:9c:37:6b:
79:c3:7b:04:81:7c:43:e4:db:dc:d3:8d:d6:00:6f:bb:dd:89:
5c:42:9a:f0:a6:c3:5a:90:ca:69:df:d6:46:28:d6:59:b6:aa:
89:b7:fa:02:d2:30:6c:4a:32:36:88:8b:20:6f:18:55:71:75:
b1:4f:00:66:8e:cf:c8:4f:5e:67:c1:d1:78:67:d0:9b:cc:a6:
8b:7e:ce:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:56:00 2025 by rpki-client