Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WJwREvWkXrNbU2WVNekq73nlWXY.roa
File: WJwREvWkXrNbU2WVNekq73nlWXY.roa (raw, json)
Hash identifier: OwioUA9dbs9uMqpSX+TqB17iUAITVgoeb/pQoU9R5r8=
Subject key identifier: 58:9C:11:12:F5:A4:5E:B3:5B:53:65:95:35:E9:2A:EF:79:E5:59:76
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0983
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WJwREvWkXrNbU2WVNekq73nlWXY.roa
Signing time: Sun 30 Jun 2024 01:36:22 +0000
ROA not before: Sun 30 Jun 2024 01:36:22 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.210.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2435 (0x983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:36:22 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=589C1112F5A45EB35B53659535E92AEF79E55976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:7d:8b:ca:11:d1:07:69:16:aa:43:29:94:
84:71:8b:6a:a0:8d:e8:b7:d6:55:0f:04:5c:07:67:
ad:25:7e:78:fe:9a:c0:3f:cd:bd:10:6d:cd:aa:88:
44:b7:5a:52:94:11:c7:d9:80:af:57:3a:60:f8:f3:
1f:38:ca:16:9c:a5:d4:51:fc:81:43:79:a4:4b:a2:
99:bf:5c:b4:86:95:55:75:99:91:ea:26:0d:aa:d4:
3b:04:55:94:15:63:64:ba:71:14:54:b5:a4:2a:85:
79:fa:62:3f:46:94:be:ba:d1:d4:d1:0e:81:1d:3c:
61:7f:7d:d7:d1:d5:ad:8d:01:d8:2d:d2:67:41:81:
d2:ff:4d:22:5e:55:b0:cb:a3:39:d4:c3:ff:ce:82:
12:34:6c:6a:c9:c6:e5:66:1a:b4:f9:9d:3d:2a:f2:
74:a3:77:f1:c9:c2:e6:60:b1:0c:ff:f1:93:53:db:
dd:f5:7f:8f:42:f2:43:a8:cc:48:f8:26:fc:28:c8:
ab:bb:9a:ec:c1:fb:4e:fc:bc:4e:d4:ac:a3:57:47:
82:84:31:d0:90:66:82:d2:3e:78:ea:90:84:be:4c:
13:7c:b4:74:e5:c3:75:db:89:ea:bf:ac:02:7e:39:
4e:58:18:7e:cc:28:d8:af:5b:b1:83:89:c5:76:7d:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:11:12:F5:A4:5E:B3:5B:53:65:95:35:E9:2A:EF:79:E5:59:76
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WJwREvWkXrNbU2WVNekq73nlWXY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.40.0/21
Signature Algorithm: sha256WithRSAEncryption
51:35:2a:29:31:55:4f:c2:7f:94:d0:e2:c4:62:f7:4a:74:b2:
2c:53:c8:f5:73:8d:89:e4:12:e2:76:e3:5e:e4:02:f6:16:58:
1a:08:f4:0c:79:ba:25:b7:00:bc:1e:db:ce:e3:4b:1c:73:3d:
c7:5d:5d:7c:bb:94:bc:01:9b:e0:30:6d:d8:69:e4:da:5b:aa:
ab:1b:67:c0:d7:8f:93:9e:07:fa:9b:63:33:d7:d2:01:7f:4d:
29:19:aa:61:50:ae:ab:62:29:81:2d:e6:d8:14:c3:24:12:45:
72:e3:af:41:a9:39:19:1f:1f:31:98:41:71:21:01:67:33:a0:
af:85:c9:9c:c2:12:aa:d0:74:28:62:81:9e:82:83:c6:72:9a:
43:6f:b9:14:ff:73:90:c2:2e:06:d8:48:b2:e8:14:ed:aa:a5:
2a:67:71:90:47:4f:bb:28:04:e9:c0:bd:e6:07:15:25:83:3d:
43:1b:1c:20:c6:72:7b:a9:01:92:16:49:41:3c:ce:79:60:88:
1c:a0:73:0c:72:61:df:cc:0c:61:66:9e:89:ae:b1:11:7c:b0:
4e:20:9f:23:8d:b2:a1:05:ea:44:dc:2a:02:5b:11:2e:29:d3:
b7:cc:9d:3a:69:f3:77:75:17:ba:4a:39:4b:8e:20:ea:6d:7e:
a0:c7:78:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:44:43 2025 by rpki-client