Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WdTk06msRNC9r20JS7RhnXJvO6o.roa
File: WdTk06msRNC9r20JS7RhnXJvO6o.roa (raw, json)
Hash identifier: EmPNEOmWbS5vL+EmuAHjUTYUoATRZKv4Jl/Hd5yJMfc=
Subject key identifier: 59:D4:E4:D3:A9:AC:44:D0:BD:AF:6D:09:4B:B4:61:9D:72:6F:3B:AA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0954
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WdTk06msRNC9r20JS7RhnXJvO6o.roa
Signing time: Sun 30 Jun 2024 01:29:38 +0000
ROA not before: Sun 30 Jun 2024 01:29:38 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.103.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388 (0x954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:29:38 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=59D4E4D3A9AC44D0BDAF6D094BB4619D726F3BAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:1f:60:54:e5:26:16:43:26:4d:42:55:98:
3b:4c:00:cd:3d:6b:c4:43:18:dc:73:f4:88:b9:24:
a0:c6:4e:13:bd:c3:e3:9d:8c:d3:f6:b3:37:a6:f8:
60:3e:2d:97:05:27:80:7d:e9:13:fc:0e:64:d7:cc:
7a:e0:0d:57:e1:00:30:54:51:48:ea:54:41:9a:e8:
31:db:b3:0b:0c:22:08:5c:aa:49:e1:9b:3d:b6:ed:
dc:fb:09:11:dd:38:7d:e9:e5:d2:c6:46:98:f7:e4:
c6:7f:d0:f4:c4:05:99:a6:32:d4:10:05:9b:ca:9b:
60:f0:f4:46:c7:a7:fb:5e:b6:60:14:b1:98:58:54:
a3:14:12:19:dd:bd:40:75:e0:03:56:21:20:4f:54:
0b:d6:72:2c:d6:d7:b9:22:03:82:c8:ec:f6:aa:1a:
67:42:9b:17:25:a5:80:8e:58:3d:73:7a:d1:05:19:
0a:7c:68:9a:7f:39:83:eb:eb:a7:67:8a:c3:e4:19:
79:1f:e3:2d:02:d3:d8:6f:cd:59:92:16:f8:23:0f:
1f:96:0d:cd:79:db:1e:5b:01:51:cc:39:23:d0:37:
b4:9d:c9:a3:c8:85:78:47:6b:16:67:0b:46:43:36:
3e:5b:7b:a7:64:ce:4f:d1:78:5c:ff:b5:b8:b4:5b:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:E4:D3:A9:AC:44:D0:BD:AF:6D:09:4B:B4:61:9D:72:6F:3B:AA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WdTk06msRNC9r20JS7RhnXJvO6o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.103.20.0/23
Signature Algorithm: sha256WithRSAEncryption
73:1b:01:d5:66:39:6e:43:cf:57:66:5b:9f:1f:b1:45:e2:fc:
32:d8:8e:8c:2c:9e:a9:4a:7e:d6:f1:c8:3d:ec:c1:41:93:82:
34:d6:62:f2:ab:e0:af:3a:a7:37:79:53:1c:c6:6a:0e:07:7e:
95:9f:f9:e1:b0:d4:57:78:7f:1f:06:5b:bc:f1:a4:64:48:56:
47:9a:7d:ea:51:97:13:9a:2c:9f:ac:51:c9:c8:91:c6:b1:25:
4d:e0:e6:42:66:58:a0:55:6c:1a:98:5e:36:42:22:f4:74:d3:
33:aa:9b:c4:b7:33:4a:fe:84:fe:1b:f3:88:18:25:50:32:70:
2a:86:27:8b:00:dd:27:df:51:99:c5:6d:99:c0:89:00:5a:d7:
b9:2a:12:ac:3c:45:1b:93:d7:5e:ed:3b:a3:c5:e0:9f:10:f0:
10:a3:e8:ca:5a:bb:4c:b6:82:8d:17:18:a8:03:f7:f1:49:f6:
76:59:c9:55:ec:9c:d5:f7:0d:cc:e7:91:55:05:80:54:8b:8a:
87:46:04:e2:3b:e8:90:eb:10:07:df:da:8b:19:d1:31:c7:62:
31:91:df:86:a4:02:a8:89:4d:78:fb:a3:6e:79:2a:41:0d:09:
2d:ff:ab:62:13:98:07:e6:f6:4d:7f:48:8d:92:87:bc:9e:02:
e9:66:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:13:15 2025 by rpki-client