Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XRfZcONWhsOe2gXgoifHW0IkHEk.roa
File: XRfZcONWhsOe2gXgoifHW0IkHEk.roa (raw, json)
Hash identifier: +ysXr6Te2fK3f4LbTtVraHkh1hLtyoMoJKfl39oNrhA=
Subject key identifier: 5D:17:D9:70:E3:56:86:C3:9E:DA:05:E0:A2:27:C7:5B:42:24:1C:49
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A4D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XRfZcONWhsOe2gXgoifHW0IkHEk.roa
Signing time: Sun 30 Jun 2024 01:48:30 +0000
ROA not before: Sun 30 Jun 2024 01:48:30 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 219.114.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2637 (0xa4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:48:30 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=5D17D970E35686C39EDA05E0A227C75B42241C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:d1:77:7a:76:f9:97:54:dc:1d:0b:41:9e:
c1:a6:7b:64:cc:a5:32:fe:cd:d7:ec:c7:a8:d3:0f:
1f:7d:84:55:27:47:dd:70:d2:a2:82:85:2d:df:e9:
51:42:01:bd:85:a8:6e:3f:5e:d9:0e:62:e2:50:66:
9f:ff:d7:8e:0d:60:a4:a3:1e:d2:ef:ba:b9:d8:4d:
a8:72:51:e0:29:4f:32:23:90:74:fc:25:97:8e:33:
48:87:18:b3:79:ab:da:0d:01:d7:e2:a2:33:ba:c9:
39:5f:f8:ff:41:b9:8e:a4:cb:6a:b6:67:8f:35:58:
6c:31:d4:7d:c8:f6:2d:e7:af:45:5f:19:19:bc:d3:
f7:99:8d:df:03:53:d1:f1:a4:7c:ac:b6:24:71:6e:
13:fc:cf:cc:c7:06:c0:5c:32:90:6c:b4:2d:54:8a:
ae:d4:23:47:dd:c4:38:8e:85:b0:86:b4:bc:45:07:
61:9d:4e:e5:6b:09:bd:68:a8:1e:c5:40:bc:f7:2b:
f3:ea:c1:83:b9:7b:f9:b6:a2:c1:df:7f:cd:03:b1:
8a:cb:2c:e1:36:ee:4f:d8:73:79:0f:89:bb:6b:c2:
b7:a8:40:95:f1:5c:75:87:8c:ac:8d:aa:c0:36:e8:
83:c5:2d:6b:40:b9:5b:f6:78:3b:a6:7c:ca:f1:0c:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:D9:70:E3:56:86:C3:9E:DA:05:E0:A2:27:C7:5B:42:24:1C:49
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XRfZcONWhsOe2gXgoifHW0IkHEk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.114.160.0/22
Signature Algorithm: sha256WithRSAEncryption
97:5e:ca:28:12:94:6a:5d:14:55:b3:13:73:93:f8:34:11:1f:
64:46:9b:b6:dd:6d:f9:98:6f:93:7b:0c:24:4d:83:4b:8e:39:
04:e3:bd:b1:09:44:f0:2c:e4:26:51:9b:86:62:95:b1:d7:0c:
5c:24:b7:d1:f4:ba:30:43:d3:dc:10:7e:3e:f7:db:16:af:dc:
21:fe:c4:91:f6:b0:03:8f:0a:c9:5e:67:18:7c:05:20:49:c9:
09:a0:b9:6f:ec:03:d6:ec:2f:c2:9c:bb:8f:6c:4c:4e:11:c8:
04:91:d1:cf:03:f3:ad:56:06:54:9f:24:74:9b:3f:29:66:3d:
7c:d1:45:bf:a7:63:02:cb:89:a5:3e:39:e6:ec:5c:42:ab:19:
97:1a:70:bf:23:14:e9:23:dc:de:f7:b3:a3:c2:ca:ea:46:c4:
61:2e:44:89:59:47:ba:b7:01:b6:6f:50:d8:14:0e:3d:00:e7:
55:72:11:ba:26:04:3c:13:1a:3b:11:55:61:5e:f0:64:71:29:
f3:8c:f9:ba:62:3e:85:77:d9:55:be:42:3e:e2:2c:ac:77:d8:
7f:c2:32:ef:f7:0b:65:dc:79:9e:f7:b5:55:01:e7:35:77:ea:
56:0f:cc:0e:31:57:76:76:0c:fb:d9:a9:12:d0:67:ba:d9:c7:
29:89:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:21:38 2025 by rpki-client