Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZE5QUb6OibtYAhBbYlkhNTpPPPo.roa
File: ZE5QUb6OibtYAhBbYlkhNTpPPPo.roa (raw, json)
Hash identifier: +DHoeGC+RakR+CkpOgNrs/8Lx2OwP+aKJtuPhMjWEe0=
Subject key identifier: 64:4E:50:51:BE:8E:89:BB:58:02:10:5B:62:59:21:35:3A:4F:3C:FA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A8A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZE5QUb6OibtYAhBbYlkhNTpPPPo.roa
Signing time: Sun 30 Jun 2024 01:52:36 +0000
ROA not before: Sun 30 Jun 2024 01:52:36 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 110.162.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2698 (0xa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:52:36 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=644E5051BE8E89BB5802105B625921353A4F3CFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:63:21:9a:e9:de:fc:c2:7f:9a:51:68:6c:
e6:ac:e4:88:43:db:61:37:5d:ff:59:d8:84:1c:1a:
9b:5e:2e:56:a0:48:07:a5:b9:a1:c1:a2:83:10:e9:
60:4c:a8:9c:fb:8d:6d:e2:90:31:58:40:b9:09:3d:
30:32:98:d1:f4:8f:6d:14:fa:da:4e:00:6f:cb:f0:
ce:9d:d1:66:e3:11:3c:ca:c1:36:33:9b:e7:de:f8:
07:d4:a9:c6:f1:48:79:f0:8e:15:82:e4:d3:c0:d0:
e7:7c:b6:d1:1e:27:55:77:e3:ac:87:f6:c9:29:8f:
e2:f1:4c:f4:91:04:94:f1:29:a5:34:a7:85:fc:6f:
66:cf:ed:11:75:8a:b1:69:4c:f2:c1:91:3a:c5:0c:
46:e5:93:2c:92:09:d2:b3:bf:e2:5f:36:cc:5e:96:
8c:eb:c3:1e:f9:8c:c5:92:64:7a:23:63:4e:74:b5:
d4:e0:a2:02:a2:7f:75:f8:ec:3d:87:4c:08:c7:df:
ba:6d:7e:03:ed:ec:30:fc:fa:ae:9e:6b:05:df:79:
31:f7:e9:1d:f3:c6:8a:b9:39:0a:42:9e:4d:b0:12:
70:b4:1c:20:28:3b:ed:ea:69:17:e0:54:11:a3:18:
73:76:19:46:3e:3a:5d:ae:23:dc:14:b3:f0:40:b8:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:50:51:BE:8E:89:BB:58:02:10:5B:62:59:21:35:3A:4F:3C:FA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZE5QUb6OibtYAhBbYlkhNTpPPPo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.162.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:6f:16:c0:59:7d:52:b2:47:7b:9c:48:e3:1a:78:17:21:61:
12:a0:b2:e3:6c:49:63:57:5c:4b:15:39:7d:dc:69:17:dd:f7:
8e:79:85:9b:26:e2:5b:be:92:43:ad:46:c0:d3:17:7d:8e:24:
51:36:c9:52:c5:78:9b:66:29:22:ea:9c:39:17:90:79:87:0e:
c1:2c:33:2a:5b:1b:7c:4b:40:81:29:5c:a7:76:f0:b3:72:5b:
7c:ce:1c:fa:67:b1:7b:2c:ff:06:31:ba:cf:d7:62:d0:99:10:
51:ad:b4:74:ae:bd:95:9d:b6:b6:9f:49:8d:0f:8a:5e:6a:b3:
d4:1c:b0:f6:16:1a:28:ce:b2:64:5d:32:22:04:b9:fe:dc:01:
cd:eb:03:9a:6d:17:da:b4:a6:2b:94:cd:70:61:a9:99:a4:32:
be:4b:8b:3b:bf:a9:c3:33:59:86:79:63:eb:d1:46:d3:98:0f:
76:3f:45:4e:2f:17:3d:75:e9:39:c1:34:cf:ce:e7:82:3b:28:
a7:f4:56:d5:a8:81:29:23:00:6d:b5:fe:27:60:da:d3:c6:1d:
71:40:16:ca:82:83:d8:1c:b7:62:a2:dd:1e:59:0d:3e:58:bd:
cd:5b:54:b6:86:5f:86:6f:34:05:70:28:80:03:5e:9a:35:bb:
de:05:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:23:44 2025 by rpki-client