Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/piZ4pYhMwmUzXJB0vt5Tv5wZ_t8.roa
File: piZ4pYhMwmUzXJB0vt5Tv5wZ_t8.roa (raw, json)
Hash identifier: FANF/81CUKlEbqVRU6CmlydczZM5Lg5ntr4dMy3rq2M=
Subject key identifier: A6:26:78:A5:88:4C:C2:65:33:5C:90:74:BE:DE:53:BF:9C:19:FE:DF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A0A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/piZ4pYhMwmUzXJB0vt5Tv5wZ_t8.roa
Signing time: Sun 30 Jun 2024 01:44:16 +0000
ROA not before: Sun 30 Jun 2024 01:44:16 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.102.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2570 (0xa0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:44:16 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=A62678A5884CC265335C9074BEDE53BF9C19FEDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:90:70:2b:b5:ef:48:94:e9:09:24:ee:48:
6e:1a:b6:48:cc:1d:59:71:11:69:19:54:b1:d8:ba:
b8:30:30:ca:dd:61:ce:09:f3:b1:f0:ec:60:7c:66:
48:73:14:40:d2:49:75:fc:55:79:0d:0c:c8:2f:2b:
2c:c2:df:04:8b:e6:0c:c8:90:f9:3d:f0:74:df:c3:
51:93:eb:ee:e7:8b:97:b4:cf:9f:cc:74:f3:43:73:
5b:3b:ba:1d:f8:75:b0:1e:07:d6:24:69:5c:cd:c0:
0d:d3:9b:97:dd:56:6e:5d:68:d8:49:4d:9b:92:c7:
c7:b6:4d:97:50:43:59:a3:c6:1f:e4:a6:76:d8:49:
f8:10:2c:fc:e9:8b:3d:39:5f:dd:25:da:13:3b:c9:
fa:22:b9:3a:92:46:77:f0:30:c4:f5:11:55:c3:b9:
10:42:ca:ff:f4:5d:74:cf:31:ea:e0:8f:82:3b:a0:
1f:ff:5b:da:57:6b:e1:e8:e1:02:ef:08:4b:30:3a:
c9:b7:98:ec:37:f2:e8:17:ea:6e:e4:5c:99:47:cf:
a9:39:07:ba:34:eb:82:c8:0a:1a:d0:00:bf:a5:fb:
a0:b9:48:e9:81:84:d1:0c:0d:62:a0:1d:c5:e4:0b:
b6:54:6d:b7:90:64:06:86:f3:30:db:82:9e:c8:c1:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:78:A5:88:4C:C2:65:33:5C:90:74:BE:DE:53:BF:9C:19:FE:DF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/piZ4pYhMwmUzXJB0vt5Tv5wZ_t8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.154.0/24
Signature Algorithm: sha256WithRSAEncryption
46:20:b3:d3:12:64:c3:2b:c9:94:d0:4b:bf:72:c5:50:3c:ee:
f6:08:11:20:9a:c7:e7:72:1c:2b:a1:dd:59:b6:d9:9e:eb:a1:
8d:a5:9b:fe:c3:b4:f1:e4:2a:45:dd:c7:c1:7c:f3:4d:30:ea:
55:bb:02:a6:c3:fe:57:00:c4:57:00:5f:87:90:24:97:d2:a7:
9c:f8:01:32:ae:67:cf:87:06:f3:bc:9b:90:47:5b:e4:67:89:
7c:c1:63:5e:f4:0a:47:a1:b4:18:f5:a1:be:ee:d8:83:0c:04:
90:a8:d8:a0:33:ac:91:d4:2b:d7:3b:59:49:90:63:55:ae:e3:
4e:80:88:1f:14:f3:ed:90:36:cc:7f:39:35:46:e3:44:2c:26:
77:c4:72:1e:23:ec:b1:42:bb:2a:e1:58:80:0b:a0:1a:7c:bc:
85:d6:ae:3c:4c:07:39:44:2c:4a:ee:83:bd:61:7c:20:f3:61:
a2:ab:22:cb:c2:8e:e2:83:d8:03:8d:8b:f1:62:bd:ce:ff:93:
f8:1a:2d:4c:f6:d2:b9:af:d9:26:52:c7:e1:c4:33:a3:cb:72:
5d:10:ec:8f:ba:bd:e8:fd:64:8c:7d:2f:85:c6:c6:9a:88:c4:
37:81:11:7c:77:23:a3:21:26:92:ee:c9:1d:1a:8e:6c:06:69:
2f:2d:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:44:49 2025 by rpki-client