Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/h3Q-8yM9FhvYUaGjw0pHi7WrjGU.roa
File: h3Q-8yM9FhvYUaGjw0pHi7WrjGU.roa (raw, json)
Hash identifier: CE7Jbg+Z+5craq5hEb86CPck9H/jLgq1RczMfVM3ZcA=
Subject key identifier: 87:74:3E:F3:23:3D:16:1B:D8:51:A1:A3:C3:4A:47:8B:B5:AB:8C:65
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 02F5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/h3Q-8yM9FhvYUaGjw0pHi7WrjGU.roa
Signing time: Fri 11 Oct 2024 01:20:43 +0000
ROA not before: Fri 11 Oct 2024 01:20:43 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 10013
IP address blocks: 61.44.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757 (0x2f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 11 01:20:43 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=87743EF3233D161BD851A1A3C34A478BB5AB8C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:0d:14:55:48:58:51:75:81:2c:d0:17:d7:
1f:f0:72:b4:71:2a:48:bb:5d:ca:6a:84:9f:58:50:
65:a8:56:11:f0:8c:b3:c6:46:d5:ca:b9:38:b4:12:
39:a3:48:d8:ef:21:5c:22:05:a9:c8:c6:94:c1:37:
cb:c8:85:1d:11:2b:6f:e7:a7:59:ad:72:d1:f9:63:
a6:04:32:03:10:91:24:73:04:2d:dc:0d:bb:39:ae:
29:e7:61:50:25:d3:96:75:27:2f:ed:20:46:04:8f:
92:66:90:65:e7:e4:34:f2:fb:bd:32:02:28:44:bf:
89:ce:10:ce:ce:bd:44:78:e6:5a:48:83:45:88:a3:
9a:d9:2a:8c:97:66:50:c1:d9:c3:36:5f:95:af:a5:
fe:0c:0b:c2:bd:17:69:e6:cf:39:28:4e:9d:bb:fe:
84:9d:72:e3:3e:7b:be:d8:e3:5d:c8:2c:f5:f7:ad:
0c:9c:32:bf:62:56:b6:54:1a:a4:ff:68:d2:f4:82:
24:45:94:89:a1:36:5b:8b:e8:b3:3d:12:28:e2:50:
f0:ce:82:2b:ef:d9:2b:bd:e1:71:a5:ef:30:6a:7c:
31:05:ff:26:19:37:9e:b0:ef:b4:b2:3c:eb:0b:5b:
95:a6:67:75:58:21:d9:52:9b:76:df:b4:eb:c8:78:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:74:3E:F3:23:3D:16:1B:D8:51:A1:A3:C3:4A:47:8B:B5:AB:8C:65
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/h3Q-8yM9FhvYUaGjw0pHi7WrjGU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.44.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:82:70:51:9a:bf:42:47:4b:ef:f6:8f:61:d4:70:07:1c:91:
12:f2:42:25:62:39:75:62:d9:cf:bb:18:41:eb:ed:87:28:41:
b6:44:75:1b:be:d5:dd:38:4b:3e:e4:0d:d9:a5:a8:dc:b5:56:
10:99:a9:b3:5d:6e:a9:44:76:cf:22:06:2f:b8:e8:51:9d:35:
13:c9:ee:cb:b1:cb:c1:6a:c8:93:29:68:2a:08:d3:2b:73:85:
52:8d:5f:53:56:6c:fa:42:fd:51:03:96:2d:44:dc:35:2a:fd:
2d:25:34:9a:1f:8e:b7:c7:9b:6f:38:9f:11:c5:d0:cc:2f:42:
e9:e9:e6:3c:62:d4:b1:50:4b:31:2e:0f:49:16:38:98:10:97:
d2:c3:ae:4e:27:e9:79:7d:3d:f7:b8:f8:e6:cd:1f:f2:77:0d:
dd:5d:84:e4:e0:b8:d6:8d:4c:ba:22:14:1c:01:2b:1c:ef:80:
8b:2f:20:ee:b8:5a:37:c0:12:87:13:0d:f6:7f:39:fb:ec:78:
ae:f0:f0:28:8e:2b:3e:96:a1:ba:a1:b6:2c:04:6d:e2:29:e9:
5b:e0:85:8a:ae:6c:20:c2:f2:cc:d9:f4:29:d2:0f:6d:03:0e:
aa:2a:97:c0:42:08:24:25:3a:a5:b9:b5:5f:4f:02:05:29:6e:
d6:7d:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:15:14 2025 by rpki-client