Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xAdAnymnDiuCKbKqw-5d8BPMuKc.roa
File: xAdAnymnDiuCKbKqw-5d8BPMuKc.roa (raw, json)
Hash identifier: gkoA6syzPqzYgHOParEEOZ7DiSVTwwSlZWPKgdiORjA=
Subject key identifier: C4:07:40:9F:29:A7:0E:2B:82:29:B2:AA:C3:EE:5D:F0:13:CC:B8:A7
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 024F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xAdAnymnDiuCKbKqw-5d8BPMuKc.roa
Signing time: Fri 31 May 2024 01:35:36 +0000
ROA not before: Fri 31 May 2024 01:35:36 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 10013
IP address blocks: 36.53.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: May 31 01:35:36 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=C407409F29A70E2B8229B2AAC3EE5DF013CCB8A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:58:40:56:9d:23:ab:3b:b8:21:3f:11:f0:
76:67:7d:64:7b:94:ed:56:08:9f:2c:3f:66:13:95:
fd:ae:f9:35:c1:d2:b1:9e:28:75:2a:06:8c:03:ac:
20:bc:82:36:9c:f2:2e:e6:cd:9b:a3:40:08:1a:48:
a9:95:9e:11:37:19:86:6a:c6:2b:8a:b7:97:53:a5:
2a:bc:25:22:89:21:02:ba:31:aa:ee:eb:13:21:b2:
64:84:27:9b:1a:7c:ca:13:40:fe:f3:a9:af:ba:9f:
6f:61:eb:c5:fc:49:a9:fb:b0:c2:be:48:1c:12:a0:
ea:29:45:0e:3d:94:26:a4:f1:86:ba:9f:67:09:a8:
fd:bc:e5:8c:11:01:a7:85:34:56:62:26:32:a5:2d:
fc:d3:a3:0d:cc:3d:b8:8a:e0:29:d0:1a:84:78:57:
af:f7:21:e7:bc:f9:85:0f:61:29:b8:0b:a1:6d:23:
9b:7f:e3:1e:de:e9:86:d7:62:45:9f:63:a1:90:3b:
d6:dd:eb:43:f2:16:06:d0:9e:5e:64:74:83:d8:fb:
6d:4b:53:52:ce:a1:5a:9c:57:ba:c3:ac:f4:03:07:
04:71:e1:da:41:c8:00:c9:9f:48:24:2e:d6:a5:11:
46:bf:44:a8:bf:e5:cc:04:88:98:65:e3:d6:aa:41:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:40:9F:29:A7:0E:2B:82:29:B2:AA:C3:EE:5D:F0:13:CC:B8:A7
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xAdAnymnDiuCKbKqw-5d8BPMuKc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.53.192.0/19
Signature Algorithm: sha256WithRSAEncryption
34:04:d1:02:e6:1a:b4:53:97:55:c9:f2:67:2f:43:d2:1e:11:
15:14:04:c3:a9:0b:f9:02:51:2b:69:c5:89:e1:f3:11:8e:f9:
87:05:b9:ee:01:19:a3:b9:58:cc:68:6e:3b:13:3d:3a:ff:30:
4f:6f:40:98:3e:6b:c5:be:51:b3:2d:3f:a5:41:69:85:67:53:
a3:fc:42:f7:69:03:9e:6f:db:f0:43:80:3f:4f:44:22:42:d0:
43:05:77:bb:db:1a:bc:a1:4c:42:68:36:16:a3:b3:78:ba:5c:
c5:29:3a:5e:9c:8b:21:4c:a4:f2:52:6b:d8:de:2a:5b:89:d5:
8f:04:e2:98:4a:90:1f:cb:b7:03:c0:0f:12:cd:04:10:19:bc:
ff:fe:25:15:b3:0c:7b:3b:1a:a5:54:7c:1c:aa:8f:1d:67:4a:
90:38:17:bd:1f:7b:8c:3f:35:7f:f3:e4:9a:40:e6:0d:f4:e4:
5f:32:57:8d:ca:ad:a1:d1:3b:28:dc:ea:c2:b4:d6:b5:01:87:
bf:c3:e9:61:bf:5a:e8:32:4f:43:e6:8e:34:50:6a:8a:0b:37:
06:9f:8c:b6:b6:ec:c3:98:d5:be:91:07:25:db:7a:a4:07:d3:
72:fc:95:d9:03:9f:45:a6:3b:fa:86:cd:ee:3e:84:36:1b:e6:
af:c9:3e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:36:56 2025 by rpki-client