Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xGYh7QX-leK_wmo_FZS_rZ0XqUs.roa
File: xGYh7QX-leK_wmo_FZS_rZ0XqUs.roa (raw, json)
Hash identifier: rAIB7LxqwBS28zjafL4RYA/BsGj866nfgSkMKZTKm1U=
Subject key identifier: C4:66:21:ED:05:FE:95:E2:BF:C2:6A:3F:15:94:BF:AD:9D:17:A9:4B
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 033C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xGYh7QX-leK_wmo_FZS_rZ0XqUs.roa
Signing time: Wed 15 Jan 2025 01:15:36 +0000
ROA not before: Wed 15 Jan 2025 01:15:36 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 10013
IP address blocks: 61.205.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jan 15 01:15:36 2025 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=C46621ED05FE95E2BFC26A3F1594BFAD9D17A94B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:81:7d:95:da:de:4d:f3:0a:0f:5d:e0:f7:
8e:70:0f:aa:31:64:12:d8:76:5d:c1:0f:2c:c5:a0:
a6:de:78:8c:31:8a:f5:f8:73:9e:50:2b:ca:d9:01:
b6:06:25:73:70:0a:57:89:7f:62:7c:c4:72:32:22:
72:2f:8e:af:59:bd:c6:96:09:fc:a8:82:d2:21:29:
49:3f:ce:18:12:3f:a3:1a:03:b2:45:a5:34:b5:47:
86:ec:27:ec:51:1e:58:47:fb:b9:44:ed:ad:90:af:
5b:e8:e9:46:11:6f:04:da:21:0c:31:01:86:f2:07:
ba:b5:6e:89:6c:95:29:ea:1d:79:35:d4:2e:0e:09:
27:3e:ba:30:6d:89:b0:4e:e9:8d:32:10:94:6a:cf:
9c:40:e0:d9:35:a1:40:b2:f0:86:cb:a3:c9:de:67:
72:b9:4f:32:5d:80:c6:6f:77:75:98:cf:c8:83:a6:
ae:be:0b:e2:5b:1b:b3:1f:21:eb:5b:c4:a9:3c:96:
9c:67:7d:03:46:07:02:5f:25:4a:66:63:4e:c7:15:
97:4b:7f:8c:82:9b:1e:1d:5d:33:a0:d7:60:83:af:
54:1a:82:10:1c:4a:c2:6f:c3:9d:b6:84:87:b5:b1:
a0:f2:2e:0c:ee:78:3c:81:9c:1c:b3:2c:8b:3b:90:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:66:21:ED:05:FE:95:E2:BF:C2:6A:3F:15:94:BF:AD:9D:17:A9:4B
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xGYh7QX-leK_wmo_FZS_rZ0XqUs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.205.58.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b0:a4:3a:17:da:60:56:fe:a4:c1:dd:ec:76:8f:f2:97:c5:
e8:e0:a3:e4:35:a8:f0:86:50:99:13:2c:fc:4a:d5:8c:d1:bf:
03:02:62:28:dd:97:e6:6c:8c:61:08:12:fe:ce:db:b4:58:0a:
c1:87:e4:e1:46:99:b5:45:36:a8:f4:cb:0a:3d:98:48:18:e1:
2c:6b:1e:98:bb:9c:e5:5f:66:12:88:50:3d:5d:d9:0f:4c:f3:
4b:6d:7a:d2:43:2c:ad:64:a9:a1:92:11:92:a5:69:98:b8:5b:
8f:1a:86:d3:2b:e4:8e:7b:5b:0b:27:a7:a5:42:35:6a:0d:04:
b9:66:3e:1d:8c:5a:60:3b:47:ed:94:28:0b:9f:2c:c2:9c:21:
17:e6:0d:49:3a:a0:5a:a6:12:5d:aa:b4:e1:3f:da:58:7a:3a:
21:9f:84:67:69:84:1a:de:0b:3b:ed:f9:c6:70:53:c6:b5:7c:
be:6e:fd:a6:2d:84:1e:af:a2:4e:c0:8e:12:27:cd:10:4b:fe:
95:f0:61:8e:39:f9:3c:55:f8:03:b4:8d:cf:cb:4f:9d:7f:58:
67:00:5a:24:cc:58:cd:65:fd:93:1c:4b:3e:6f:4c:0b:bf:62:
de:24:ec:84:ba:af:77:32:a9:2d:c5:5a:de:f5:2c:04:bc:66:
af:bc:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:47:30 2025 by rpki-client