Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/DVkcdx3RxagL7M4wY7-U2gHTQm4.roa
File: DVkcdx3RxagL7M4wY7-U2gHTQm4.roa (raw, json)
Hash identifier: qy19bLu+2CIsDGwTuwgon6wQnpqDgIZbtWS9c+fbN/0=
Subject key identifier: 0D:59:1C:77:1D:D1:C5:A8:0B:EC:CE:30:63:BF:94:DA:01:D3:42:6E
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0198
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/DVkcdx3RxagL7M4wY7-U2gHTQm4.roa
Signing time: Thu 31 Oct 2024 01:30:17 +0000
ROA not before: Thu 31 Oct 2024 01:30:17 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 59125
IP address blocks: 202.247.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Oct 31 01:30:17 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=0D591C771DD1C5A80BECCE3063BF94DA01D3426E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:df:e5:2a:3f:9f:1e:4b:53:07:5f:83:97:
66:b1:3f:fa:31:42:e7:37:f5:b2:51:fa:b0:ed:74:
6f:22:0d:fe:26:67:0f:d2:a7:a2:ff:44:d5:f8:d5:
b9:c8:7d:7c:f0:1d:2c:fc:3c:17:cb:bf:65:dd:48:
96:22:9c:c0:e4:2f:e1:fd:8f:99:95:38:7c:f1:30:
90:7e:a2:58:f3:f7:85:b7:36:e9:b9:23:70:a7:b8:
ff:1c:a6:c9:74:e7:a1:f6:ed:ed:b5:b4:5f:e1:0d:
32:94:80:7d:6f:48:cf:2c:67:46:d4:65:ae:f4:d9:
a5:1b:ad:d2:11:72:9c:90:1d:31:cc:f0:2c:14:59:
e5:83:10:d6:4d:3c:23:17:4d:a1:cd:f0:c6:00:b7:
15:ae:45:eb:9a:e5:2e:67:70:7c:8b:54:44:fd:33:
35:67:67:68:91:6a:e9:71:e0:f8:29:48:d3:e3:d6:
72:01:00:44:1e:37:f9:31:1b:80:86:1d:6d:cf:98:
0e:3b:d1:9c:df:ae:97:c5:33:77:45:58:1a:f1:20:
57:77:cd:9b:09:4f:28:61:d0:b7:03:41:26:1e:26:
fe:37:bd:1b:eb:86:71:53:fd:4a:00:5a:c6:33:18:
5f:2e:da:db:0d:e4:3d:56:f7:b9:9f:17:cc:f9:c8:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:59:1C:77:1D:D1:C5:A8:0B:EC:CE:30:63:BF:94:DA:01:D3:42:6E
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/DVkcdx3RxagL7M4wY7-U2gHTQm4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.247.160.0/21
Signature Algorithm: sha256WithRSAEncryption
10:bf:94:d6:60:d6:7f:ef:69:ba:dc:64:ff:2d:c8:53:54:fb:
95:3d:7e:90:90:ba:34:50:b8:9a:20:ef:fb:b7:e8:bf:8e:94:
31:89:9e:aa:f6:c9:9f:d1:7f:7d:62:ae:ec:66:7a:5e:bd:a5:
e6:2a:c6:6b:6f:d6:90:72:cb:f4:72:fd:3b:33:46:34:b5:76:
99:a6:f2:5d:e0:21:20:75:25:2f:48:5c:8c:5c:f4:cc:7d:cd:
fc:a7:3c:8b:a8:b6:cb:bd:3a:1b:0c:9b:3a:f3:5c:a9:06:ca:
a5:1e:6f:40:42:ce:6f:7e:14:2a:76:68:4b:db:ba:63:83:9c:
35:cb:a3:af:91:85:a6:1a:ca:42:94:d7:bc:29:48:13:8e:4a:
e2:70:4a:f9:fa:e4:c4:df:21:aa:f0:fd:65:3a:1d:7c:e2:58:
fc:4b:54:aa:f5:74:14:d4:a1:1f:39:81:20:14:f4:ab:80:50:
02:74:c1:17:93:84:73:b4:c4:2d:0c:0e:83:b3:e2:ce:0e:e8:
4c:4c:a5:d2:16:20:de:53:34:eb:41:08:1c:a9:b8:fb:9e:f3:
b4:36:af:9d:7a:54:8b:04:75:75:11:15:e7:73:ec:7e:59:d0:
12:7e:1e:b5:a8:bb:8e:e6:d8:9e:bd:2c:70:50:8b:56:3e:c1:
c5:ab:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:34:38 2025 by rpki-client