Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/M9tMDsgcdN-0BOpSa6kqCIZF430.roa
File: M9tMDsgcdN-0BOpSa6kqCIZF430.roa (raw, json)
Hash identifier: /eA8Z8URK0Mh2qparI7bdD6NQfsS3SjFg/tHS1mhAaE=
Subject key identifier: 33:DB:4C:0E:C8:1C:74:DF:B4:04:EA:52:6B:A9:2A:08:86:45:E3:7D
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 02EC
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/M9tMDsgcdN-0BOpSa6kqCIZF430.roa
Signing time: Mon 30 Sep 2024 01:28:11 +0000
ROA not before: Mon 30 Sep 2024 01:28:11 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 0
IP address blocks: 210.211.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748 (0x2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Sep 30 01:28:11 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=33DB4C0EC81C74DFB404EA526BA92A088645E37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:6e:66:79:f8:f1:20:6a:d3:1f:6c:98:ac:
8f:b0:da:b7:06:e3:26:ca:fd:10:61:0f:92:e7:15:
e5:ab:d5:cf:b6:ba:c1:9e:70:8a:f9:e8:d7:1a:fc:
7b:2b:9f:c4:01:56:bc:7b:e9:93:f8:d9:fd:be:9e:
f6:e5:96:6f:12:6c:ae:72:a8:79:1a:40:ef:8e:ab:
1c:58:8b:04:13:73:d8:88:32:c9:17:54:f7:12:da:
11:01:b2:9c:d3:d8:5e:e1:42:05:2e:88:89:a7:9b:
29:45:ab:dc:38:1d:9d:9e:3c:36:03:86:38:80:01:
fe:09:08:0b:83:36:fb:0d:d9:c3:8e:b3:17:55:55:
5a:aa:88:db:3f:80:ec:94:00:e3:60:b8:79:61:fa:
8a:42:f1:b8:bc:7d:a5:e0:36:4c:c4:a4:7c:3a:67:
f8:86:6f:73:78:fd:97:db:a8:3b:91:0b:51:90:f9:
91:97:a7:6d:08:0c:2b:04:dd:7e:13:2a:11:18:cd:
c7:82:ae:12:b1:d0:3b:fd:1e:1f:b0:69:f4:20:ea:
06:97:6a:76:cb:a7:32:65:80:e0:5f:cc:ff:76:68:
5c:e9:38:32:1b:c9:91:42:24:0d:82:3c:90:bc:00:
f1:2d:51:48:1f:03:96:ef:23:0b:e2:85:a2:5f:cd:
ea:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:4C:0E:C8:1C:74:DF:B4:04:EA:52:6B:A9:2A:08:86:45:E3:7D
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/M9tMDsgcdN-0BOpSa6kqCIZF430.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.211.32.0/20
Signature Algorithm: sha256WithRSAEncryption
42:f4:db:ed:a8:74:1b:0a:9a:ab:9d:0e:c5:ea:11:91:2e:fa:
ee:45:16:e7:96:d1:b8:86:c2:4a:7b:07:9a:e2:82:fa:d4:8a:
d0:29:a7:0b:57:14:0d:e3:ea:ec:c2:2b:2c:c0:8b:2f:ef:e8:
4f:bf:ad:ba:d3:32:ca:06:57:2d:2f:cc:ec:24:02:6f:cb:66:
72:ff:f7:ca:82:bf:e8:41:ad:4b:d3:5a:2c:26:c0:8f:67:12:
a4:1c:27:ff:91:7a:f0:ba:a6:bb:fd:6e:7d:c5:32:2d:f4:9a:
5f:10:05:06:5b:25:43:c4:94:b5:e2:18:0f:ca:5a:9b:9f:cd:
6d:78:00:18:03:eb:a5:27:57:eb:07:fa:fa:05:40:49:56:30:
58:48:f3:8e:14:f4:2a:53:ee:a3:5c:b9:e8:18:7f:9c:d5:ee:
ee:7e:19:db:52:ff:fe:0e:d5:5a:f4:2a:1d:ab:a4:55:28:76:
d3:e2:2b:a4:4b:12:f9:c2:62:5d:1b:a6:b2:29:a7:21:f9:f3:
42:bb:a4:52:97:ab:94:12:1b:2c:97:f5:af:cc:dc:d9:d3:87:
d4:93:41:d0:0f:a9:ac:c0:50:b9:4f:6b:45:b1:82:db:f9:a8:
7c:54:f8:b3:7a:5b:7d:2e:2a:ed:59:f6:94:8e:02:fc:d4:60:
ae:12:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:52:25 2025 by rpki-client