Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/NbwIZd5NhSWvFZ9AKKdcL3cJZfY.roa
File: NbwIZd5NhSWvFZ9AKKdcL3cJZfY.roa (raw, json)
Hash identifier: aZbaJ76XlWWM7fnr/e0KRFftDqqKc5CenQnTfdLG2Sg=
Subject key identifier: 35:BC:08:65:DE:4D:85:25:AF:15:9F:40:28:A7:5C:2F:77:09:65:F6
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 7A
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/NbwIZd5NhSWvFZ9AKKdcL3cJZfY.roa
Signing time: Sat 31 Aug 2024 01:29:32 +0000
ROA not before: Sat 31 Aug 2024 01:29:32 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 9621
IP address blocks: 218.40.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Aug 31 01:29:32 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=35BC0865DE4D8525AF159F4028A75C2F770965F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:cd:3a:e0:cf:31:62:f9:3e:cc:7b:eb:90:
9b:97:f4:dc:d0:e0:ac:4e:9b:ce:13:93:b1:de:68:
7a:64:cc:92:04:4a:d6:15:99:4e:24:b2:0b:5f:bf:
3a:09:87:dc:ec:51:c4:f3:5e:1c:56:04:55:7b:fa:
18:bb:80:d1:62:3e:06:07:b8:a5:85:f7:26:17:2e:
64:39:ec:8a:85:a6:93:19:8e:1e:cd:05:c9:e2:1d:
34:d9:a2:aa:cf:95:ec:f2:15:26:79:86:30:e7:c2:
e1:d9:42:cf:de:99:6b:e4:14:ca:00:d4:cb:b4:39:
5f:2a:b7:77:4d:6f:4a:1a:54:98:5f:b6:c3:7c:94:
71:24:c7:ba:41:8f:54:12:14:e5:40:ef:bb:f0:37:
8d:4d:57:2c:f0:9c:ed:40:c4:52:b6:55:81:37:cd:
73:49:b5:28:cc:79:f1:51:6f:fa:86:7f:18:d7:15:
3b:cd:5f:a6:81:84:bb:39:87:56:78:f9:25:d2:16:
4e:b2:97:c2:8d:3e:e7:d1:06:f4:b9:d6:73:39:f3:
7f:7c:bd:d3:13:8c:1d:9f:ae:73:26:c7:87:3c:80:
ee:40:40:a0:06:dd:9e:6f:97:d2:4d:58:94:74:b1:
a7:77:4f:c6:c5:83:22:b0:70:c1:3b:84:74:a7:7b:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BC:08:65:DE:4D:85:25:AF:15:9F:40:28:A7:5C:2F:77:09:65:F6
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/NbwIZd5NhSWvFZ9AKKdcL3cJZfY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.40.160.0/20
Signature Algorithm: sha256WithRSAEncryption
19:f7:08:27:89:b9:c2:30:60:a6:f3:b9:27:86:b3:59:4b:4b:
2f:e4:4e:bf:4e:65:b1:f3:d9:24:29:0b:04:45:d5:09:b0:c8:
68:51:0b:b0:e5:b9:8d:84:62:34:ab:c2:9e:25:9e:73:06:30:
bb:00:50:de:86:c9:a8:c4:a5:36:a2:b4:2a:63:ce:64:bc:4c:
c1:78:45:59:21:ae:50:88:42:1a:de:b7:9d:65:87:6f:7d:5c:
c7:ef:1e:dc:04:89:97:c6:d9:91:6d:71:42:82:bc:99:59:88:
cd:b2:69:42:5a:55:ef:d9:fa:d8:c4:8e:75:cf:6d:05:a5:5c:
0a:13:cb:64:01:2e:f7:90:b0:77:68:1e:c1:11:cf:ea:f4:e2:
98:24:ff:d7:c3:fb:b3:fd:88:e7:67:96:ad:81:93:0d:0c:b8:
f9:1b:73:d7:d3:76:75:73:bf:7e:e0:df:1a:3b:a7:61:89:ea:
c1:cd:e9:8d:1e:08:5e:0f:ba:fc:cf:26:db:d1:11:d6:34:f8:
a7:39:ad:57:d6:93:af:28:28:eb:b1:02:60:12:03:67:59:3f:
e9:b3:51:8b:8e:ef:54:cc:fd:82:7b:bb:70:84:14:58:4e:9c:
59:15:0b:0d:b8:9b:cb:f3:fc:04:f7:65:a7:60:16:1b:6f:67:
65:e2:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:40:19 2025 by rpki-client