Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/GCCwT7cKhj6prVZ0p2tk6II__n4.roa
File: GCCwT7cKhj6prVZ0p2tk6II__n4.roa (raw, json)
Hash identifier: h3gU3F8+Cug0WI0jR6+RiZErX/181ydG5sb4f3kHX0A=
Subject key identifier: 18:20:B0:4F:B7:0A:86:3E:A9:AD:56:74:A7:6B:64:E8:82:3F:FE:7E
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 22
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/GCCwT7cKhj6prVZ0p2tk6II__n4.roa
Signing time: Sun 30 Jun 2024 01:32:38 +0000
ROA not before: Sun 30 Jun 2024 01:32:38 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 38628
IP address blocks: 219.100.100.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Jun 30 01:32:38 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=1820B04FB70A863EA9AD5674A76B64E8823FFE7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:e0:66:28:7b:ed:6e:4f:d3:e9:b5:fa:a2:
a5:19:9c:fa:a3:0e:17:1e:02:2d:66:0d:61:a8:a5:
d9:f8:9b:7c:52:78:24:92:01:b1:8a:84:96:44:7e:
67:4b:fe:12:d6:2b:4a:ed:d7:61:a1:13:7d:67:4f:
ff:82:86:8c:cb:c3:c6:0d:a4:11:7a:30:b8:23:61:
9d:be:1b:09:76:78:4c:5d:0d:4b:01:e3:c5:9c:da:
07:27:fd:2f:02:fa:1e:78:76:ad:2a:a9:59:39:08:
9b:6a:55:8a:f5:9c:42:e0:67:80:90:dd:2f:b5:fa:
dd:04:59:12:70:a9:18:c0:13:98:cc:33:f8:5e:35:
f6:9c:ea:d9:60:6d:c1:12:ad:dc:37:9b:6a:e5:00:
cf:a5:d4:05:42:49:9c:a6:f6:bc:b7:5a:08:1c:d1:
52:a0:ea:4d:b1:a7:82:ef:f9:d8:01:72:16:4d:26:
83:44:3b:59:33:af:a4:17:56:14:c0:16:35:b1:8c:
f3:b7:3f:c1:b9:41:7b:79:ee:0f:7d:95:ab:a8:38:
b4:62:fc:8b:fb:e3:c4:87:c4:d8:46:ee:a3:51:4a:
87:79:08:ad:62:d3:7d:3f:17:41:29:eb:64:8b:7d:
54:83:0e:d8:cb:2f:ea:7f:b7:2e:c7:dc:d3:de:7a:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:20:B0:4F:B7:0A:86:3E:A9:AD:56:74:A7:6B:64:E8:82:3F:FE:7E
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/GCCwT7cKhj6prVZ0p2tk6II__n4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.100.0/22
Signature Algorithm: sha256WithRSAEncryption
05:af:02:ee:91:ab:ab:88:6d:42:1a:14:5d:a6:76:7a:e0:56:
3b:f9:8b:93:50:ef:8e:3b:2b:a6:b3:f5:aa:d8:ea:d0:fe:59:
50:4a:51:dd:7f:a4:ba:e2:b5:06:93:cd:0c:04:8c:63:dc:3d:
cc:1c:4a:f7:20:55:4d:42:74:c0:92:f9:2f:8c:1e:c8:ab:cb:
99:66:82:4f:30:c5:ac:14:16:12:36:d9:d4:f9:87:7c:fe:6c:
e9:68:da:39:54:3d:cf:c6:b8:05:59:2b:22:a6:72:04:d8:21:
5f:c8:1e:c7:b7:22:11:df:fd:6c:cc:6c:6c:f2:fa:73:81:40:
36:de:83:77:ad:4d:cb:de:1a:bc:2e:2b:ae:dd:13:96:b4:f1:
62:21:0b:f4:df:3c:95:a2:8d:5e:20:2d:f5:8f:2e:ae:e1:74:
60:84:7a:a9:01:3d:39:38:04:d4:dd:e1:e1:5f:61:ed:a0:04:
9a:53:29:6a:70:59:71:66:6c:96:78:b8:87:52:a8:13:5b:b5:
dc:50:d8:5d:75:d1:d1:f4:31:c3:3c:b5:23:b4:25:14:8e:a8:
1f:74:d2:b3:7c:6f:26:63:99:20:88:c0:f5:cb:45:79:85:07:
eb:f0:03:ee:c6:c2:a2:b3:62:94:fd:b3:89:8b:50:e3:d9:b9:
7d:4e:84:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:37:10 2025 by rpki-client