Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10029/9GzlvvmOo7tDBtGm358Bgs1QS4k.roa
File: 9GzlvvmOo7tDBtGm358Bgs1QS4k.roa (raw, json)
Hash identifier: QMhTFVJ9aXtim8nz7JNnSXHZQJZoBNNmmbcsUoplQLE=
Subject key identifier: F4:6C:E5:BE:F9:8E:A3:BB:43:06:D1:A6:DF:9F:01:82:CD:50:4B:89
Certificate issuer: /CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
Certificate serial: 1E
Authority key identifier: 2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/9GzlvvmOo7tDBtGm358Bgs1QS4k.roa
Signing time: Wed 31 Jul 2024 01:29:44 +0000
ROA not before: Wed 31 Jul 2024 01:29:44 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2514
IP address blocks: 202.189.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
Validity
Not Before: Jul 31 01:29:44 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=F46CE5BEF98EA3BB4306D1A6DF9F0182CD504B89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c4:16:50:18:bc:61:05:96:fc:9a:b4:f6:b5:
05:56:2c:32:78:1c:3a:bf:fa:43:05:b8:2f:74:95:
e6:3c:23:36:f2:a8:af:09:07:4d:ef:48:d8:cd:ac:
5b:e1:59:8b:d5:c1:14:cf:06:44:58:87:04:8e:13:
db:d6:77:48:5c:eb:1d:f6:8d:ca:7b:91:84:5a:c6:
3a:4a:48:64:d6:06:d2:cd:cd:10:63:58:62:25:31:
8c:43:d5:cd:26:54:11:c7:7c:d1:0f:36:19:2c:12:
40:76:52:1a:f5:69:0f:a2:05:05:10:45:f9:99:a1:
1b:a1:9d:c4:ee:71:03:69:65:85:50:45:f5:d5:78:
27:16:62:b8:f4:d9:55:63:96:e9:b5:1f:04:6d:94:
c6:2c:88:2b:4b:6c:84:76:3c:39:65:07:1a:0f:76:
7c:63:ec:2c:6a:21:bd:b0:3b:99:40:c9:0b:b4:97:
db:1f:f4:60:7f:69:40:dc:b0:8f:4f:60:44:9e:1b:
d9:c3:d2:c7:8c:70:c3:a7:59:3e:3b:10:5d:29:a0:
81:a3:65:a6:93:39:e4:c2:17:3d:9b:df:bc:96:11:
67:3b:b9:69:77:37:e9:30:58:c7:49:4a:54:29:36:
80:fa:9a:9f:27:e8:a9:05:66:70:f3:15:b3:60:78:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6C:E5:BE:F9:8E:A3:BB:43:06:D1:A6:DF:9F:01:82:CD:50:4B:89
X509v3 Authority Key Identifier:
keyid:2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/9GzlvvmOo7tDBtGm358Bgs1QS4k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.189.144.0/20
Signature Algorithm: sha256WithRSAEncryption
99:c2:ab:a8:40:1a:73:1c:a0:ce:2d:b3:bb:e4:7d:09:df:39:
d9:3c:81:44:d7:35:be:12:bc:97:dc:43:1c:58:fc:5d:69:d5:
49:de:6a:44:d3:70:5f:65:46:b6:cc:a2:38:41:01:9d:56:d2:
c1:da:71:8e:57:38:52:4b:85:2f:9c:ec:70:30:83:6c:88:6a:
11:9c:3d:b0:ac:80:d7:93:2f:60:0b:60:7c:f0:d4:f7:39:4a:
2c:28:8c:70:41:70:79:06:40:58:79:2d:7b:88:a2:36:7a:f3:
c8:95:8c:bf:a9:11:0b:23:a0:bf:1e:1f:52:7f:7a:e2:75:2b:
d3:05:0f:c4:85:ea:44:48:d2:b9:93:2d:73:0f:7d:87:f4:f8:
61:af:1d:53:03:a7:05:cc:7f:3e:2f:51:43:c3:73:6f:54:44:
ed:16:28:51:ab:97:ed:2d:3d:d2:f3:c9:ff:bd:b2:ae:c1:5a:
42:b4:d0:3e:71:fa:2c:bc:83:ea:21:9a:01:fa:48:92:21:0a:
27:c4:1b:92:f4:6c:d5:dc:08:b7:48:fa:5e:6b:c8:85:d8:a3:
fb:8f:c7:88:7a:5a:51:c4:36:25:34:8b:4b:39:51:cc:40:23:
1f:eb:dd:f8:8e:5d:5e:14:bf:ad:dc:0b:aa:cf:3b:fa:05:34:
7c:7f:ca:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:10 2025 by rpki-client