Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/9xscJtcTW-WeHnNRVY5DMCVbbPE.roa
File: 9xscJtcTW-WeHnNRVY5DMCVbbPE.roa (raw, json)
Hash identifier: zksblTLVuKotYLK7oArWGaAO8yzsfbDfhbrvdg5mY84=
Subject key identifier: F7:1B:1C:26:D7:13:5B:E5:9E:1E:73:51:55:8E:43:30:25:5B:6C:F1
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: BB
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/9xscJtcTW-WeHnNRVY5DMCVbbPE.roa
Signing time: Fri 31 Jan 2025 01:31:33 +0000
ROA not before: Fri 31 Jan 2025 01:31:33 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 18126
IP address blocks: 219.117.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: Jan 31 01:31:33 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=F71B1C26D7135BE59E1E7351558E4330255B6CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e3:2e:a5:21:8a:1e:dd:5f:da:35:20:05:f6:
b4:3b:10:62:e6:0b:72:1e:19:e7:e2:cd:9e:bb:07:
f6:a0:6c:51:93:b3:f7:30:92:96:28:99:c9:62:b3:
06:e0:72:12:e9:85:8c:fb:7a:bb:66:4a:d3:69:20:
72:02:bf:ce:b9:50:1a:eb:fc:fb:69:2e:3c:ee:2d:
ef:e7:4e:b3:bf:00:26:8c:01:d3:e6:bb:66:b6:7d:
3e:e2:07:61:d1:80:3d:c6:0a:f3:97:23:74:e4:66:
6b:90:11:bb:2f:c1:81:59:89:53:22:91:f6:8a:2b:
5d:60:b7:76:2c:9e:5b:4f:7f:7a:3e:3b:98:79:a4:
68:49:0f:1d:54:ea:a9:d7:77:ca:df:1f:06:08:44:
09:c4:f5:da:ef:ce:57:14:21:b7:4c:57:08:40:db:
ac:33:5c:43:41:c2:62:44:6a:13:a3:22:4a:ff:70:
34:4b:b0:54:62:32:10:d6:9f:39:80:48:a6:af:4d:
c2:45:b8:f1:ed:be:24:66:95:69:5d:cf:9c:63:b7:
bb:dc:67:9e:e3:68:67:58:23:80:96:73:6c:f0:ac:
0d:d6:e3:3a:03:3f:7e:81:d8:90:4f:81:7c:aa:0e:
06:2c:0f:56:42:8f:b2:72:7c:bf:50:50:18:42:7d:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:1C:26:D7:13:5B:E5:9E:1E:73:51:55:8E:43:30:25:5B:6C:F1
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/9xscJtcTW-WeHnNRVY5DMCVbbPE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.117.32.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:7a:a2:92:15:0b:72:6f:fc:0f:96:5e:06:6b:b4:9a:42:8c:
84:f2:9d:59:06:32:7e:c8:e5:af:b6:1d:41:99:26:e4:09:dd:
5d:dc:a5:37:6c:68:14:e6:cd:c9:51:8e:4c:aa:b3:13:c8:be:
03:d0:b8:aa:4a:90:db:e9:65:91:cb:b9:5e:68:96:4c:cc:ca:
0f:33:7a:b5:ba:87:5d:ca:15:fe:eb:c4:b3:42:bf:76:cb:a3:
95:ef:a6:e1:97:98:e4:d4:81:8d:15:ee:47:bb:ff:9c:e0:33:
36:87:5c:86:77:75:32:d7:af:73:17:a0:a9:bb:c0:f3:4d:d3:
61:96:ba:4d:32:5f:8e:71:d4:83:c8:1c:83:69:df:db:71:5d:
c9:22:11:2e:f1:37:72:ed:4c:eb:c1:df:f3:6e:b2:16:44:c1:
ed:3e:13:ca:2f:17:4e:0f:76:60:6d:93:54:3b:3d:96:2a:ea:
1a:0e:51:67:0f:1c:b9:05:ba:f5:98:de:0b:08:ee:96:7c:b3:
4b:69:6d:7c:c8:5c:55:b4:a1:6f:c8:17:e1:4a:77:89:d1:54:
54:97:6b:84:c8:74:4e:ea:c3:ee:04:42:2c:f2:55:f8:cf:37:
1c:65:ac:de:48:bb:4c:da:b4:6f:2f:6a:8f:f4:3c:35:50:4e:
0a:4d:1a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:20 2025 by rpki-client