Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/CWX6SV6OdSh-D6tf46_8wzjGyUc.roa
File: CWX6SV6OdSh-D6tf46_8wzjGyUc.roa (raw, json)
Hash identifier: pixLtnHqAk/PHFACzZmSZPVLbRvmjmeP2cAkjoIEDNQ=
Subject key identifier: 09:65:FA:49:5E:8E:75:28:7E:0F:AB:5F:E3:AF:FC:C3:38:C6:C9:47
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: F8
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/CWX6SV6OdSh-D6tf46_8wzjGyUc.roa
Signing time: Sat 01 Jan 2022 01:31:12 +0000
ROA not before: Sat 01 Jan 2022 01:31:12 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 103.15.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:12 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=0965FA495E8E75287E0FAB5FE3AFFCC338C6C947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:57:23:f2:1b:db:ee:8b:f5:45:b1:a7:41:09:
47:f8:18:bf:04:fc:ee:b1:58:7e:c7:44:8f:b6:fb:
2b:28:d6:f4:d1:ed:35:d4:a9:bb:ec:98:16:54:48:
bc:94:21:81:2c:98:5f:1a:b5:45:63:6c:3f:7c:1e:
25:80:09:13:b8:e3:1f:b8:b7:1a:ee:3d:bd:ec:2d:
71:35:53:3e:30:db:cf:7e:3a:d3:f3:65:ad:26:00:
2d:af:83:a9:7c:21:b7:5c:cc:ed:30:38:89:76:e9:
fd:25:23:a4:d8:06:3c:4a:4f:db:9d:97:9d:62:e2:
46:84:9b:b2:c1:6b:8b:39:b4:e7:3a:4c:9f:bd:09:
de:9d:be:2a:a6:a1:ae:fe:e0:42:06:1b:b2:47:9c:
be:36:64:b2:4e:ea:b3:6f:3d:95:b4:54:31:e6:35:
1e:d0:e0:8c:1b:1e:8d:54:47:c6:9e:a0:15:de:29:
39:4b:ba:5b:e8:93:db:07:44:3b:c3:ea:7f:45:4d:
80:89:57:3e:26:7b:5a:c8:ed:1f:9c:4a:f5:31:30:
99:4c:52:1e:34:5f:60:27:1a:07:da:f0:c5:7b:ae:
a6:5c:1b:78:3f:1c:97:35:5d:a8:54:95:ad:84:cd:
b0:e2:a0:59:2a:f5:cf:86:31:e9:90:e4:ef:b5:2e:
e8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:65:FA:49:5E:8E:75:28:7E:0F:AB:5F:E3:AF:FC:C3:38:C6:C9:47
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/CWX6SV6OdSh-D6tf46_8wzjGyUc.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.0.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:41:9e:96:ca:55:d6:13:1b:c6:46:53:e5:c1:ed:48:b7:71:
40:ec:09:ec:70:7d:c2:3c:44:d4:1e:09:24:16:e4:4a:09:15:
01:8a:cc:33:5e:b9:eb:eb:8b:97:c9:b5:f2:09:23:16:e4:f9:
76:00:c7:4f:d6:53:2a:21:16:85:9e:72:b3:77:e9:af:f7:37:
d2:d0:4d:18:74:04:93:8a:9f:e9:4d:78:6e:49:49:ff:dc:96:
a4:8a:48:04:8c:eb:ed:cd:74:34:df:a7:6a:aa:cd:6e:b4:c3:
76:0e:25:08:04:65:d8:8d:12:0d:9f:35:c0:50:1c:6e:cc:c2:
1c:b5:d2:40:7f:ca:b3:8d:8a:40:f9:47:0d:77:2d:d7:68:57:
d7:b8:c6:37:28:0b:de:d3:fc:25:a1:2d:cc:ea:3a:42:39:fc:
f0:cb:2e:5a:73:5c:fb:17:f0:95:0e:42:6d:5e:c6:2f:2b:1a:
d0:96:1b:f8:79:f5:83:f7:2b:e8:07:a0:03:50:6d:f8:85:6f:
79:28:e0:d4:3f:a1:cf:11:ca:99:ed:98:42:1e:8c:91:b7:54:
e1:d9:b0:66:e9:07:f9:8c:75:0f:f8:4d:0a:bf:0f:13:0c:a7:
02:97:ee:20:6d:dd:81:3b:21:63:bf:18:5c:3a:f0:9d:ba:63:
a9:ee:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:55:56 2025 by rpki-client