Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/aIJKvD0qVlqSnXHsfe0dEEu7XRU.roa
File: aIJKvD0qVlqSnXHsfe0dEEu7XRU.roa (raw, json)
Hash identifier: mRHpP1lP4BqxVubALWMzScXa1ksILLa59jikM7BxabE=
Subject key identifier: 68:82:4A:BC:3D:2A:56:5A:92:9D:71:EC:7D:ED:1D:10:4B:BB:5D:15
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01CF
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/aIJKvD0qVlqSnXHsfe0dEEu7XRU.roa
Signing time: Wed 01 Nov 2023 01:31:17 +0000
ROA not before: Wed 01 Nov 2023 01:31:17 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 9371
IP address blocks: 110.74.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:31:17 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=68824ABC3D2A565A929D71EC7DED1D104BBB5D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:3c:b0:cb:62:6e:74:d8:2e:6b:11:24:24:
28:21:08:eb:06:54:57:33:5e:ff:5a:15:e7:2f:41:
af:b3:0e:24:8f:d8:7c:79:ba:56:4e:97:b7:5f:7b:
56:dc:d8:b3:0e:70:cf:9f:b5:66:71:ae:a7:ed:c8:
ec:09:2d:c2:42:98:d1:90:72:16:04:53:b8:7f:cb:
df:bf:3c:b9:af:3f:a3:63:05:a0:0b:8c:cf:57:8e:
e0:a6:a8:c1:86:88:56:2d:07:f8:75:05:1a:63:a6:
3b:a5:14:4f:34:4f:a2:23:42:7a:9c:76:1e:0c:b5:
f1:59:2b:42:0c:0a:6d:20:05:4f:94:c8:f8:c2:70:
aa:15:f0:8f:f5:09:72:e9:51:e7:cf:e6:ab:16:c3:
84:63:c7:83:9f:9c:7d:d7:54:6b:de:c7:1a:32:31:
3e:ea:d5:75:79:8e:5b:3a:c5:f0:56:84:5e:26:a5:
12:8a:ef:b4:be:09:be:b7:c2:01:f8:83:52:5b:57:
c8:3f:23:ff:a2:2b:45:83:48:1d:5b:03:01:5f:51:
f2:fa:e5:a2:45:22:13:06:c5:2a:e5:64:f5:60:27:
a1:32:24:78:dd:cf:0e:96:a6:ed:50:a4:06:27:3b:
71:10:68:ca:54:01:26:03:ab:3e:1f:c5:52:38:b6:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:82:4A:BC:3D:2A:56:5A:92:9D:71:EC:7D:ED:1D:10:4B:BB:5D:15
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/aIJKvD0qVlqSnXHsfe0dEEu7XRU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.74.32.0/20
Signature Algorithm: sha256WithRSAEncryption
42:eb:8c:cc:53:b5:97:4f:7d:a9:0f:bd:f4:56:e1:d6:67:39:
7b:5f:ce:50:08:e5:ca:76:68:bf:3f:ff:a2:01:44:7f:d1:f5:
1a:21:93:be:c3:2a:0d:7c:62:5a:19:47:9a:70:e3:d9:5e:31:
49:d1:ed:e6:66:9e:cf:65:a5:b3:8b:6b:55:d7:77:f4:dc:19:
3f:91:fa:b3:90:a0:0e:c1:c2:c9:20:04:13:e4:f5:46:8d:8e:
c8:4e:f6:51:2a:47:b2:1e:ad:12:d0:a2:d4:f7:e3:53:3a:1e:
c9:35:bc:1d:73:7d:81:b1:00:2c:df:7c:02:c4:6d:14:25:f2:
07:9b:8d:92:1c:34:e2:6f:65:87:ea:06:94:6d:a9:be:2f:f7:
36:77:c3:c1:91:18:bd:cc:86:d0:d7:4f:48:dd:c8:8e:79:66:
d9:53:31:2f:75:0d:cf:42:2d:a3:0a:fc:e4:e7:28:e2:85:18:
89:fa:a0:69:a3:29:67:a0:38:e3:d1:40:df:7d:13:70:26:a3:
98:73:34:98:e0:ac:05:fc:de:cd:f2:a3:db:8e:23:53:c9:4a:
9e:a0:ec:55:8c:56:f5:5c:8c:bc:15:07:72:b1:04:94:dc:98:
04:77:b7:82:91:58:b9:13:64:95:a5:5c:9a:19:9a:38:9b:f0:
99:c6:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:35 2025 by rpki-client