Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mptX3QIWwgZ2cCDuDQTQZcM4pis.roa
File: mptX3QIWwgZ2cCDuDQTQZcM4pis.roa (raw, json)
Hash identifier: R4ElVnRe0LMAsMOpLEYa6v01a6v45CotyVvDErhr0Sw=
Subject key identifier: 9A:9B:57:DD:02:16:C2:06:76:70:20:EE:0D:04:D0:65:C3:38:A6:2B
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0160
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mptX3QIWwgZ2cCDuDQTQZcM4pis.roa
Signing time: Thu 01 Dec 2022 01:28:25 +0000
ROA not before: Thu 01 Dec 2022 01:28:25 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:28:25 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=9A9B57DD0216C206767020EE0D04D065C338A62B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:30:fa:af:d7:b3:0e:e1:33:aa:84:4a:35:
44:7f:37:84:ef:ca:c4:bd:1c:a7:be:aa:6f:3d:32:
33:0c:91:2f:b2:4c:11:a2:c6:49:ec:e5:e3:29:9d:
aa:0d:cb:24:91:8e:6c:14:04:14:ec:97:b0:34:d7:
e1:5d:a3:c0:3c:04:82:b2:f4:96:22:e5:50:34:92:
a8:b3:6c:68:fb:12:1a:60:08:b9:6b:53:4d:3b:cf:
ef:5d:8a:70:71:01:34:e9:9f:92:7f:20:d1:14:10:
19:5d:69:73:ce:00:44:bc:2e:7f:0c:68:68:f5:bd:
24:a3:55:de:88:a7:3a:a4:06:10:b0:5a:a2:62:9b:
b2:36:e0:c3:b4:14:bc:4b:9f:f8:c3:61:f2:cf:9a:
d1:8a:3a:af:d1:8e:44:b0:9f:21:eb:5f:56:6e:c5:
a1:6b:58:40:4f:43:ac:e1:9c:02:f1:0e:c4:1f:4d:
b8:11:64:09:f4:f2:3d:8e:61:62:ed:4e:38:7f:bb:
94:62:fd:7d:b9:20:60:34:d4:25:bf:bc:43:bc:7a:
dd:f5:4d:ea:99:8b:c2:b0:1e:e6:84:6b:db:d6:ce:
f0:be:b3:76:f7:58:d7:78:39:90:4e:ac:5a:4c:4a:
bd:05:18:5e:f5:bd:6b:2e:cb:d1:d3:aa:29:ac:db:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:57:DD:02:16:C2:06:76:70:20:EE:0D:04:D0:65:C3:38:A6:2B
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mptX3QIWwgZ2cCDuDQTQZcM4pis.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.168.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d4:f9:f0:8a:e5:74:3b:70:c9:2d:2e:44:47:32:df:2a:a6:
b8:98:c9:46:0c:a2:ea:d4:5c:93:e9:b9:4f:9c:de:15:4c:11:
7b:4e:e9:dd:47:29:f1:1b:ca:97:21:30:1e:f5:62:52:f8:77:
a0:71:ab:96:c5:42:3e:22:dd:51:42:cd:c7:10:ef:52:ac:97:
91:f5:9e:fc:b2:a7:2d:05:c9:ac:c5:fd:df:4e:e0:01:e6:b3:
41:fd:66:48:fc:51:dc:48:7f:41:87:10:a9:34:57:b1:1c:77:
e1:8c:d8:d2:6a:a4:c9:a9:41:99:65:9f:19:b4:0b:a6:cb:63:
2c:8e:e7:59:7e:81:60:e3:bf:12:de:fe:fb:99:76:e0:9b:1f:
73:e9:bd:50:4c:b3:36:0a:06:24:6d:51:cd:7b:54:02:da:ae:
03:83:60:aa:56:86:d3:3c:f9:1c:ae:c2:dc:99:92:99:57:72:
a3:68:2b:47:3f:e9:64:ef:44:ef:32:80:b3:1d:a0:49:29:c5:
3c:06:ac:28:8c:fb:5d:d9:9c:ce:0b:84:cd:e2:06:52:fc:ec:
2c:fc:38:c7:40:69:c3:e2:8b:1c:8f:7c:17:c3:37:4e:2d:0d:
7e:34:6b:2d:68:95:3f:5d:a3:bb:ed:6c:b6:34:1d:03:10:c0:
b7:fc:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:02 2025 by rpki-client