Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/XtJ2_unfeUd-nKXb0mwjV1bCsZ4.roa
File: XtJ2_unfeUd-nKXb0mwjV1bCsZ4.roa (raw, json)
Hash identifier: OoyHMVlZjL9psldZ9ccR67jXyS9wmMM29Lvl+AiQYZ0=
Subject key identifier: 5E:D2:76:FE:E9:DF:79:47:7E:9C:A5:DB:D2:6C:23:57:56:C2:B1:9E
Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial: 56
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/XtJ2_unfeUd-nKXb0mwjV1bCsZ4.roa
Signing time: Tue 31 Dec 2024 01:28:22 +0000
ROA not before: Tue 31 Dec 2024 01:28:22 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 32787
IP address blocks: 103.28.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Validity
Not Before: Dec 31 01:28:22 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=5ED276FEE9DF79477E9CA5DBD26C235756C2B19E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:56:d6:a8:41:1e:76:6e:41:4f:15:6f:51:
92:64:b7:0b:54:f4:7b:ff:cc:16:08:a7:ca:32:f9:
e9:34:b2:4b:af:cb:d9:f5:45:d5:85:5d:19:7a:9a:
37:6d:a9:dc:a7:df:4f:04:e0:6e:c4:78:18:f7:b4:
0e:2f:c3:bd:a1:43:49:e4:87:34:e4:5a:56:4f:7d:
e0:54:b8:18:7d:31:1e:42:6c:bc:1d:98:28:ff:4d:
f2:62:38:d1:2a:53:c8:fe:29:a0:36:19:bd:79:d9:
22:4e:89:cc:cb:ad:af:b1:14:f9:22:e9:82:9c:1b:
1d:da:84:ce:33:06:0a:4c:dc:2e:20:7e:c3:8e:da:
6e:39:4f:a7:af:93:66:f8:60:19:ac:1b:ff:cd:ad:
2d:6e:26:dd:fc:8c:c6:4e:18:d2:34:f0:05:65:9f:
a6:29:4c:be:8c:0b:b8:ba:fd:83:08:2a:cf:b5:81:
48:42:1b:c7:68:25:c0:29:1e:41:90:33:65:5d:f3:
c6:53:5c:52:ed:e4:e3:cd:3e:ca:37:a3:95:a0:14:
97:c9:5b:b9:ff:b8:9f:8f:a1:84:bb:09:a4:6c:4c:
af:f1:e8:ed:63:5b:69:fe:4c:49:c8:c3:a7:9d:9e:
5a:fc:6c:da:60:14:08:13:f3:f9:c1:93:94:cd:d1:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D2:76:FE:E9:DF:79:47:7E:9C:A5:DB:D2:6C:23:57:56:C2:B1:9E
X509v3 Authority Key Identifier:
keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/XtJ2_unfeUd-nKXb0mwjV1bCsZ4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:04:2c:a6:72:6d:ef:99:87:91:48:07:93:ff:10:0a:97:2f:
b4:46:f9:cd:bc:bf:8c:48:6d:aa:aa:cf:5a:85:57:75:28:81:
5c:91:28:46:84:27:41:12:80:a4:81:67:9f:bf:4e:03:d9:13:
77:ea:a6:0b:5d:b6:08:2a:dc:e2:8b:da:b6:48:3c:6a:fd:53:
52:e3:66:35:81:ee:c9:36:99:74:6d:8c:5a:c5:22:a6:89:ac:
c6:8f:c2:6b:45:c0:de:0a:15:ae:0a:c2:24:08:c8:ff:e7:7f:
31:ea:76:17:92:f7:57:25:69:15:4c:25:ea:17:10:33:7b:bc:
0b:be:69:8b:2f:9f:4b:01:60:28:4b:d7:aa:16:45:1d:09:64:
91:02:20:72:cc:ea:57:1b:7e:49:53:ab:46:c1:b0:db:95:ec:
ed:dd:3a:54:02:21:cc:f3:5f:89:8a:e1:2c:49:01:2d:84:3f:
a4:3a:14:36:c4:96:37:d1:d1:56:d7:77:f6:02:0d:7b:f7:50:
14:ff:8c:91:ea:e4:fb:28:e4:1f:16:2b:b7:21:6f:cc:3a:db:
8a:56:60:a8:58:81:1b:6e:f2:5a:bc:ba:6a:a4:96:02:b4:0f:
45:9e:58:20:c8:82:f9:ef:de:f8:3c:bc:b4:c7:63:5a:3d:87:
24:16:21:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:32 2025 by rpki-client