Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SURek4mMvfL3UQ3qr1xjnEF4aWk.roa
File: SURek4mMvfL3UQ3qr1xjnEF4aWk.roa (raw, json)
Hash identifier: 7iLTIYKi8fwVfkpR9rJ58tCXMMVGCvz432IF8PLkd2s=
Subject key identifier: 49:44:5E:93:89:8C:BD:F2:F7:51:0D:EA:AF:5C:63:9C:41:78:69:69
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: CA
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SURek4mMvfL3UQ3qr1xjnEF4aWk.roa
Signing time: Fri 01 Sep 2023 01:30:49 +0000
ROA not before: Fri 01 Sep 2023 01:30:49 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2516
IP address blocks: 210.191.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Sep 1 01:30:49 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=49445E93898CBDF2F7510DEAAF5C639C41786969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:14:15:3e:79:93:1a:6d:8b:f4:af:e8:67:
07:55:10:42:60:2f:23:12:dd:ac:52:5a:e2:d9:be:
f3:5e:ea:cc:12:50:0c:e3:40:b5:96:aa:ee:00:dc:
8b:95:3f:e2:68:51:cc:c0:4e:e5:c7:83:50:2d:2b:
17:a0:ea:4f:1b:02:29:d8:9c:3e:02:80:f5:77:44:
f8:4e:27:81:2b:3e:78:c1:cf:15:e3:47:9b:60:32:
91:1d:5c:9b:9a:c7:8e:fa:fe:1c:90:2f:ba:f8:c3:
92:a6:00:89:d8:6f:00:e6:96:af:ca:8a:2f:dd:50:
26:e2:fc:c5:d9:c6:61:2e:55:b0:96:ed:c6:bf:79:
6b:0a:d8:94:ba:56:20:ef:68:54:72:80:84:a6:ed:
e3:fb:31:a6:cb:b3:20:65:d3:92:c2:2b:bf:c5:0c:
04:89:91:33:33:cb:cc:6d:34:9e:21:f0:61:ae:f5:
5e:6d:78:4a:d1:67:33:94:5e:b9:c0:43:5e:b7:1a:
62:80:3c:77:93:ff:37:53:12:c5:5f:7d:4f:3f:35:
79:45:e3:a7:bc:38:ec:75:20:89:20:ce:bb:98:20:
88:24:60:39:3a:88:be:0d:d0:42:14:55:ad:7b:f9:
4d:36:82:1e:09:5e:2a:9b:85:a5:99:f6:71:d9:f2:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:5E:93:89:8C:BD:F2:F7:51:0D:EA:AF:5C:63:9C:41:78:69:69
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SURek4mMvfL3UQ3qr1xjnEF4aWk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.191.0.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:f7:33:b1:35:42:38:aa:f7:7f:72:38:ea:17:a1:ce:28:43:
26:a4:35:9e:5b:9d:d9:dd:68:75:58:29:ae:3f:af:59:7a:24:
29:13:4a:9e:c0:27:ec:17:e8:6e:d5:85:ea:8b:bc:a5:f1:df:
6a:44:63:ea:38:ec:bf:df:53:cb:bf:05:cf:bd:59:27:ba:91:
0a:22:f6:82:8c:3c:f1:46:26:5d:9c:c8:6f:3a:f5:cc:2e:0b:
f6:19:6e:4b:67:17:1e:5c:be:9a:3b:04:3c:73:82:36:a0:ba:
40:a8:49:4f:0d:b9:c5:ce:90:6f:bd:ec:db:41:a8:a5:ae:67:
30:5f:ed:d7:7c:4d:95:20:77:90:88:0b:84:a2:99:0f:01:31:
30:8e:98:28:2e:05:53:6a:4d:89:4b:11:63:bd:f6:6f:cf:52:
bd:26:a0:21:42:d3:63:e1:50:f0:ea:61:02:0e:9e:4f:2e:eb:
82:29:1b:ee:c6:eb:d4:e7:b7:c0:e9:a6:26:65:40:c9:d0:67:
b4:31:af:0b:b1:25:65:63:36:ba:09:ac:d0:f9:1f:3a:6b:c6:
ce:89:16:cb:60:50:98:44:05:bf:99:56:37:c1:f3:1c:a4:a2:
bf:4f:05:83:f7:41:4d:4f:14:3e:42:72:c8:4b:36:b7:2b:e2:
2d:8d:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:09 2025 by rpki-client