Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/rM0xxUU2x3sY-dTLSgoDBcKfi28.roa
File: rM0xxUU2x3sY-dTLSgoDBcKfi28.roa (raw, json)
Hash identifier: T6KnAo60JRCJqXYKayoPSCjakSanKu6VTNeJA9Jm+0w=
Subject key identifier: AC:CD:31:C5:45:36:C7:7B:18:F9:D4:CB:4A:0A:03:05:C2:9F:8B:6F
Certificate issuer: /CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Certificate serial: 51
Authority key identifier: DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/rM0xxUU2x3sY-dTLSgoDBcKfi28.roa
Signing time: Fri 31 Jan 2025 01:32:12 +0000
ROA not before: Fri 31 Jan 2025 01:32:12 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 2504
IP address blocks: 192.50.26.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Validity
Not Before: Jan 31 01:32:12 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=ACCD31C54536C77B18F9D4CB4A0A0305C29F8B6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:3d:0b:d8:4f:7c:f7:05:ef:9d:3f:f3:c6:
ec:39:13:72:ea:a5:60:d4:50:cb:78:43:7c:d8:45:
ec:db:95:2d:a4:8a:45:df:be:d6:2c:12:b7:23:25:
50:81:49:50:42:68:7e:b4:cd:0a:05:a4:aa:91:15:
8b:65:ba:3b:22:33:df:c3:4b:88:0a:60:7f:0e:c8:
aa:37:36:cb:fb:32:fc:6c:99:2e:f9:13:1e:9e:a6:
d4:e7:2c:88:82:1f:68:86:cb:a8:45:72:46:85:25:
54:9d:fd:07:da:38:78:9f:33:eb:b6:ef:0e:b4:b4:
9a:4f:dc:08:c7:9b:1a:9c:8f:39:e2:6a:7f:b8:ef:
2f:e3:54:4a:9f:d6:b4:8a:89:3d:6a:bb:6e:a1:f4:
4f:4b:a7:89:a9:10:b2:72:79:07:5c:4c:22:3e:a8:
b6:eb:1b:b8:be:9e:71:e5:71:b8:6d:ff:0a:47:a0:
7e:58:45:8c:2f:9b:b3:34:60:ee:9b:92:28:03:80:
e1:9e:41:2e:65:68:3b:f7:76:5a:a0:ca:d5:3f:99:
8a:1b:a2:13:a5:8b:9a:5e:62:36:bf:44:3f:d1:ad:
a3:53:71:18:c5:65:67:41:0e:47:fa:f0:53:29:59:
85:84:6b:77:6a:93:f4:40:33:63:6e:fe:aa:71:3c:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CD:31:C5:45:36:C7:7B:18:F9:D4:CB:4A:0A:03:05:C2:9F:8B:6F
X509v3 Authority Key Identifier:
keyid:DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/rM0xxUU2x3sY-dTLSgoDBcKfi28.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.50.26.0/24
Signature Algorithm: sha256WithRSAEncryption
64:40:a4:39:ab:e0:25:7d:d5:80:51:b9:07:c1:af:c9:92:88:
b8:6b:45:5b:ec:09:b2:d3:31:1d:f2:e3:c6:8c:a1:01:b2:75:
f9:8a:23:be:9d:7b:0d:18:d8:20:a0:cc:cc:1e:17:f0:35:a2:
01:f2:12:17:00:24:98:03:56:d7:66:43:7c:73:1a:34:c4:b1:
af:93:2d:0b:e8:fd:9d:f6:3f:82:e2:7e:1f:2e:d5:10:ae:93:
7a:86:e1:ad:46:d1:5c:95:04:08:9b:16:40:ed:16:1b:f1:e1:
9f:97:cf:ad:67:0f:6d:8a:8f:67:32:e3:6a:a5:d4:76:cd:4c:
5e:e3:5c:79:e6:d1:6e:c6:38:82:e3:48:39:3b:be:ba:4d:5a:
32:55:3f:81:64:09:f4:68:c8:67:94:49:5c:09:2e:46:60:bf:
c7:05:d0:78:07:3c:fc:9b:47:5c:d7:c5:95:01:de:07:e9:9a:
cf:cb:55:a5:7e:6e:eb:d2:56:80:04:4a:8a:68:37:89:b5:51:
ea:e5:5d:6b:a5:b1:ae:d2:41:73:46:d2:6b:87:23:2a:14:8a:
54:8c:6f:40:0e:97:7b:68:0e:df:24:af:56:2c:5e:cf:f1:98:
ae:7b:98:6b:ce:0a:48:51:c2:24:1e:c3:04:c8:e3:ed:45:d7:
db:69:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:19:50 2025 by rpki-client