Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/gR-7cjj0GvYWzYEr_y0UvTVzmsQ.roa
File: gR-7cjj0GvYWzYEr_y0UvTVzmsQ.roa (raw, json)
Hash identifier: zR++WpK3VwJoc3HFXhbxM9/rXa1XF/Ip1lK1SpK3mtE=
Subject key identifier: 81:1F:BB:72:38:F4:1A:F6:16:CD:81:2B:FF:2D:14:BD:35:73:9A:C4
Certificate issuer: /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial: 4D
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/gR-7cjj0GvYWzYEr_y0UvTVzmsQ.roa
Signing time: Fri 31 Jan 2025 01:34:55 +0000
ROA not before: Fri 31 Jan 2025 01:34:55 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 63776
IP address blocks: 103.123.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Validity
Not Before: Jan 31 01:34:55 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=811FBB7238F41AF616CD812BFF2D14BD35739AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:61:67:db:ca:cf:30:59:a8:91:28:64:13:
4f:49:13:9f:a9:aa:d8:d0:6e:e6:55:18:d3:b1:6e:
45:7a:3a:64:39:ae:0a:8d:4e:07:d0:27:ef:b5:5b:
bd:30:0c:6a:e2:50:a6:17:68:b7:b8:72:ab:8e:ac:
a2:91:d9:70:c2:39:38:35:6b:48:2b:6f:08:b3:dc:
b4:a3:67:6f:b5:6a:ee:cc:c8:67:4b:cd:6e:7b:73:
39:2d:d0:04:49:b7:1a:67:01:c3:cf:34:e6:bc:50:
23:41:1c:d0:52:7b:8f:89:89:f6:07:14:15:c6:d2:
7e:5e:1f:3e:73:33:89:8e:24:c2:f0:0a:bc:e3:f8:
69:f9:48:db:c3:c8:8b:b9:8c:63:43:d8:04:de:67:
9d:92:a3:ac:59:e5:74:f3:c6:75:86:f0:38:44:21:
19:b6:ed:60:7a:3a:42:92:a4:71:d4:6d:a5:37:47:
1c:8c:f2:8d:5d:8c:79:3e:6c:7d:74:58:96:0a:e0:
05:ec:e0:1c:94:95:62:c6:ae:19:21:bd:49:4b:42:
69:58:ba:88:4e:63:89:81:7b:57:94:22:57:dc:5a:
b2:15:47:a7:7e:a7:04:3c:12:20:a8:74:12:a9:ad:
af:1e:28:35:6c:b6:bc:41:9d:7d:3d:2f:9d:46:6c:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1F:BB:72:38:F4:1A:F6:16:CD:81:2B:FF:2D:14:BD:35:73:9A:C4
X509v3 Authority Key Identifier:
keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/gR-7cjj0GvYWzYEr_y0UvTVzmsQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.180.0/22
Signature Algorithm: sha256WithRSAEncryption
68:36:fa:3c:ce:52:30:39:7c:a1:ba:86:0e:fc:82:2e:3e:92:
2d:cd:4f:4f:12:96:4d:9b:1e:3e:af:92:5e:68:31:3d:77:80:
99:8d:58:b7:09:b6:37:53:63:ec:fe:71:27:94:a4:42:79:21:
81:49:5e:30:01:78:f9:54:0b:28:b4:f2:19:e0:4a:7c:f5:43:
a9:64:64:81:ba:e0:17:eb:d7:1b:05:d6:98:9a:de:c9:ec:88:
dc:c2:bd:a2:a4:47:cc:d1:69:9c:26:38:9d:f5:c3:2a:60:5b:
67:af:ae:e3:6b:f4:46:59:18:36:11:46:66:d4:48:4a:94:34:
e9:aa:78:c5:b9:96:8e:bc:b5:c5:9d:bc:b2:d9:f1:d5:0f:00:
8a:f3:55:f1:a1:a1:b8:1c:6d:79:f1:3a:59:18:5b:a8:d1:20:
44:51:1b:47:f3:84:9d:d1:1f:db:40:02:d6:8c:c7:12:48:ae:
ff:5c:30:66:ce:39:99:60:a9:21:e6:a7:cb:0e:7c:05:ef:7c:
ae:d6:cf:f2:f6:fb:4e:f9:7b:62:d5:45:2b:6f:68:79:c9:ac:
f6:b6:d5:3b:aa:02:af:a5:25:0f:41:fa:5b:ae:dd:61:44:07:
6d:27:f4:d4:68:d0:bb:2f:e1:d8:01:ee:b5:2b:57:6d:a4:0e:
04:e9:a2:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:26 2025 by rpki-client