Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/HF1QDG9lT2sDq7ONtJ7E7MfhqL4.roa
File: HF1QDG9lT2sDq7ONtJ7E7MfhqL4.roa (raw, json)
Hash identifier: veCeRtKySDA4m5W73fAf0qFrIFewIZWr21/o9ti25rw=
Subject key identifier: 1C:5D:50:0C:6F:65:4F:6B:03:AB:B3:8D:B4:9E:C4:EC:C7:E1:A8:BE
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 4F
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/HF1QDG9lT2sDq7ONtJ7E7MfhqL4.roa
Signing time: Sun 31 Mar 2024 01:30:35 +0000
ROA not before: Sun 31 Mar 2024 01:30:35 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2554
IP address blocks: 211.133.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 01:30:35 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=1C5D500C6F654F6B03ABB38DB49EC4ECC7E1A8BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:34:78:d6:af:41:e9:18:cb:b8:90:c0:d2:
1f:8c:f4:98:c1:03:04:79:5f:ef:21:36:ce:07:e0:
bb:a4:ab:2e:e7:a3:24:eb:a8:cf:1f:57:e6:22:d6:
3e:62:0b:59:0c:21:d4:10:3d:7f:c1:69:7d:98:73:
a4:7b:47:a4:7f:2f:55:89:8d:70:ac:78:42:d2:f2:
4e:37:1a:5e:d4:4c:e0:7b:61:2d:aa:66:df:ae:f1:
c9:d6:56:d9:10:06:9b:26:8a:ee:2e:17:00:b0:95:
81:82:c3:83:d9:4c:00:84:c9:e1:79:1c:34:dd:68:
c1:9a:64:db:7c:57:34:f6:36:d0:38:05:33:f1:1c:
ac:80:1c:eb:bc:05:f0:29:53:e6:6c:aa:74:6e:a0:
32:7e:22:76:84:8a:22:fb:9a:43:9f:4c:a4:54:e9:
5e:ff:17:f6:dd:f3:ea:5f:10:63:0d:71:47:ee:96:
ed:38:ff:47:d4:70:bd:a3:3a:d0:77:23:4b:bf:9f:
6a:af:bc:d5:e5:04:ba:18:69:74:e7:4b:d3:61:f7:
4e:54:a5:11:48:b9:de:87:a5:f7:ac:67:8e:ae:c9:
a7:09:ba:59:dd:4e:6f:60:20:06:64:55:ab:39:be:
e5:6c:09:08:e5:6a:35:3e:2f:9c:2d:f3:c0:2c:5d:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5D:50:0C:6F:65:4F:6B:03:AB:B3:8D:B4:9E:C4:EC:C7:E1:A8:BE
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/HF1QDG9lT2sDq7ONtJ7E7MfhqL4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.133.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:34:94:06:39:d0:c1:bf:43:b6:ce:2d:0b:6f:0b:b2:21:58:
29:5b:8d:10:cf:d9:2e:27:3f:4f:df:e5:ac:98:b2:0e:69:0a:
58:6c:3d:0f:08:4e:86:f5:b8:af:90:77:60:25:61:01:34:67:
05:a3:42:55:22:1c:08:24:8f:6c:e8:23:46:54:84:79:92:6a:
c9:64:bb:f7:00:2e:b9:a3:ca:f7:db:7c:d9:8c:bf:c6:57:58:
00:e4:ed:20:f8:64:48:3c:c9:d0:ba:0f:53:d4:11:9c:f4:d6:
48:f1:71:40:62:92:7a:8b:64:2f:b3:0f:a2:ab:10:ec:e3:9e:
d7:95:e8:79:b7:20:10:14:a8:ff:73:c3:13:36:cd:3b:77:1b:
d4:bb:49:ea:57:eb:30:5d:4a:a5:83:c1:20:38:1e:1b:45:db:
d6:d0:8a:7f:5e:a1:37:ab:0c:85:2b:0f:98:01:f9:95:e9:7c:
17:91:dc:ae:12:82:27:a1:55:15:49:7c:0e:fe:99:98:d0:58:
5e:f3:06:89:ac:29:c4:a3:04:8f:38:95:e2:7a:74:32:a0:e0:
44:83:8f:ce:e7:45:4f:f8:d6:25:d9:1b:43:4c:a6:37:b8:5c:
29:40:d5:5e:af:39:e5:6e:51:d7:9e:8d:8d:6c:bf:e0:75:10:
ad:87:3b:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:50:47 2025 by rpki-client