Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZT5ILcSe7CY4BG5EFqFtL7uQE9o.roa
File: ZT5ILcSe7CY4BG5EFqFtL7uQE9o.roa (raw, json)
Hash identifier: oPoCIYyWipeUOx9fqkJtPby+9ZH7ltLOx2At6hyzJIc=
Subject key identifier: 65:3E:48:2D:C4:9E:EC:26:38:04:6E:44:16:A1:6D:2F:BB:90:13:DA
Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial: 4E
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZT5ILcSe7CY4BG5EFqFtL7uQE9o.roa
Signing time: Fri 31 Jan 2025 01:33:40 +0000
ROA not before: Fri 31 Jan 2025 01:33:40 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 7679
IP address blocks: 210.238.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Validity
Not Before: Jan 31 01:33:40 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=653E482DC49EEC2638046E4416A16D2FBB9013DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e2:22:50:ca:63:a3:27:61:b7:81:d7:13:01:
68:7a:99:c8:1d:55:9c:ff:f3:b8:9d:a2:53:a1:a3:
c1:b9:23:43:35:bf:75:e7:ea:b6:bf:3c:af:4f:2d:
7e:f9:e4:73:b9:2b:c0:6d:80:8b:cc:e3:9c:d9:42:
ea:17:6c:cf:05:68:e5:20:05:94:5d:90:d7:fd:a6:
a4:9e:a5:c9:dc:17:f3:80:42:48:08:19:fe:33:72:
ba:4d:c2:80:b6:3b:6d:6a:a8:5e:75:a4:91:2a:1d:
61:7e:f5:b9:4b:5c:33:8b:ef:86:52:6e:62:e8:a1:
1e:88:cb:96:c2:ce:d8:89:b2:11:6e:cf:b2:7b:f4:
b7:52:5c:1e:72:c8:47:ce:df:e8:17:01:b5:9d:c6:
55:f3:26:ad:1e:aa:99:5f:e3:de:a8:94:d4:2b:68:
e1:a1:ea:0c:66:a8:69:ba:50:69:21:f7:55:1c:9b:
02:02:68:cb:e8:65:bc:19:97:6f:62:03:a4:f9:34:
cd:06:5c:32:d8:d1:18:55:25:61:70:b8:6d:6c:63:
78:b8:c9:2b:9f:8e:6c:63:3a:14:2d:94:ef:72:42:
34:b5:67:82:c6:a6:c4:3d:e1:e7:90:91:11:78:a5:
74:77:32:40:99:82:86:b0:72:3e:e1:e6:6e:e6:1a:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3E:48:2D:C4:9E:EC:26:38:04:6E:44:16:A1:6D:2F:BB:90:13:DA
X509v3 Authority Key Identifier:
keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZT5ILcSe7CY4BG5EFqFtL7uQE9o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.238.32.0/19
Signature Algorithm: sha256WithRSAEncryption
46:bd:42:5c:8d:db:a8:96:56:b5:21:13:14:0b:93:0d:58:a1:
60:ee:31:8c:a7:66:34:9f:1b:25:78:cd:98:d6:37:e9:f9:7e:
29:76:b7:b0:4b:5c:ac:46:28:4c:f2:b1:24:2f:f2:7e:d4:73:
b5:48:59:9d:21:00:25:08:38:01:41:be:56:e8:cb:1d:04:df:
3b:f5:f4:01:2b:4b:36:23:f3:f9:31:b3:a4:40:b1:84:e2:c5:
9b:17:0c:10:b5:f9:d8:e7:e5:f2:72:49:45:b8:35:97:01:cf:
09:de:bc:c7:e8:5f:3d:89:7e:d8:fa:a9:ac:77:1a:36:0b:49:
71:32:e0:c9:e2:20:e8:09:70:e9:df:95:f4:23:ea:a8:36:46:
2b:42:b5:c0:d9:da:30:a2:ae:fa:4a:c8:28:1e:1e:dd:65:e7:
5f:15:df:5a:40:dd:0e:d5:0d:e7:07:cc:5f:46:b0:b2:28:3b:
c7:f9:d4:c8:a6:2e:8a:71:d3:d4:1d:95:14:11:1c:71:e0:6b:
00:aa:ae:e4:fe:e9:29:f6:ea:20:eb:5d:5f:8f:b8:8a:fa:51:
e3:75:a7:fb:79:d0:ce:78:30:c5:70:44:51:b6:dd:0e:71:5d:
ef:ad:be:32:9a:a9:97:6f:ff:5d:42:70:fe:38:52:d3:b0:b7:
84:c9:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:51 2025 by rpki-client