Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/Fh7N0Mvl0GZfLWDhXR409aZnmG0.roa
File: Fh7N0Mvl0GZfLWDhXR409aZnmG0.roa (raw, json)
Hash identifier: IzFVdKmyQzOiPq3GuGb5f4K2MCxNmXxrtw27zKXNWvk=
Subject key identifier: 16:1E:CD:D0:CB:E5:D0:66:5F:2D:60:E1:5D:1E:34:F5:A6:67:98:6D
Certificate issuer: /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial: 10
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/Fh7N0Mvl0GZfLWDhXR409aZnmG0.roa
Signing time: Thu 16 Jan 2025 01:38:39 +0000
ROA not before: Thu 16 Jan 2025 01:38:39 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 59108
IP address blocks: 219.121.128.0/19 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Validity
Not Before: Jan 16 01:38:39 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=161ECDD0CBE5D0665F2D60E15D1E34F5A667986D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:bf:23:4a:3a:ae:84:4e:40:c3:22:0c:63:
bc:47:3b:be:44:91:7d:08:32:90:dd:b3:09:ab:d2:
83:ef:59:c5:2d:7c:a7:4d:f9:71:2a:f5:6c:9b:86:
9b:4a:0c:9b:7d:f3:6a:1d:4c:20:d2:f3:68:8a:4b:
c2:d7:30:b2:38:f2:60:39:3f:a2:80:19:f8:61:6d:
51:2b:4a:12:d5:8c:ec:32:78:c2:8d:d0:a8:92:92:
60:fb:5f:e1:0a:df:3f:d6:ae:c8:a8:5a:ec:61:e9:
8d:f1:86:4c:c3:dd:b2:1b:ed:c0:e2:03:74:73:1a:
33:c9:6f:60:a6:d3:5d:b1:6a:99:0a:8f:97:15:e7:
d4:d4:c4:6a:e8:ce:ea:a7:80:57:31:db:3c:26:74:
ec:c9:18:e2:2d:bd:7b:17:98:ff:53:92:23:ad:f6:
6e:d3:f7:0a:4c:e5:37:ee:3c:79:da:57:29:ca:1c:
05:ca:d7:a3:d0:1a:89:54:7f:6f:e9:db:23:91:70:
75:25:23:d7:2e:db:24:6d:3c:a7:25:26:3c:23:81:
b2:d9:3d:01:1c:7c:e2:fb:e5:2c:7d:c3:9d:b0:6a:
b7:0a:ff:5a:b0:4c:76:ca:c2:41:d3:7b:ee:15:2f:
a4:4e:69:9d:82:f0:4f:00:d0:a0:7b:c4:f7:f8:cf:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1E:CD:D0:CB:E5:D0:66:5F:2D:60:E1:5D:1E:34:F5:A6:67:98:6D
X509v3 Authority Key Identifier:
keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/Fh7N0Mvl0GZfLWDhXR409aZnmG0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.121.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:2c:f9:88:22:9f:a1:7d:d0:69:72:a1:83:cd:2f:75:a6:6f:
85:09:0a:06:f8:34:80:b2:f4:bf:15:69:a4:7b:46:36:18:0f:
e8:fc:3a:32:e2:bb:7d:fe:fa:75:1c:4e:5b:19:d7:d4:9d:8e:
87:32:2c:62:d9:e3:ea:64:02:7a:ad:e6:46:7d:32:90:0d:84:
cf:56:24:f2:cc:ee:a9:2b:80:b4:f8:a0:7f:19:f0:ef:69:3d:
c7:59:e9:ac:99:be:ec:d9:be:1b:ce:8b:ca:0a:24:87:04:43:
fb:66:76:3a:4b:ca:9d:69:ea:67:48:00:b0:3b:dd:00:4b:d9:
76:88:10:73:02:bd:0a:6e:c5:77:3e:44:42:7c:3d:2e:61:11:
53:df:d4:31:8b:fd:ea:9b:b8:e7:04:a0:57:f9:7f:91:be:e1:
f5:0f:ed:7f:94:cd:2e:b6:5c:05:32:c6:6c:68:92:81:25:63:
33:71:4c:d2:ee:c0:b4:e5:41:00:d3:ea:5c:b1:df:d5:46:52:
99:16:ac:85:b5:44:d2:54:fa:de:2b:8d:5a:a7:10:09:a0:62:
84:0c:75:e9:88:bc:19:d5:a9:8a:ca:ea:b8:9a:24:c9:34:93:
d7:98:77:64:35:f8:cb:ce:39:fd:c5:29:aa:12:a2:e7:25:61:
d2:b9:38:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:03 2025 by rpki-client