Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30248/zdqnAY7WSJB2IjBYjFMOV4gm__A.roa
File: zdqnAY7WSJB2IjBYjFMOV4gm__A.roa (raw, json)
Hash identifier: +Ja2ZUfHNQPup9TrzjWXlgMj5v/uu5ZQbeOd8CHhiPw=
Subject key identifier: CD:DA:A7:01:8E:D6:48:90:76:22:30:58:8C:53:0E:57:88:26:FF:F0
Certificate issuer: /CN=EDC085084F8F13D9228C94C2D2F98336341E373F
Certificate serial: 02
Authority key identifier: ED:C0:85:08:4F:8F:13:D9:22:8C:94:C2:D2:F9:83:36:34:1E:37:3F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7cCFCE-PE9kijJTC0vmDNjQeNz8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/zdqnAY7WSJB2IjBYjFMOV4gm__A.roa
Signing time: Mon 02 Dec 2024 01:10:50 +0000
ROA not before: Mon 02 Dec 2024 01:10:50 +0000
ROA not after: Thu 20 Nov 2025 01:30:11 +0000
asID: 17936
IP address blocks: 2406:9900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDC085084F8F13D9228C94C2D2F98336341E373F
Validity
Not Before: Dec 2 01:10:50 2024 GMT
Not After : Nov 20 01:30:11 2025 GMT
Subject: CN=CDDAA7018ED64890762230588C530E578826FFF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:a7:cc:7f:58:c2:55:f5:c6:8f:51:f4:f2:
e0:93:2e:d6:50:bc:7d:e1:ba:4c:b1:16:28:2e:4d:
c6:17:8c:e4:ac:27:aa:65:bf:fb:06:a0:cf:7f:76:
8f:66:20:97:a6:c7:16:4a:82:9e:77:61:f1:19:71:
c1:83:ed:3e:3f:7a:c5:df:12:d9:26:6c:a3:f7:73:
27:a4:af:08:13:2b:c8:65:4b:f2:7d:dc:37:96:0f:
c0:ba:c9:4c:1f:5a:13:1e:4c:79:88:89:dc:12:85:
ef:d2:0a:06:6e:bb:8f:e1:6b:2c:62:a6:70:df:46:
e4:60:12:3e:61:0a:cf:22:5e:a3:f0:46:1a:4a:51:
53:32:97:ef:86:8d:a8:fe:3f:eb:9d:18:09:8c:70:
9f:c6:8c:59:ea:56:11:fa:2a:3b:d0:9e:fc:40:16:
97:cb:0e:17:6c:e6:82:4f:eb:c9:98:96:54:37:09:
bf:8c:19:88:c7:5c:47:98:0b:61:6d:6d:cb:b3:e0:
7b:95:fd:35:71:69:7c:c9:ea:a9:06:72:69:c4:f6:
ee:1b:80:4b:66:a6:60:1d:34:62:e5:31:5f:44:e0:
90:b7:25:f9:57:c8:12:ea:12:d3:43:2d:2f:3f:c8:
55:b0:91:cb:bb:f4:5e:ac:b8:26:00:92:01:dd:77:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DA:A7:01:8E:D6:48:90:76:22:30:58:8C:53:0E:57:88:26:FF:F0
X509v3 Authority Key Identifier:
keyid:ED:C0:85:08:4F:8F:13:D9:22:8C:94:C2:D2:F9:83:36:34:1E:37:3F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/7cCFCE-PE9kijJTC0vmDNjQeNz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7cCFCE-PE9kijJTC0vmDNjQeNz8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/zdqnAY7WSJB2IjBYjFMOV4gm__A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:9900::/32
Signature Algorithm: sha256WithRSAEncryption
85:b8:45:90:2b:f7:51:01:4d:7f:b2:58:30:54:f3:a9:cb:d9:
f1:7c:f2:bd:23:ab:90:97:fe:f3:ee:20:6e:39:f4:20:58:1f:
e9:4d:5c:d0:00:29:5a:fd:7d:23:39:e7:1b:3d:1e:a2:e6:0e:
bd:8f:20:10:86:5b:80:f9:10:05:3c:c9:1d:fe:48:c5:d2:1d:
7a:86:f4:b2:a4:f9:8e:9c:fe:50:4c:5a:a5:2a:74:a7:ee:3a:
9c:6d:9e:5d:cf:a2:da:20:77:b6:46:9d:b0:46:f1:06:3f:dd:
cf:24:6e:c7:10:51:f7:c2:f4:0b:d7:12:17:79:bb:f8:16:30:
90:e2:ae:00:f5:97:88:4e:46:0f:74:9b:e8:ea:7e:9f:60:a7:
ae:47:4e:b1:ac:0c:57:8c:3d:e9:e7:0d:25:e5:1e:f5:04:c3:
d7:55:22:ba:77:05:14:dd:8e:81:f0:e2:8a:70:61:2f:85:2e:
ef:e9:1b:2a:0a:c8:d2:3f:91:68:d1:6d:78:e0:72:ff:92:c1:
ee:9c:f9:8d:55:a2:d7:e7:8c:03:46:c2:9e:02:8c:31:1e:cf:
80:2c:da:17:fd:0f:d3:21:92:1e:46:5b:6a:16:54:0b:0b:5e:
4b:62:90:a6:55:27:6e:2d:cb:45:50:45:7e:89:84:e1:13:2d:
5f:9e:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:08 2025 by rpki-client