Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30321/PZgSZK55zfwWeIr-B-GxnlKGlR8.roa
File: PZgSZK55zfwWeIr-B-GxnlKGlR8.roa (raw, json)
Hash identifier: aRGTgN2wyQndmc1R1mv3te/V80Qm+XfZ2sFH6XKNBOE=
Subject key identifier: 3D:98:12:64:AE:79:CD:FC:16:78:8A:FE:07:E1:B1:9E:52:86:95:1F
Certificate issuer: /CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2
Certificate serial: 4A
Authority key identifier: 54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/PZgSZK55zfwWeIr-B-GxnlKGlR8.roa
Signing time: Fri 31 Jan 2025 01:31:55 +0000
ROA not before: Fri 31 Jan 2025 01:31:55 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 63774
IP address blocks: 2402:b7c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2
Validity
Not Before: Jan 31 01:31:55 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=3D981264AE79CDFC16788AFE07E1B19E5286951F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:ed:53:1f:2b:a1:4c:f4:2f:ad:9e:8e:bd:
fb:23:9e:2d:cd:ab:a8:02:9f:1e:83:03:7c:a5:1e:
5b:62:ac:5c:17:79:11:c9:bb:19:d1:a9:88:be:ff:
4f:28:7e:b9:22:35:37:bf:16:e6:50:70:1e:92:7a:
ce:4c:ba:14:6c:44:f4:4e:df:75:ad:93:64:ca:df:
86:22:13:64:b2:a5:b7:5e:24:62:ad:9c:ab:16:e6:
67:a4:c9:c2:b1:67:26:e2:1f:3e:ed:47:39:de:3d:
35:3f:74:68:b1:4c:e9:2d:c8:e5:66:17:a4:6f:51:
88:c9:2d:2e:12:d8:9d:5a:aa:1d:17:da:f8:1f:d0:
39:5f:d7:d3:2a:6c:6c:a6:f6:0b:c8:f7:f7:00:3a:
2e:a0:f2:98:2e:e3:77:67:07:85:36:be:af:54:7b:
47:f8:99:d3:38:0e:73:f5:b8:06:0c:8c:d9:f6:21:
c2:90:93:4d:ce:10:8d:a5:29:01:d0:69:e6:82:c0:
6d:f3:02:46:3d:35:04:e2:8e:0e:d9:17:40:da:6f:
e6:c2:60:bb:11:36:fd:57:8c:ba:ca:e1:8c:85:d3:
b6:af:8d:dc:1d:8e:e9:1d:74:56:76:63:68:26:6e:
d9:47:5b:2c:11:05:87:11:5b:a4:69:47:16:83:6a:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:12:64:AE:79:CD:FC:16:78:8A:FE:07:E1:B1:9E:52:86:95:1F
X509v3 Authority Key Identifier:
keyid:54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/PZgSZK55zfwWeIr-B-GxnlKGlR8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:9c:f8:e7:bf:b0:39:b1:b7:a7:27:d9:ae:0e:1c:32:b1:56:
74:ed:0f:74:f3:b2:a2:ad:69:11:73:f3:17:4a:90:70:f5:e7:
20:00:90:74:89:d0:c9:9f:e6:f8:e0:28:ab:6e:5c:71:bb:95:
a6:cd:45:69:ad:ca:7b:b7:e4:ec:b5:f2:ba:03:7e:d4:d2:1f:
ae:aa:00:11:27:41:88:71:96:fa:67:61:b2:21:7a:c4:b0:3b:
24:0e:6f:3d:96:cc:10:22:77:5d:b0:f7:e7:58:4e:eb:21:32:
38:a3:c0:d2:a9:2a:81:90:12:81:0d:14:66:91:75:f4:3f:2e:
99:2f:8d:f5:a9:44:72:fa:37:24:18:fd:6f:1e:33:92:bc:46:
28:6a:a2:83:4c:01:8c:64:03:dc:c0:22:fe:7b:7a:1f:d2:47:
fd:76:a5:66:35:0e:1f:db:22:40:f0:cb:e7:2b:68:de:f9:d5:
7d:78:7d:69:de:f0:6d:93:65:02:bf:c3:60:ba:43:dc:5c:35:
2d:6a:2a:ce:ae:20:de:32:ad:a7:ef:e1:0b:3b:23:1a:65:74:
0b:f1:80:dd:17:18:bf:5a:c5:8d:02:0f:93:df:5e:6e:76:db:
66:5a:bc:9c:76:0a:36:41:df:8a:42:02:ac:84:08:42:85:5c:
ad:9a:94:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:22 2025 by rpki-client