Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4mTjcSEyaMc9h7ixA6FFzeJhFBE.roa
File: 4mTjcSEyaMc9h7ixA6FFzeJhFBE.roa (raw, json)
Hash identifier: Fgic/TI9qQf3dHNWHzbWcF7NLw6R1nj6j8N4C7Jb3rI=
Subject key identifier: E2:64:E3:71:21:32:68:C7:3D:87:B8:B1:03:A1:45:CD:E2:61:14:11
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0317
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4mTjcSEyaMc9h7ixA6FFzeJhFBE.roa
Signing time: Thu 01 Jun 2023 16:05:33 +0000
ROA not before: Thu 01 Jun 2023 16:05:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:05:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=E264E371213268C73D87B8B103A145CDE2611411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e8:77:e5:5d:3a:39:5e:16:68:26:5c:9d:3c:
68:27:68:9f:8c:02:63:60:74:cc:fa:16:b9:da:0a:
d9:38:88:50:4e:68:69:90:aa:c2:91:2b:76:3b:16:
4b:bb:3a:4e:3c:ff:70:21:69:16:f0:5b:a9:e4:57:
9d:f5:91:cf:0e:5a:15:73:32:24:5f:99:5f:a6:4d:
a0:7e:08:79:f7:5a:31:dc:9b:ae:32:8e:cf:a0:6a:
9f:97:f5:19:b6:ef:db:66:df:7c:92:7d:c2:1a:a7:
c4:7c:a5:b9:03:0d:b4:12:0e:1a:de:84:64:56:73:
3a:cf:b1:56:1c:e7:41:01:9e:86:1e:5c:9d:db:f8:
30:21:7e:8e:47:eb:f3:65:56:a0:1b:56:14:8d:f9:
6d:53:6e:a3:83:c3:a1:67:f6:01:b9:d0:1b:66:28:
52:87:2a:2c:18:8d:f4:57:8c:6a:38:19:4e:c8:0b:
0b:c4:b6:bb:04:ec:05:fe:66:0c:a5:d3:95:98:30:
8e:11:94:cd:95:88:b4:12:24:85:8b:0a:0d:85:45:
c2:a5:34:8e:25:6b:98:6a:00:0d:92:6a:a4:35:a1:
e0:0a:3e:f0:df:0f:25:85:f0:c4:f8:0b:06:f2:bf:
d7:4f:79:3a:a7:e4:8a:8a:91:5b:47:68:d5:c7:68:
c9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:E3:71:21:32:68:C7:3D:87:B8:B1:03:A1:45:CD:E2:61:14:11
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4mTjcSEyaMc9h7ixA6FFzeJhFBE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.108.0/22
Signature Algorithm: sha256WithRSAEncryption
38:55:5c:30:5e:38:e0:d7:19:1d:38:48:56:73:ff:16:71:4b:
56:80:41:8c:8b:6e:ae:8e:3c:64:50:62:75:4f:aa:4a:4b:16:
9f:33:92:6d:1b:1c:9b:62:d6:1c:53:4b:38:88:82:d7:66:fc:
b9:da:75:ab:56:3b:e3:55:45:18:4d:26:23:20:21:e9:7e:1b:
c0:b1:b1:13:09:27:f5:e2:42:87:6c:e5:b1:2c:2e:f6:bf:ba:
79:f7:84:c6:54:d8:6d:9f:a8:d7:65:b8:ef:92:52:c7:e7:cc:
9f:29:31:fe:0f:0a:e7:31:55:37:89:3d:c2:a3:ed:21:52:fb:
5b:eb:da:ba:be:14:f3:bd:f9:66:55:35:80:43:ac:5d:16:7b:
50:30:d1:98:49:bc:37:25:c0:76:aa:d0:ae:c9:13:43:5c:80:
b1:5a:fa:ca:32:94:a9:94:71:86:42:9c:bc:15:4f:8b:0c:62:
a2:b0:07:1e:69:06:a6:c8:9e:96:17:4f:f3:c0:45:2c:67:39:
c5:d7:51:3e:a8:3e:9f:8f:09:33:77:35:82:e9:4b:b8:12:64:
b7:c1:3a:ec:3d:ea:e3:37:c6:fb:4d:28:fe:0b:20:ba:c6:f2:
c8:e7:cf:c1:38:8b:7b:25:7e:f9:b0:c6:ca:c8:37:d7:66:cf:
fb:78:fa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:44 2025 by rpki-client