Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AH25VJ9331pTxvpRSPcvSYGYJ4k.roa
File: AH25VJ9331pTxvpRSPcvSYGYJ4k.roa (raw, json)
Hash identifier: LE1YnrIhKlTSRt7bH8LoP4vAV/auNKo8aIEMRUplcT0=
Subject key identifier: 00:7D:B9:54:9F:77:DF:5A:53:C6:FA:51:48:F7:2F:49:81:98:27:89
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 09E2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AH25VJ9331pTxvpRSPcvSYGYJ4k.roa
Signing time: Sun 30 Jun 2024 01:42:19 +0000
ROA not before: Sun 30 Jun 2024 01:42:19 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.103.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2530 (0x9e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:42:19 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=007DB9549F77DF5A53C6FA5148F72F4981982789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:db:2a:73:0a:a0:e8:c4:77:6f:fa:50:27:
54:d3:b0:93:75:8e:54:6d:c6:a9:26:26:97:4b:41:
4e:f9:94:e6:02:05:c5:3e:34:d3:29:84:11:2f:86:
c3:46:44:d0:b7:19:86:a0:8f:4e:66:9c:2a:0a:bd:
46:9d:86:c2:43:60:d7:8f:e0:37:4c:7e:ce:d4:06:
ec:36:cd:26:a4:0b:fb:2f:af:7a:4e:9b:c0:95:1d:
d2:94:ee:65:9e:1c:95:95:31:be:3e:b5:48:aa:a6:
1f:3c:9f:c4:c4:e1:e4:31:e3:91:26:55:58:4e:02:
91:cf:7e:43:f8:1d:38:18:f9:cb:83:0f:af:f2:23:
ae:76:fa:f0:3c:70:af:9e:44:3c:e6:80:89:70:8d:
ba:a2:a1:0c:ec:cc:d7:15:4c:a3:98:57:0a:e3:83:
e0:c9:24:e0:e9:88:f4:ed:64:39:13:30:98:a7:ff:
c5:ad:64:7c:19:30:d9:86:b9:d7:6b:1c:7d:9f:7a:
17:11:ac:25:66:3d:8d:1a:e0:0f:b2:ab:4e:14:4f:
bf:c9:82:cc:87:6f:f8:b4:03:27:23:96:e5:da:17:
2d:4c:ca:de:0e:0d:a3:3e:16:b0:b5:ff:5d:af:b5:
cb:95:0c:f5:e3:13:7e:0a:e9:f7:70:57:c1:1c:be:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7D:B9:54:9F:77:DF:5A:53:C6:FA:51:48:F7:2F:49:81:98:27:89
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AH25VJ9331pTxvpRSPcvSYGYJ4k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.103.128.0/18
Signature Algorithm: sha256WithRSAEncryption
7d:fc:0e:41:e0:ea:7b:7a:cd:39:2a:54:91:e1:52:01:b0:06:
7c:76:a8:93:6d:bc:33:b7:c8:3c:b4:86:3b:6f:79:11:d5:89:
d8:a4:b8:0a:bf:86:1b:3f:f9:8c:99:68:5a:97:64:2a:0f:b8:
dd:6d:27:e2:28:6d:b9:ac:35:c0:e5:62:a0:55:22:ff:c4:05:
58:a6:e4:1a:d8:ce:52:43:03:08:db:00:23:68:dd:f3:53:ec:
af:de:66:a2:c1:c1:37:0b:a7:a3:77:49:ca:17:a8:1a:74:10:
19:2c:26:ef:8c:03:b5:d5:8a:b3:7d:62:ac:d8:f9:78:ed:0d:
2f:4b:fb:99:df:20:99:9b:80:3e:71:53:c2:c6:d3:07:2b:cd:
32:11:36:04:c5:24:74:71:ca:ff:eb:0f:a0:53:a4:c9:e4:f4:
0b:ad:a0:6f:95:dd:cd:26:10:9c:2f:13:fa:dc:0f:df:6c:b7:
ca:c4:be:27:ab:18:57:57:ba:8b:0e:03:09:b8:fe:42:62:4f:
b9:8c:d7:fb:e0:15:0a:37:2d:ee:b5:11:b9:e4:e0:38:a4:98:
ce:56:a3:fa:77:59:28:ea:bd:dd:48:80:b1:a7:10:64:fa:ce:
8b:21:49:de:e3:a0:c2:78:37:cf:92:7a:ff:f8:7c:53:9a:d6:
e6:26:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:32 2025 by rpki-client