Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mtx1wB3Nv9iLDtOpfcYxo-kZnuM.roa
File: Mtx1wB3Nv9iLDtOpfcYxo-kZnuM.roa (raw, json)
Hash identifier: /g/VB8hOwae8/IX5mbal9N+OXEht+x+1Vn/k/TRSCUg=
Subject key identifier: 32:DC:75:C0:1D:CD:BF:D8:8B:0E:D3:A9:7D:C6:31:A3:E9:19:9E:E3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05AD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mtx1wB3Nv9iLDtOpfcYxo-kZnuM.roa
Signing time: Thu 27 Jul 2023 17:00:22 +0000
ROA not before: Thu 27 Jul 2023 17:00:22 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 110.158.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 17:00:22 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=32DC75C01DCDBFD88B0ED3A97DC631A3E9199EE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:b3:de:82:ae:d0:55:a2:fe:de:18:25:cb:
b0:9f:ce:99:30:06:3f:0e:03:de:ee:a6:61:d9:e7:
a6:77:eb:7d:00:11:eb:a7:74:70:5c:ab:cb:30:35:
cc:83:79:e0:1c:7e:e3:3a:fe:ac:38:c7:1f:05:49:
29:03:ce:7f:82:bb:0d:94:79:5b:f7:2b:ec:9b:ac:
2c:25:58:e8:4f:72:7d:55:ae:c9:fa:2f:d9:27:03:
1d:bd:10:c5:a0:90:8f:13:a4:08:b7:44:02:55:22:
9c:45:02:5c:37:bf:5a:4f:aa:0e:d4:d5:dd:b2:00:
66:b3:64:4f:97:68:cf:57:36:f2:7f:b7:aa:fc:65:
6b:dd:40:7b:fb:4e:97:8e:99:67:39:b8:6e:2b:71:
7a:9a:a3:42:e3:37:6b:da:9f:e3:5e:1c:05:45:bb:
3f:be:c8:5f:c4:0e:67:90:3a:68:f7:1e:76:0b:91:
a5:4e:2b:29:d7:ae:7e:d5:4a:c9:24:4d:d1:37:19:
c7:49:75:b3:23:8b:92:5e:88:ee:5a:11:24:4a:76:
9f:9b:f0:2f:89:87:b6:b9:24:4e:a5:72:dc:ec:5a:
14:b9:1d:17:7e:69:c9:6c:cf:fe:36:fd:04:f4:bc:
db:a1:a7:4e:a0:37:46:fe:74:8d:f4:5c:62:cf:fc:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:75:C0:1D:CD:BF:D8:8B:0E:D3:A9:7D:C6:31:A3:E9:19:9E:E3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mtx1wB3Nv9iLDtOpfcYxo-kZnuM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.158.188.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:f4:19:a1:46:ab:a1:a9:56:98:77:da:09:f1:04:9b:d3:c0:
48:3e:22:1c:a0:f9:07:ac:b3:37:8e:73:cf:b9:76:b3:b1:79:
72:4e:f8:47:0b:c5:97:a3:74:2b:1b:51:01:1e:16:d1:d3:e2:
cb:14:59:80:3e:b5:2d:f5:7b:ed:5a:b1:35:dc:ea:87:2b:4b:
b4:29:34:4f:fa:95:40:d4:8a:dc:bb:68:4d:76:0c:17:dc:1d:
83:b4:ef:83:17:93:43:88:82:23:ec:53:c2:7a:2d:dd:b0:b0:
c2:38:c9:74:be:65:9c:f6:c9:9d:43:ad:b3:99:e3:c1:8f:96:
51:55:82:44:99:fb:a5:71:d9:39:48:9e:c2:0f:48:88:79:0e:
ef:02:91:40:af:54:0e:b4:f5:5b:60:89:6a:ea:dd:e7:c7:09:
73:c9:89:43:d1:a2:b1:ea:29:4e:cd:24:6c:ab:e6:f3:35:4e:
66:98:d9:47:99:f0:d1:67:bb:27:21:57:f2:22:f2:2d:79:e8:
c8:2b:cc:d5:1a:c9:2c:e1:70:57:3d:7d:79:e8:c7:85:bd:c5:
56:9d:4b:68:e1:a2:95:9e:f2:46:fa:b8:cb:2c:85:be:f3:8b:
11:d3:b7:03:ff:74:a1:c1:05:37:88:7d:18:4b:0e:1c:24:52:
ae:21:31:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:34 2025 by rpki-client