Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NLjdK3qehBzLq0B37wI9OF3xgb0.roa
File: NLjdK3qehBzLq0B37wI9OF3xgb0.roa (raw, json)
Hash identifier: j6y2JYbTJ3EuCz84u2ADgbkp0nr035vn7eS4AFQsjeQ=
Subject key identifier: 34:B8:DD:2B:7A:9E:84:1C:CB:AB:40:77:EF:02:3D:38:5D:F1:81:BD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0107
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NLjdK3qehBzLq0B37wI9OF3xgb0.roa
Signing time: Wed 24 May 2023 16:10:14 +0000
ROA not before: Wed 24 May 2023 16:10:14 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:10:14 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=34B8DD2B7A9E841CCBAB4077EF023D385DF181BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:88:c4:75:f8:b9:2c:bf:fe:a0:41:34:08:
e8:d4:47:80:18:7e:fa:d7:60:ff:ba:fc:44:39:c7:
2f:ce:7e:4c:fe:63:00:66:66:92:3c:48:8a:f2:2b:
68:c6:b4:b7:12:7a:1a:77:a9:08:6a:fa:0e:ce:5b:
8c:98:d6:98:c0:4a:37:20:0d:ca:a0:8d:80:6e:d4:
6c:33:e0:2d:2a:5f:53:6a:35:3c:64:95:b5:27:0d:
4a:6d:98:41:1c:1a:f6:97:79:f6:f5:19:fd:6e:5a:
96:2b:9a:37:23:a7:ed:be:37:2d:25:86:35:73:e6:
fb:44:f7:b7:c1:3a:06:81:3e:71:53:07:14:8c:6a:
56:7e:b8:25:bd:49:b8:63:01:8b:43:41:18:0b:ce:
c7:bd:6a:dc:2e:68:1c:93:d5:15:d2:41:2a:57:be:
8d:b7:10:c1:91:f5:f1:5a:1f:be:a0:b9:d3:2a:0a:
a1:5a:0e:6a:76:0c:55:5e:e0:61:ad:cc:e9:e8:03:
b6:91:dc:ad:b7:61:46:33:3b:f3:ce:8e:1c:e5:e0:
6d:ff:90:d8:f2:9a:17:e7:90:03:ff:13:f6:a4:35:
ab:47:e3:e1:2a:3f:3f:0d:e1:56:6d:cd:01:12:30:
de:f0:7b:ef:cf:6f:ae:85:18:c1:39:82:bf:fb:ba:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B8:DD:2B:7A:9E:84:1C:CB:AB:40:77:EF:02:3D:38:5D:F1:81:BD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NLjdK3qehBzLq0B37wI9OF3xgb0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.160.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:81:eb:6c:f9:7f:32:a3:45:28:61:5a:9c:ff:f8:42:4a:8b:
eb:41:3a:89:ce:56:f1:40:4e:22:9a:74:4f:65:b7:ce:a5:24:
17:5e:9a:8f:fb:5d:f3:56:83:c1:90:2d:97:6c:d2:bf:ed:2f:
34:27:94:18:71:9c:ea:d1:38:88:c7:f7:01:ec:5d:71:14:0a:
9a:c1:4a:57:06:0c:ca:f7:17:ac:17:c1:9d:50:88:4a:67:e2:
fc:f2:ac:4d:b5:fc:6f:91:36:93:71:04:ce:e8:67:a3:30:85:
44:e3:b0:77:e9:74:1d:90:33:db:c4:fa:22:fe:84:7b:9d:bb:
cd:bb:78:0b:b1:b3:85:0e:90:90:31:33:41:ae:45:1a:50:56:
ae:ab:d3:1d:3d:eb:03:49:e1:68:ff:06:00:91:22:af:a9:62:
74:8e:52:eb:f5:9f:98:7a:21:55:6b:4f:23:ce:a4:6c:ed:c7:
b0:04:5b:d7:5e:9b:3e:df:01:73:96:36:1b:2b:2a:30:32:78:
8c:f4:1d:2a:cd:8e:ae:54:04:97:ce:ed:26:3b:40:36:25:bb:
eb:e3:2f:a0:f6:d4:55:b6:08:b6:40:6f:8f:6b:ea:d4:a5:a6:
f0:c5:a4:b6:c2:57:72:3a:70:ef:fe:19:51:de:37:29:86:71:
dd:7b:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:27 2025 by rpki-client