Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XBxbNqpBQlE8gAwyrZXfaQYM4wY.roa
File: XBxbNqpBQlE8gAwyrZXfaQYM4wY.roa (raw, json)
Hash identifier: AAAyFvYK/JhX22+u2/atXuWDD9yQP/CFQFh7+PWZaVE=
Subject key identifier: 5C:1C:5B:36:AA:41:42:51:3C:80:0C:32:AD:95:DF:69:06:0C:E3:06
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0951
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XBxbNqpBQlE8gAwyrZXfaQYM4wY.roa
Signing time: Sun 30 Jun 2024 01:29:37 +0000
ROA not before: Sun 30 Jun 2024 01:29:37 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.106.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385 (0x951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:29:37 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=5C1C5B36AA4142513C800C32AD95DF69060CE306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:c8:64:12:2b:76:5f:35:16:66:5d:13:07:
24:c6:ee:ed:06:e1:15:13:5a:3f:a5:26:c6:28:5a:
c2:03:6f:e8:e3:c7:5a:bf:23:16:3b:86:3f:75:4c:
06:35:06:a5:b1:14:dd:0c:04:cc:75:0e:58:5c:9f:
b7:d4:64:2a:ec:20:73:94:5e:9d:02:a3:8b:15:bb:
ca:8b:07:87:35:5a:2f:3a:d9:1d:24:19:e9:0b:88:
42:d2:77:71:24:87:31:c9:d4:79:88:80:c4:f3:57:
e6:89:cb:df:72:89:a7:24:00:01:f9:37:4e:11:70:
18:bb:6b:50:7d:7d:10:48:7d:07:3d:c6:b9:ad:d4:
1f:07:2b:bf:7d:14:66:fa:8e:f9:2c:b0:71:a4:d8:
6f:94:3b:3d:44:a4:0f:7b:f9:07:a6:6f:96:95:e8:
87:f5:30:99:29:7f:9d:46:08:37:65:c1:99:d0:cf:
c3:2b:c7:1b:39:0d:30:13:e8:36:f3:35:b6:d0:7a:
56:32:5d:41:76:73:16:7a:97:f1:90:37:dc:de:bc:
e0:b0:44:04:ba:4e:03:10:7e:bb:87:8f:0d:c7:4c:
4a:26:93:fb:8d:f9:8c:fe:e6:39:93:ce:90:8e:31:
dc:aa:91:cf:09:12:bc:8b:5f:c3:de:89:df:b3:45:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:5B:36:AA:41:42:51:3C:80:0C:32:AD:95:DF:69:06:0C:E3:06
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XBxbNqpBQlE8gAwyrZXfaQYM4wY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.194.0/23
Signature Algorithm: sha256WithRSAEncryption
03:1c:d5:e5:d3:cd:85:09:57:09:a0:51:18:b2:02:2a:53:0a:
b4:36:a6:b6:15:4d:f1:9a:f2:58:38:2a:c5:27:0a:d4:d1:88:
ee:0e:e7:8f:b6:68:c6:ec:1e:34:1f:be:3b:75:70:11:2f:8e:
a1:16:34:f3:93:55:70:10:cc:21:28:74:35:fd:cb:a3:45:9a:
66:a1:33:d0:e8:30:1b:91:07:2d:7b:14:5a:68:95:e6:29:01:
fc:20:81:ea:3f:57:22:bd:9e:5d:da:e6:e1:18:a9:1e:63:7a:
74:de:b8:24:7c:80:16:46:6b:d8:00:20:68:82:01:5f:f4:7d:
53:64:67:01:e8:c2:8f:21:4e:bb:d3:5d:2c:12:60:32:cb:0e:
94:8f:43:6e:22:d0:90:cc:aa:c5:92:2f:d0:a9:e4:cf:eb:19:
4a:09:99:5d:d2:e5:a9:b0:c3:af:c6:e5:50:59:23:77:c5:55:
f9:33:82:87:73:74:4d:22:eb:64:6b:c0:df:8b:1a:5b:e7:1c:
ab:6c:95:86:ae:d4:7c:cb:8a:95:78:4d:62:07:68:b5:71:d4:
54:16:d8:9e:85:71:ac:22:97:b5:82:4a:75:3c:fc:d0:f7:25:
4a:90:ee:4d:8b:18:1a:2b:39:c2:b8:44:f7:c6:6a:68:e9:56:
6c:c8:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:14 2025 by rpki-client