Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z67nyU3IEcZ5ZhsZwDSPVs3Caw8.roa
File: Z67nyU3IEcZ5ZhsZwDSPVs3Caw8.roa (raw, json)
Hash identifier: vDPjVhfbU5LLpTHIddOecmKFQviRVsz5q6Ib1Ma1K1Q=
Subject key identifier: 67:AE:E7:C9:4D:C8:11:C6:79:66:1B:19:C0:34:8F:56:CD:C2:6B:0F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A08
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z67nyU3IEcZ5ZhsZwDSPVs3Caw8.roa
Signing time: Sun 30 Jun 2024 01:44:15 +0000
ROA not before: Sun 30 Jun 2024 01:44:15 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.110.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2568 (0xa08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:44:15 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=67AEE7C94DC811C679661B19C0348F56CDC26B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:f8:6a:b4:3c:8f:fd:d8:70:11:05:76:06:
80:41:2d:c1:30:74:fd:31:cd:14:3c:a6:27:c7:71:
f6:6f:ca:60:31:36:33:84:6d:85:ec:69:82:29:23:
60:9b:79:06:1f:89:df:bd:71:ff:cb:01:bb:22:61:
08:e0:88:65:1d:7b:80:ab:6a:dd:35:b5:40:76:8e:
cd:c1:45:09:f5:e8:d6:da:34:7c:aa:1d:4c:2c:cd:
ba:87:d4:36:cb:59:4f:3d:be:6d:02:65:24:f6:a7:
c2:b5:c1:eb:80:9d:8c:f6:b1:fa:0a:fb:cd:9f:d4:
25:f4:22:e6:1d:d2:d2:ac:35:7b:ff:ba:a4:bb:a2:
0c:0e:b6:2d:7f:df:b1:99:70:2c:00:be:f3:6c:4e:
68:04:b9:97:f7:d6:7f:3a:6f:fb:50:53:f2:c8:91:
28:a6:9d:bd:56:75:6e:d5:76:1f:12:18:c5:8d:19:
96:a1:40:a7:da:61:7f:d2:15:e5:5c:93:9d:c4:cb:
3a:46:d1:51:ae:7b:30:b2:3e:45:37:ea:54:c7:5a:
36:ee:7a:50:33:68:26:56:d3:7f:fd:6d:5d:2e:27:
16:5b:97:82:9d:74:08:e5:59:b0:e3:22:bd:6a:6e:
1b:ed:ef:bb:44:fd:b1:49:ad:fb:3f:53:ed:df:84:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AE:E7:C9:4D:C8:11:C6:79:66:1B:19:C0:34:8F:56:CD:C2:6B:0F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z67nyU3IEcZ5ZhsZwDSPVs3Caw8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.110.32.0/19
Signature Algorithm: sha256WithRSAEncryption
28:6a:07:1f:70:c1:ca:2a:fd:b5:b9:52:ce:aa:50:73:50:9e:
6b:27:9d:03:90:c0:59:f4:11:98:95:89:9b:5c:57:de:ac:30:
11:6a:01:24:0e:fa:e9:f9:b0:91:d9:f7:06:dd:b2:cb:cd:84:
17:05:5f:3f:c0:0f:6f:9f:ac:53:b6:a3:d5:f6:1c:35:f4:48:
16:74:8f:26:d0:e8:14:72:f0:52:9d:1f:d6:03:9b:e8:35:c3:
95:a5:35:ba:2e:ce:4e:bb:e4:6f:07:d1:97:03:bd:ee:0e:3c:
70:df:15:b3:5b:fd:58:4b:db:a7:d9:01:8b:88:4f:d6:a2:ca:
b6:f1:68:71:3f:a2:ff:47:67:36:32:ae:d8:8f:cc:b7:b9:c9:
16:6f:11:b4:d1:b6:64:fd:60:2d:10:f0:e4:57:ea:82:9f:80:
90:cb:68:30:3a:d6:a2:04:a7:f4:07:6b:65:88:5f:49:16:ed:
01:3e:6c:f2:81:b9:07:46:a1:5d:2b:ec:6f:89:df:6f:cf:a2:
94:62:28:69:bb:c0:c0:b6:84:0c:18:cf:22:30:10:91:de:8c:
ad:7f:5b:a8:59:0a:31:74:31:f7:46:c6:f0:b2:ab:3a:56:e0:
57:38:5d:3f:45:73:1a:1f:58:80:ac:43:bb:4a:2f:01:54:bb:
f7:4f:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:18 2025 by rpki-client