Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ha4L5wzrOoedpgmvtPWZMJCVqvk.roa
File: ha4L5wzrOoedpgmvtPWZMJCVqvk.roa (raw, json)
Hash identifier: 9f7HVXoaV3S4i6WrYAuvk0SOZhODw1PNfUSENwM5wd0=
Subject key identifier: 85:AE:0B:E7:0C:EB:3A:87:9D:A6:09:AF:B4:F5:99:30:90:95:AA:F9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A14
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ha4L5wzrOoedpgmvtPWZMJCVqvk.roa
Signing time: Sun 30 Jun 2024 01:44:22 +0000
ROA not before: Sun 30 Jun 2024 01:44:22 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.210.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580 (0xa14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:44:22 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=85AE0BE70CEB3A879DA609AFB4F599309095AAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:f5:75:c8:79:8c:8a:3d:6c:7f:5c:5f:a6:
b6:a6:25:9b:73:6d:7c:0e:4d:f6:76:c2:67:be:cc:
c6:5c:da:97:7f:7b:38:80:a5:e6:8c:0d:2e:d1:fb:
96:d5:a2:bd:0a:30:d3:ef:86:20:f5:eb:ce:f8:17:
f2:3c:ee:12:99:75:e2:1f:a8:a7:4a:66:2f:2a:7b:
68:66:5f:a8:c5:50:81:79:f7:cb:5e:09:57:ca:8b:
60:da:fb:73:f3:01:d3:d2:ba:8b:25:2f:9c:14:df:
91:e8:76:4a:d1:a4:60:b5:8e:52:06:79:d7:db:c1:
38:1b:e0:53:d6:28:1a:f8:51:4d:6e:68:81:30:1d:
cb:39:14:32:3d:40:2f:e4:0d:30:91:c5:a6:9b:36:
41:d2:73:73:ae:39:58:a3:54:49:97:03:ce:bc:08:
ed:7a:c4:9f:f8:31:81:ed:8e:8f:f8:a3:6c:22:2d:
a6:e3:82:cd:f6:c7:2c:80:49:83:ec:a0:43:6d:f1:
c5:26:cd:28:c8:62:24:05:14:b9:35:db:dd:86:ba:
0e:c6:53:7c:f7:76:80:54:75:63:63:b4:69:23:26:
38:0d:29:be:33:f7:e4:65:36:29:e7:b7:6c:33:26:
c1:3b:0c:d1:fe:c9:16:b4:1b:d3:dc:a5:35:94:fc:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AE:0B:E7:0C:EB:3A:87:9D:A6:09:AF:B4:F5:99:30:90:95:AA:F9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ha4L5wzrOoedpgmvtPWZMJCVqvk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.56.0/23
Signature Algorithm: sha256WithRSAEncryption
60:8d:e3:e9:81:e0:0f:9a:28:20:4b:32:13:a9:bb:09:30:c1:
e7:14:ce:0b:5a:f8:d3:df:17:0a:04:b8:a6:cd:b5:31:bc:95:
ca:50:27:2d:12:60:95:ad:4c:d7:58:5f:85:6d:15:70:87:28:
95:4c:71:aa:b9:87:de:b9:b2:7b:63:59:29:67:69:bb:42:18:
48:dd:84:b3:37:34:5c:ff:82:31:3b:93:b9:12:91:26:5d:df:
b6:a5:6c:9c:fb:75:33:3c:b5:09:85:fb:4b:a3:44:ae:b7:7f:
6a:fa:77:e5:ab:26:cc:e5:5c:64:5b:61:2c:2f:aa:03:8c:70:
67:2a:32:e1:5d:7c:12:19:8e:94:65:a0:86:97:eb:69:29:bb:
c5:d4:f9:ad:7f:62:96:a2:51:57:05:18:8a:2f:94:ae:0e:48:
39:71:35:0d:46:88:56:e9:3d:4c:04:ee:d9:d5:ad:cd:11:91:
59:db:8e:db:2f:05:c4:b3:6d:71:f3:31:76:ae:0b:00:19:07:
43:eb:a8:66:66:11:2e:a6:cf:fe:a3:e0:b5:14:1c:9a:f9:6c:
ba:32:87:ea:46:4c:48:0c:31:07:2b:a4:2b:32:2e:e9:22:68:
8d:1a:4d:c0:66:e2:21:bb:b7:16:67:5b:66:8e:a2:6a:be:3f:
dd:91:9a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:59 2025 by rpki-client