Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hq-bYcx6XMSH9E6iCSTNIPLn-iU.roa
File: hq-bYcx6XMSH9E6iCSTNIPLn-iU.roa (raw, json)
Hash identifier: szCvNx1LxFS/1hBr/StP85ER1EqgEkxfJoV4QwnvYHk=
Subject key identifier: 86:AF:9B:61:CC:7A:5C:C4:87:F4:4E:A2:09:24:CD:20:F2:E7:FA:25
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0805
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hq-bYcx6XMSH9E6iCSTNIPLn-iU.roa
Signing time: Tue 30 Apr 2024 02:12:21 +0000
ROA not before: Tue 30 Apr 2024 02:12:21 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 219.122.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:12:21 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=86AF9B61CC7A5CC487F44EA20924CD20F2E7FA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:66:98:32:e5:32:ce:3f:c9:44:35:2e:a2:
8a:99:29:db:48:1c:5a:f9:70:2d:8b:28:d3:44:f1:
e1:d6:db:38:b5:13:70:5a:a2:a4:65:17:62:fe:aa:
c9:26:2a:3d:5a:9f:c0:82:d2:17:ff:82:e9:b9:32:
0b:03:79:c4:44:78:c9:78:ce:f2:36:5f:65:51:71:
28:65:07:57:75:c8:76:22:71:a2:b6:4c:75:d5:7b:
81:5b:d9:c8:92:e4:14:59:cb:cf:d7:7c:ba:ea:c9:
ed:61:4f:b4:d3:62:d0:71:66:e5:41:95:e2:5c:a7:
ed:35:79:82:db:b0:d3:33:47:d3:3c:c0:39:5d:1c:
e0:0d:83:d5:02:41:57:62:99:b3:d9:d2:39:f3:7d:
55:e3:26:cf:d2:55:3c:e6:8d:d7:a3:61:a9:ad:58:
83:52:3e:c2:16:00:f7:09:61:78:6d:04:5c:24:d5:
52:51:9a:5b:5e:55:ca:58:34:ae:80:0d:7b:f5:a4:
1b:61:bf:dd:8f:00:a2:1a:a8:ff:b9:45:f5:15:77:
bd:b2:d3:66:3e:9f:1f:fe:aa:72:67:93:25:8d:04:
25:06:fb:6f:00:8e:2e:c0:29:26:44:c6:47:78:c4:
ba:f5:c6:e0:81:b3:37:b2:47:fb:14:0e:48:96:63:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AF:9B:61:CC:7A:5C:C4:87:F4:4E:A2:09:24:CD:20:F2:E7:FA:25
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hq-bYcx6XMSH9E6iCSTNIPLn-iU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.122.64.0/21
Signature Algorithm: sha256WithRSAEncryption
e4:f8:50:45:3d:1d:cd:37:a4:8d:df:a5:e8:26:00:06:59:0d:
c3:90:c7:13:15:04:f2:32:2b:43:ba:4e:25:92:0d:a9:88:13:
72:8b:fe:5d:3f:96:43:88:45:25:88:18:f3:33:ce:31:66:a3:
19:f6:da:00:18:f9:89:59:05:a3:a6:51:85:2f:44:2a:69:fc:
61:f7:04:89:c1:49:82:8f:a9:dd:a3:4b:7d:47:97:5a:89:b6:
05:5d:fa:8f:ff:df:d4:9a:bd:a0:af:20:d7:af:d7:c9:97:c4:
0d:7b:0a:98:7c:08:8a:a5:4b:5e:f9:3f:ed:e9:a1:dc:7a:24:
32:a6:81:23:e6:36:d1:62:dc:4d:9e:1b:c5:93:36:be:ca:0d:
4f:98:8e:8e:e7:b6:8b:da:59:6c:4d:bb:86:22:15:72:92:83:
a5:b8:39:a4:83:39:82:b7:bd:81:65:84:71:e0:0b:1f:e9:73:
ba:11:cd:d9:d6:b8:fc:48:e0:71:20:ef:86:f7:6f:1b:97:91:
5b:59:81:f2:ef:88:fa:ef:0e:42:69:69:12:e1:e8:fa:41:02:
7f:00:eb:24:4a:50:8e:e2:33:cc:c3:b7:21:ee:76:be:ee:9e:
4b:fb:32:c6:21:11:3e:52:4e:aa:94:a0:63:92:cd:2d:ab:ab:
3f:24:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:54 2025 by rpki-client