Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sg0hAkDI3GOepWqSTUkpNDB6Vsk.roa
File: sg0hAkDI3GOepWqSTUkpNDB6Vsk.roa (raw, json)
Hash identifier: HKHx7menY1hofg7JzygUQjTkn9R6fF0mWiLlfj66KZU=
Subject key identifier: B2:0D:21:02:40:C8:DC:63:9E:A5:6A:92:4D:49:29:34:30:7A:56:C9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B38
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sg0hAkDI3GOepWqSTUkpNDB6Vsk.roa
Signing time: Fri 21 Feb 2025 04:19:17 +0000
ROA not before: Fri 21 Feb 2025 04:19:17 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.96.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 21 04:19:17 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=B20D210240C8DC639EA56A924D492934307A56C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:bb:cd:ea:28:b6:de:00:8b:4a:33:51:37:
14:ae:c2:b2:cf:37:22:a1:b2:65:70:ac:ff:3a:cc:
69:ae:96:00:84:9c:7c:0d:e9:96:f5:5d:41:af:63:
ea:f7:1d:8f:11:8b:f6:74:58:8b:93:30:c3:fe:8c:
13:2f:8f:08:91:cd:2c:68:6e:33:49:ad:ef:fe:f7:
02:72:64:d0:b4:9b:b3:78:a7:e9:b5:9b:07:d8:2a:
ba:9d:04:08:19:91:87:ee:a9:21:74:5c:46:3c:3a:
18:3e:61:9b:5e:90:6d:46:c9:2a:b3:b9:b5:67:16:
19:b2:b7:fc:57:06:d1:f6:e8:84:2d:e8:a1:10:f5:
9d:5e:0c:00:14:e7:cc:ab:2f:42:c7:8b:e1:de:56:
dd:a0:43:1a:09:50:6d:29:c7:43:42:f3:7b:e8:13:
08:22:39:46:b6:eb:02:0c:a9:52:5f:c0:20:29:51:
5d:1a:a6:5a:3b:4b:ee:50:28:a9:33:10:8c:20:f7:
52:b1:08:01:5b:24:10:7c:c1:ac:8e:6d:aa:79:4d:
a8:47:bf:41:6e:cf:b5:40:1b:8d:b2:2d:f0:e9:55:
bd:06:6e:1b:18:f7:ea:7b:79:c6:c9:a0:1b:23:e1:
36:cf:48:35:b4:f8:d0:4b:8c:76:1c:2d:a1:50:24:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0D:21:02:40:C8:DC:63:9E:A5:6A:92:4D:49:29:34:30:7A:56:C9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sg0hAkDI3GOepWqSTUkpNDB6Vsk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.148.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:76:06:ba:38:47:8d:47:1c:c7:06:c8:b8:ff:b8:a7:b0:d3:
0b:6c:b4:c0:48:20:eb:d4:b7:0f:57:93:10:0b:72:84:6b:b4:
f5:5e:25:5e:ab:8d:06:2b:1c:e2:f2:27:97:4f:2b:8a:2c:35:
8a:ab:95:21:cb:cf:e1:03:31:6d:ab:9b:26:f5:c2:4e:a2:c1:
ed:b3:93:3c:6d:9a:b4:a8:5d:a8:2a:41:ed:23:ac:15:bf:b7:
9d:4d:28:a5:2d:fe:39:99:65:21:ef:83:8f:78:6d:d5:cb:56:
9f:2f:b6:88:1c:ae:72:b0:bb:6c:17:6b:0f:0c:9f:87:db:e8:
db:d5:6b:e2:43:c5:2d:de:65:20:d5:06:3c:b6:dc:6e:d8:88:
83:09:e5:19:40:61:00:f5:38:12:f8:44:1f:db:94:65:fa:2a:
c4:1d:73:5f:bb:bc:99:6a:eb:11:8f:54:fb:9f:af:48:46:dd:
90:1c:59:84:01:22:97:95:0a:47:42:83:cc:88:33:db:9b:d3:
76:6b:a8:ac:67:0a:40:01:12:1b:7a:69:fc:1a:b9:26:21:03:
ef:15:ad:b6:95:0f:a1:ae:85:df:1f:07:ee:b8:0e:f4:97:e3:
8f:27:1a:17:ea:19:44:86:05:cb:ca:cd:08:7b:ae:65:ed:17:
33:61:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:04 2025 by rpki-client