Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/z_5Yt7CRRKzLgVX2l_58HqmZ1YU.roa
File: z_5Yt7CRRKzLgVX2l_58HqmZ1YU.roa (raw, json)
Hash identifier: WDm+QZ4wDfRmStHdeu9gp76YJmZo4CtPxpn6zSph+pI=
Subject key identifier: CF:FE:58:B7:B0:91:44:AC:CB:81:55:F6:97:FE:7C:1E:A9:99:D5:85
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 03F5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z_5Yt7CRRKzLgVX2l_58HqmZ1YU.roa
Signing time: Tue 06 Jun 2023 16:03:48 +0000
ROA not before: Tue 06 Jun 2023 16:03:48 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1013 (0x3f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:03:48 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=CFFE58B7B09144ACCB8155F697FE7C1EA999D585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:39:dd:cf:08:1b:cc:7e:21:ef:60:e8:d7:
61:bb:ce:90:ab:fd:7d:e3:50:6d:d9:20:c2:03:02:
bd:74:72:76:3f:67:5b:88:ac:0b:dd:7e:7d:11:0f:
c6:bc:ab:15:01:74:44:73:ea:d7:a6:e2:7d:a0:6d:
6d:05:04:d1:0d:a5:ec:d8:6d:35:cc:ef:07:a5:10:
f9:f5:17:e2:8d:da:6d:89:e0:4e:8a:e4:02:b1:e0:
89:ab:e1:3b:89:16:8d:14:9b:c4:ba:41:47:63:4e:
e9:93:77:b6:60:a0:ab:72:e5:55:61:73:35:c8:21:
b0:51:3d:7a:37:75:7f:c9:15:3b:6a:b0:d9:04:fe:
fb:03:7f:b3:e1:a1:7a:69:20:48:af:6a:14:fa:18:
54:8c:4f:4c:a9:8a:af:1e:20:cd:f6:cf:6e:ad:e2:
2f:01:d2:8a:1f:7d:58:c8:73:ad:ad:3a:bc:9a:8d:
56:5b:30:b1:30:72:24:94:1f:49:15:bd:b7:80:8f:
db:aa:64:64:24:61:07:db:a3:db:19:e7:41:20:13:
9f:4f:c3:a8:ba:82:bd:b5:53:05:31:4a:d8:83:36:
bc:5e:00:ad:11:68:68:76:6b:08:b3:66:68:d8:bd:
79:67:8f:01:ed:9d:c0:62:9d:cb:62:89:f6:23:57:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:58:B7:B0:91:44:AC:CB:81:55:F6:97:FE:7C:1E:A9:99:D5:85
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z_5Yt7CRRKzLgVX2l_58HqmZ1YU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.112.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:31:91:b6:f5:7f:2b:0b:91:ff:38:2f:0c:68:bc:e6:57:f4:
38:de:c0:01:50:fc:53:1d:25:dc:54:5f:72:81:63:a8:b3:8f:
96:3d:5e:36:28:8b:f2:9c:33:2a:fb:5d:05:17:6f:c3:1f:fe:
05:c7:cf:94:67:6d:51:16:2a:e7:e1:4f:cb:33:ab:99:93:c2:
8b:28:92:e1:e0:9a:df:ae:26:91:23:c5:fa:0a:19:2b:00:ec:
ee:ea:ed:51:3a:cf:4c:f2:25:6a:1b:3a:14:ad:36:2a:bf:99:
2b:2d:41:52:d3:9e:1d:d5:c9:11:91:fd:ff:93:58:c9:4d:c3:
8f:9e:d8:d4:7b:0a:7b:e1:f7:95:81:00:8d:67:85:25:93:aa:
4a:ed:b5:fb:74:aa:37:b6:17:d4:2b:bf:8c:d0:5a:27:03:58:
e3:bd:f8:8e:3c:77:5d:2a:f4:90:3b:d1:96:4a:c6:00:f1:90:
ee:d7:42:08:74:27:a6:81:09:4a:c2:0d:01:ad:a5:9e:df:f3:
85:89:c9:9f:c1:6e:65:ca:17:90:ec:a8:1d:21:25:6d:2f:eb:
21:e0:d8:d5:28:e1:32:93:ff:22:10:67:bf:ea:47:97:7c:6e:
3e:23:ff:b9:8d:2f:df:24:ba:04:95:b2:f5:71:13:44:04:85:
9f:57:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:02 2025 by rpki-client