Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VdU70kDVWF85CxDfpTMqjbJNL0Q.roa
File: VdU70kDVWF85CxDfpTMqjbJNL0Q.roa (raw, json)
Hash identifier: IAgFSDL8toZ1zEULmX/gWGNjXaTExAfa/MvG7Ziao5o=
Subject key identifier: 55:D5:3B:D2:40:D5:58:5F:39:0B:10:DF:A5:33:2A:8D:B2:4D:2F:44
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0300
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VdU70kDVWF85CxDfpTMqjbJNL0Q.roa
Signing time: Thu 17 Oct 2024 01:41:00 +0000
ROA not before: Thu 17 Oct 2024 01:41:00 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 10013
IP address blocks: 111.234.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768 (0x300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 17 01:41:00 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=55D53BD240D5585F390B10DFA5332A8DB24D2F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:ed:bf:71:95:96:40:de:1b:d6:47:26:19:
e8:10:77:e0:3e:c1:f1:a1:92:7f:36:52:e1:bd:2b:
9c:69:f4:c4:de:ce:0b:98:9c:ca:90:7e:59:86:09:
dd:e6:6c:aa:87:ad:68:4f:65:73:e2:78:5c:f2:4a:
58:5d:79:a3:aa:7e:6d:01:5c:e1:81:b9:74:a5:3d:
05:ff:d1:f2:cb:7e:7b:8c:fb:5d:a6:ca:7b:cd:15:
da:e8:0a:01:f2:33:67:1e:5d:76:77:df:25:c4:88:
4f:b3:dc:e3:35:2a:6f:ff:07:04:dd:bf:e6:3a:0d:
8a:06:99:55:f7:d3:5e:62:4c:9a:e9:80:a7:45:54:
1b:13:93:24:d5:e7:4a:17:0a:52:83:6c:7f:91:08:
aa:d6:15:a9:0e:1b:6e:09:bf:f9:62:66:27:0a:dd:
16:ac:a0:7e:7d:bb:2b:27:9b:25:95:b0:3d:87:b4:
32:af:22:a6:b0:d1:94:44:e4:49:fb:36:a6:77:9a:
dd:57:23:0f:64:fc:5d:a8:b7:17:1c:9f:36:d7:5a:
c8:ea:30:0d:73:c2:c2:59:9c:13:d7:ea:53:56:2c:
3b:8d:05:ab:2a:c1:15:a8:c2:04:f7:f8:1b:8c:87:
13:d1:0f:3f:3c:4a:9a:74:3a:ae:5f:bc:b8:77:cb:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D5:3B:D2:40:D5:58:5F:39:0B:10:DF:A5:33:2A:8D:B2:4D:2F:44
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VdU70kDVWF85CxDfpTMqjbJNL0Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.234.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:bd:b8:93:fb:c8:55:78:b9:4b:13:37:20:7b:67:02:60:b0:
a4:04:00:56:a8:49:2c:03:c3:fe:fe:8e:72:90:4f:f6:22:97:
2f:cb:0d:01:e2:f1:77:4a:f7:fb:fa:f9:58:1a:6b:c0:de:9f:
d5:4c:3a:8f:20:4a:af:dc:0e:8a:b5:e2:b3:0f:b5:66:ef:d6:
6f:8a:a7:77:6b:25:80:06:44:73:be:8e:0f:fe:d5:38:42:46:
00:29:db:d7:70:5c:90:27:e4:25:ce:b5:6b:96:38:e8:50:48:
c2:bf:88:91:f8:d7:b8:20:aa:1c:94:3d:8e:3d:cd:94:9f:2f:
15:26:d6:f7:de:6a:83:8f:5c:e3:38:86:44:87:b2:c3:37:7a:
c4:02:c8:cd:2c:d1:5b:d4:e6:78:88:21:99:11:7a:2d:23:30:
43:9b:5a:e4:59:d7:2f:af:b0:2b:73:11:85:2b:b9:81:ad:8b:
29:a6:88:7f:25:45:bc:8a:c5:44:14:00:ec:74:60:68:14:d7:
07:97:5e:1e:18:36:e9:98:7c:53:a6:d2:96:f0:bf:e5:42:b3:
6b:a5:8f:e4:64:48:30:8a:6b:3a:20:5f:c2:76:0c:80:ab:9c:
2c:62:8b:6b:88:ba:11:3e:df:bf:2d:90:48:26:3d:8e:ae:11:
fd:73:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:31 2025 by rpki-client