Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/mGu0I3Ma-sS9_rGfz1hQMa6Qpkw.roa
File: mGu0I3Ma-sS9_rGfz1hQMa6Qpkw.roa (raw, json)
Hash identifier: 3+zYh1ZOQemgw9ps4ePZgw8pVtbUdgFsP1ZL/hZW+uU=
Subject key identifier: 98:6B:B4:23:73:1A:FA:C4:BD:FE:B1:9F:CF:58:50:31:AE:90:A6:4C
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 02DF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mGu0I3Ma-sS9_rGfz1hQMa6Qpkw.roa
Signing time: Thu 10 Oct 2024 01:12:18 +0000
ROA not before: Thu 10 Oct 2024 01:12:18 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 10013
IP address blocks: 14.128.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 10 01:12:18 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=986BB423731AFAC4BDFEB19FCF585031AE90A64C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:c3:31:e2:ca:38:67:2c:eb:9e:ce:07:b7:
70:6e:f7:1f:91:20:b6:a4:9d:30:ff:1b:b4:a2:47:
a3:6a:2b:3d:8a:41:f1:a5:39:ce:61:b9:6f:a0:ab:
cc:eb:22:b3:73:bf:82:7f:aa:b0:0d:20:d2:ff:57:
76:15:af:cb:0d:4e:12:59:7f:4b:05:0c:42:92:7f:
2e:c9:5e:15:23:f0:51:0c:9b:3b:5b:17:f5:c5:1d:
96:ce:49:47:a5:4b:d7:3a:7f:3a:be:bf:95:ec:fb:
89:20:60:e6:b7:5e:07:97:f4:55:3d:66:75:11:d7:
3e:86:f9:99:90:36:f1:df:41:87:36:4e:dc:cb:38:
65:d5:66:5e:3b:32:f4:6f:9d:21:d3:e1:46:d9:c3:
d5:ac:d2:8c:6c:77:3c:6d:d3:96:b5:aa:88:09:54:
20:76:7c:e4:f0:f3:3b:99:ac:c1:4a:d0:a5:bd:91:
60:97:6e:a9:a8:6a:15:e7:20:12:f0:22:43:7a:3f:
f0:08:eb:6a:ec:a0:b5:5e:43:ea:3d:fe:58:85:db:
61:f3:46:a4:c7:79:94:a5:fe:a1:ab:e8:b4:a7:73:
de:cd:94:97:b1:df:3d:b1:38:47:1f:67:5c:72:41:
1c:c7:48:f2:b9:c4:db:03:49:bf:36:0b:9c:6e:69:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6B:B4:23:73:1A:FA:C4:BD:FE:B1:9F:CF:58:50:31:AE:90:A6:4C
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mGu0I3Ma-sS9_rGfz1hQMa6Qpkw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.128.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1f:2a:dd:1c:ab:d8:9e:c7:5b:c3:8c:54:a4:77:da:bf:bb:9c:
30:fe:87:c3:15:94:dd:8f:ee:20:f4:23:a8:66:ca:42:e3:2d:
44:b5:c3:60:92:a7:72:13:f0:f6:01:65:d3:26:a1:45:39:5d:
c9:0d:fe:5f:25:cd:23:da:d4:8e:46:e5:37:15:10:87:0b:f8:
96:00:46:51:7b:97:38:92:38:12:81:54:35:14:0d:8a:3d:b0:
6a:09:d3:9c:6c:87:ba:af:c8:0a:7f:c8:08:0c:7b:f8:f1:fe:
a3:0a:7f:50:b7:fb:60:44:86:7c:38:25:79:7d:07:39:e0:7d:
cd:5e:34:c6:d2:2f:d6:64:00:a5:b4:9d:f4:92:7d:ee:cb:5d:
5d:c3:c1:1a:45:76:4e:79:50:e9:92:44:30:1c:63:f9:d9:41:
9d:16:d1:fa:33:72:f9:c8:09:7b:e7:94:a3:d4:0a:36:40:03:
c6:e2:0e:3b:1d:ff:4f:af:62:e6:96:6f:98:10:39:dc:04:a7:
18:eb:43:76:4f:13:14:39:42:65:2f:c1:96:07:5f:11:75:ab:
6f:fa:3c:e0:ab:a3:69:5c:05:40:d2:df:b8:dd:05:71:66:3f:
84:c1:0b:9d:e1:24:cf:8f:cc:0a:5c:a1:c3:f2:72:d8:3e:8e:
7d:66:45:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:39 2025 by rpki-client