Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/pQNQx3q8F9cGPBEhN2mPAMlM3HY.roa
File: pQNQx3q8F9cGPBEhN2mPAMlM3HY.roa (raw, json)
Hash identifier: jMuNHBfnNXckpQaJoGY5fV4qboL36o0fLWKxPxg4ZCE=
Subject key identifier: A5:03:50:C7:7A:BC:17:D7:06:3C:11:21:37:69:8F:00:C9:4C:DC:76
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 02E4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pQNQx3q8F9cGPBEhN2mPAMlM3HY.roa
Signing time: Thu 10 Oct 2024 01:16:23 +0000
ROA not before: Thu 10 Oct 2024 01:16:23 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 10013
IP address blocks: 27.133.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 10 01:16:23 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=A50350C77ABC17D7063C112137698F00C94CDC76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:50:0a:c4:43:4c:97:9d:4c:af:a1:27:da:
f8:90:7e:ad:58:a6:57:8e:a6:7d:66:47:10:d9:68:
d6:03:14:f4:68:81:95:77:f8:b1:51:25:cc:0d:1c:
b2:cd:95:ed:74:25:c1:3f:53:0a:7f:6f:4f:24:03:
ca:51:d1:ca:47:90:ad:2b:87:a9:dc:33:25:6f:4e:
30:88:af:f2:0a:bc:72:1a:f3:1c:c7:f9:15:0f:d5:
ca:25:f1:d7:d7:dc:7e:66:bc:01:78:4b:9b:6f:d7:
1e:4c:94:0a:e7:5f:06:2d:9e:02:d8:18:c2:a3:00:
ae:7f:38:e5:e3:cd:87:c7:38:19:98:1d:6a:b8:c4:
70:d1:e0:29:26:d8:27:d6:a4:bb:2b:ee:6b:a8:56:
7d:07:cd:76:f3:39:65:f5:31:dc:1d:a5:21:84:d4:
86:7c:6e:b8:27:dd:0b:e9:f9:de:c6:07:44:6d:8e:
b5:69:f7:30:01:c7:cd:4d:63:79:40:ef:30:6d:8c:
fb:fa:10:5a:74:1b:76:24:58:6f:64:62:98:d7:cb:
b5:cd:d8:eb:0b:fb:5f:62:0a:6a:88:ac:16:bd:29:
2f:21:5f:c2:0a:3f:9e:14:81:6b:ce:d3:64:65:78:
f1:89:07:1d:28:a5:71:2f:d7:8b:d5:dd:86:31:cc:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:03:50:C7:7A:BC:17:D7:06:3C:11:21:37:69:8F:00:C9:4C:DC:76
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pQNQx3q8F9cGPBEhN2mPAMlM3HY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.133.16.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:5d:c6:3a:ab:1c:97:96:05:d4:7a:9b:09:ec:d6:23:2b:98:
28:41:60:50:de:e8:e8:0c:b4:79:b3:a4:61:aa:da:83:6b:2f:
8f:cc:43:df:5f:5d:56:2e:ee:53:85:20:93:8e:9d:db:1b:54:
b7:23:f3:45:d8:57:77:ee:73:a9:5b:27:55:f2:bf:f8:73:60:
c4:2f:8f:39:6a:23:4a:a7:17:b8:a3:48:7b:fd:a4:ea:9d:a9:
3b:ec:16:96:0f:ae:47:8e:83:ea:30:99:0e:ef:e5:9f:85:a7:
d1:3c:e3:6d:73:3a:b9:bf:c8:81:dd:92:d3:5a:18:9b:ad:f6:
b7:26:fc:2a:1b:a4:b9:85:a1:d4:f1:56:66:fe:af:a4:31:8c:
8b:4b:1a:7e:68:d4:37:8a:d4:65:6c:19:fa:65:28:a5:5a:51:
b1:80:3c:2d:5a:4e:89:f1:4c:4c:25:05:f5:e4:e7:c0:18:0e:
8a:83:21:bb:f8:5b:36:c1:e3:10:3c:12:ed:a0:20:36:45:b9:
bb:80:68:db:85:e8:06:9d:80:a9:80:80:5f:27:d7:ec:98:e5:
9f:59:3c:4b:a1:60:4d:12:9a:61:2f:c6:18:6e:16:b9:4d:d1:
6e:f0:d8:f7:c3:27:74:69:1a:1d:de:76:f1:7e:73:ee:59:9e:
f4:01:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:16 2025 by rpki-client