Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/dvOiILgmWanBOBrG12gd3anbHt4.roa
File: dvOiILgmWanBOBrG12gd3anbHt4.roa (raw, json)
Hash identifier: Z7i9veI/tTD5IZfaxFAq1LFOtQd5OGzhjsotZHfCpnY=
Subject key identifier: 76:F3:A2:20:B8:26:59:A9:C1:38:1A:C6:D7:68:1D:DD:A9:DB:1E:DE
Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial: 52
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/dvOiILgmWanBOBrG12gd3anbHt4.roa
Signing time: Sun 31 Mar 2024 01:30:04 +0000
ROA not before: Sun 31 Mar 2024 01:30:04 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 10019
IP address blocks: 202.91.144.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Validity
Not Before: Mar 31 01:30:04 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=76F3A220B82659A9C1381AC6D7681DDDA9DB1EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:3e:4e:f7:6b:bf:29:d4:b9:fa:8c:9e:7e:
e9:8a:c1:8c:e3:3d:e3:53:74:bb:0a:6e:00:50:1b:
a5:d2:82:34:26:12:24:ee:15:93:e0:66:42:89:2b:
89:a8:99:1b:99:ee:62:33:94:cc:df:03:66:92:fa:
d9:a5:38:86:85:00:9a:37:b9:57:a8:ae:29:5b:0b:
73:f8:5e:16:a3:23:55:a7:cb:94:7e:29:75:28:2d:
d7:e9:4f:2c:e1:64:16:cb:5b:76:29:19:17:81:76:
49:1f:9e:96:19:db:23:0c:7c:87:87:cf:09:e5:5f:
51:55:0f:f3:03:ae:50:88:40:98:65:78:7b:70:fb:
55:32:a2:ba:f1:3a:ed:bf:87:d8:46:2b:bd:7f:b6:
e2:58:8b:27:02:33:ce:3d:21:c8:23:49:aa:54:57:
22:eb:33:ba:07:e1:5b:84:29:59:55:93:1f:36:f1:
bd:a7:4b:57:f1:03:28:d4:83:6c:3d:65:18:1f:6e:
1d:52:20:41:80:aa:c1:4c:a4:e2:d6:00:08:bf:0f:
dc:51:c5:e4:62:bd:a1:81:9c:7a:30:bc:9b:cd:91:
68:44:7c:d4:7f:6d:ea:17:4c:e2:5b:24:0f:f6:7f:
51:1f:4d:e2:f8:07:39:69:d4:19:40:a2:c1:0d:f5:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F3:A2:20:B8:26:59:A9:C1:38:1A:C6:D7:68:1D:DD:A9:DB:1E:DE
X509v3 Authority Key Identifier:
keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/dvOiILgmWanBOBrG12gd3anbHt4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.91.144.0/20
Signature Algorithm: sha256WithRSAEncryption
40:a7:60:b3:3f:7b:b2:c2:23:b0:ea:64:69:dd:60:f6:2a:52:
c0:16:74:1d:e7:7b:d6:c4:f0:47:b5:3b:17:26:3c:b8:49:a4:
c7:67:22:15:a5:44:5d:69:62:0e:25:b1:5e:d9:43:c7:c8:ba:
85:57:ee:4a:f4:7e:91:3b:89:a2:b2:e3:0c:fc:5f:78:59:00:
04:47:58:69:4c:c2:bb:f3:6d:90:5c:ec:be:d7:ce:08:b1:d5:
96:03:b0:55:ff:74:c8:6d:99:17:1a:d4:0e:cc:0f:f0:c0:3a:
51:1b:64:66:a0:f6:ab:c4:35:90:5d:31:0d:dc:3c:2c:a3:41:
e6:3e:95:6d:09:82:f5:66:c6:26:76:0b:29:6f:eb:ef:5a:c5:
0d:52:c4:db:74:50:ac:b0:28:65:d4:3a:5d:e7:31:30:fd:d2:
aa:78:49:1b:63:de:d1:31:ab:60:06:8e:dd:4b:6f:34:b7:4d:
0b:6f:cf:4c:d2:41:82:d2:c1:ab:f5:65:7a:86:32:d9:84:0b:
7f:23:c8:2e:99:e7:6a:9b:29:bc:56:f1:27:95:03:66:70:bf:
01:77:43:f2:39:e4:8f:07:97:66:6a:27:22:23:50:a1:69:b9:
d3:63:55:94:b5:f9:ab:7a:ea:c4:c5:e3:1a:8e:eb:5f:c5:30:
fc:95:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:32 2025 by rpki-client