Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/G8PGL6GGZ3aocSrFyDvwCScYhRs.roa
File: G8PGL6GGZ3aocSrFyDvwCScYhRs.roa (raw, json)
Hash identifier: Lyz2ZBbsFqAEZlJTXwdmVy2E8wI3SFqb1RRrpElm7RY=
Subject key identifier: 1B:C3:C6:2F:A1:86:67:76:A8:71:2A:C5:C8:3B:F0:09:27:18:85:1B
Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial: 0F
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/G8PGL6GGZ3aocSrFyDvwCScYhRs.roa
Signing time: Mon 21 Oct 2024 02:11:02 +0000
ROA not before: Mon 21 Oct 2024 02:11:02 +0000
ROA not after: Tue 21 Oct 2025 01:23:02 +0000
asID: 9354
IP address blocks: 202.157.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Validity
Not Before: Oct 21 02:11:02 2024 GMT
Not After : Oct 21 01:23:02 2025 GMT
Subject: CN=1BC3C62FA1866776A8712AC5C83BF0092718851B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:47:d1:73:c0:f9:61:7b:fa:42:a8:d5:2c:
79:e1:91:6b:f7:2b:ad:25:d0:1e:99:a8:38:ab:81:
ae:c6:84:fa:6c:1e:24:45:a8:af:78:af:1e:47:12:
dd:6e:86:c7:29:05:08:b9:c2:83:6a:82:cc:8d:d2:
08:e2:af:87:18:70:e2:44:ba:c1:d9:5d:ec:b2:01:
31:79:38:01:44:06:da:e4:ce:77:35:dd:a4:ce:01:
1a:0e:7a:d4:78:bb:03:42:f6:f9:80:c3:61:ed:bd:
4e:6b:16:54:7a:56:78:1e:bb:2f:96:ac:75:84:d2:
d4:da:8c:f7:ce:f1:0a:05:0f:69:2c:fa:92:ae:21:
fe:ce:38:d5:fe:37:1d:5c:2f:0a:3e:c0:0f:12:51:
6e:33:0b:ff:12:95:0b:75:68:5a:82:f7:6e:89:a2:
ac:fe:3b:01:a4:fd:e0:9d:98:ef:6d:d2:ed:35:8c:
a1:86:ec:45:3b:80:8d:31:da:d4:19:26:ae:b3:79:
fe:8d:12:68:5d:21:83:13:f5:2d:3e:89:7a:78:a3:
a6:2b:a0:8a:eb:31:82:0b:46:fd:91:97:91:ab:32:
34:b4:b0:e8:84:c3:dd:89:5f:ab:1c:0c:f0:93:a2:
f7:e7:ae:50:fe:c0:47:eb:0a:23:46:37:64:1e:67:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C3:C6:2F:A1:86:67:76:A8:71:2A:C5:C8:3B:F0:09:27:18:85:1B
X509v3 Authority Key Identifier:
keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/G8PGL6GGZ3aocSrFyDvwCScYhRs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.157.244.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f4:3a:2f:de:78:bf:f7:11:af:d4:c3:4e:77:a2:12:da:12:
45:12:1b:84:62:8b:33:82:c0:a5:59:f3:c7:c0:44:ab:62:11:
39:df:fb:e8:fc:eb:ef:04:bd:51:68:5c:e1:d6:e3:78:ec:0c:
ea:fe:db:a5:eb:5d:00:e0:0b:46:11:3b:44:0f:0d:55:78:20:
dc:a1:3d:03:ae:1f:7e:52:de:7b:02:62:45:4b:61:9b:92:3c:
65:de:71:76:19:ce:5e:af:c2:0e:ca:b2:54:60:2e:08:04:f3:
d5:95:fc:96:84:e5:b7:07:a8:cb:b3:f7:f7:1e:7f:6b:c9:05:
71:7e:2a:8d:55:c9:f9:8c:fc:a1:0f:0e:61:4c:ed:59:9f:b2:
97:6f:d4:6b:68:82:f3:fe:d8:7d:85:46:a8:1f:f6:30:06:8b:
a8:30:1a:1b:af:31:ab:01:82:90:cc:87:05:ef:1d:78:40:ad:
31:d6:44:06:76:a4:95:93:92:f5:0f:5e:22:a4:3e:0a:b8:53:
7e:9d:ae:b4:6f:9f:f2:da:d9:6f:5e:82:25:45:ab:a3:d0:43:
01:df:09:4c:a3:fe:26:c2:ef:e9:de:71:9e:e7:b7:99:74:8b:
62:11:13:35:18:fa:e8:43:f6:fe:bb:3f:b9:74:8f:47:83:d5:
02:11:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:24:04 2025 by rpki-client