Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/fKZnd6_y10FP1Gq_MF7VtXKV9Vw.roa
File: fKZnd6_y10FP1Gq_MF7VtXKV9Vw.roa (raw, json)
Hash identifier: UeFokHKOsv9/QXW/6AyHfEun+Kd/KJbX4ugFZz4clM0=
Subject key identifier: 7C:A6:67:77:AF:F2:D7:41:4F:D4:6A:BF:30:5E:D5:B5:72:95:F5:5C
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0172
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/fKZnd6_y10FP1Gq_MF7VtXKV9Vw.roa
Signing time: Wed 31 Jul 2024 01:34:17 +0000
ROA not before: Wed 31 Jul 2024 01:34:17 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2497
IP address blocks: 210.148.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Jul 31 01:34:17 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=7CA66777AFF2D7414FD46ABF305ED5B57295F55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:0f:d4:f1:c6:01:43:ae:d7:11:fe:03:6e:
63:90:26:2f:35:c9:ec:20:ea:78:f4:8b:63:a9:8c:
1f:6a:bd:77:81:73:72:ee:0c:93:c9:24:a3:a1:6f:
66:a6:1f:0e:c4:b8:b1:f5:34:f4:72:1f:74:ac:86:
50:fb:6b:77:0f:05:68:ba:88:38:1e:93:fc:00:5f:
39:16:9e:93:cd:5d:77:c4:6d:b2:de:d9:3b:f9:11:
14:35:82:45:23:16:99:60:06:d4:78:68:ef:2c:af:
fc:b3:4e:f3:56:47:62:15:cb:43:a8:7b:e4:16:fd:
ef:fe:79:00:b1:e0:c4:e9:8b:71:ab:22:4b:bf:73:
76:fb:63:bb:4a:23:71:01:17:ac:4a:d2:9b:b8:fe:
97:3e:7a:a2:ed:97:9d:0b:4a:e9:2b:48:12:c9:6c:
6e:0b:03:65:39:94:31:38:cf:29:84:05:b8:ea:bb:
b8:b1:24:eb:8f:c9:cf:98:7c:35:e8:e5:39:83:bb:
f1:c6:bf:79:08:99:8d:64:76:57:80:08:05:d0:12:
fb:15:eb:ab:37:39:82:6e:69:76:9e:46:05:92:71:
74:28:5f:ca:01:92:77:66:32:a5:e8:51:40:0a:01:
91:52:1e:ec:a7:03:df:d3:90:a9:f4:a5:57:d2:e0:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A6:67:77:AF:F2:D7:41:4F:D4:6A:BF:30:5E:D5:B5:72:95:F5:5C
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/fKZnd6_y10FP1Gq_MF7VtXKV9Vw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.148.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:a1:d1:32:c9:fe:52:ab:22:c9:66:d6:0e:f5:7c:5a:8b:2a:
95:70:e2:d1:70:8d:9d:3c:32:f6:b5:ff:b3:19:1b:a8:9f:88:
b2:61:91:b6:71:ab:90:90:23:b9:d2:dc:bb:f7:00:19:69:69:
38:18:a2:bd:a2:00:d9:cd:7b:9a:c4:92:93:a4:97:56:0a:e8:
73:d0:63:23:d6:e4:45:d4:52:48:12:e5:d4:90:95:ca:db:83:
24:e7:9d:bf:f9:98:52:5a:ba:a2:64:5c:2a:13:4e:95:84:05:
fd:81:32:c4:9f:3c:a4:bc:63:61:95:30:9c:14:87:79:6e:34:
4b:3e:ee:f7:60:22:b3:1c:ec:ef:41:4d:e0:07:c9:35:f6:1f:
1c:5e:4f:23:cc:28:66:21:cb:eb:77:b8:78:fb:56:ce:6b:54:
9c:9c:41:f6:bf:a9:5b:99:d8:62:01:28:55:50:b3:b8:a1:a2:
0e:4d:aa:aa:40:a6:6f:5c:9d:35:84:39:3a:68:da:c8:ae:30:
0a:2e:05:71:47:74:86:45:46:6a:7e:ed:6f:b9:66:b2:d1:00:
a9:1f:1d:f1:3c:32:62:78:3c:8f:02:a0:10:c4:c9:36:5c:5d:
e9:99:24:13:9f:2a:c6:5d:f5:5e:49:46:89:16:c1:6c:37:6b:
cb:4f:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:22 2025 by rpki-client