Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/ZoAOkZPTSM-JPim3mxqzJVrB32c.roa
File: ZoAOkZPTSM-JPim3mxqzJVrB32c.roa (raw, json)
Hash identifier: v7U9pe82AoolObBdJ66jVzxtQl0SfUfBWMG47x8g53A=
Subject key identifier: 66:80:0E:91:93:D3:48:CF:89:3E:29:B7:9B:1A:B3:25:5A:C1:DF:67
Certificate issuer: /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial: 3B
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/ZoAOkZPTSM-JPim3mxqzJVrB32c.roa
Signing time: Fri 31 Jan 2025 01:29:08 +0000
ROA not before: Fri 31 Jan 2025 01:29:08 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 18094
IP address blocks: 219.109.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
Validity
Not Before: Jan 31 01:29:08 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=66800E9193D348CF893E29B79B1AB3255AC1DF67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:54:b0:70:0e:3e:f6:c2:b5:14:3c:e0:19:
c1:86:ed:67:e0:9e:91:19:bf:c1:b6:ea:ea:91:b1:
8b:de:5b:85:9d:52:d2:e7:ad:57:2b:8a:54:dc:3b:
c6:70:9d:20:e8:c7:23:88:bf:59:49:0e:16:b8:78:
1e:07:7a:26:75:61:a2:67:1a:c3:e0:e8:67:da:15:
0e:0e:13:f4:13:c2:f4:83:6d:21:17:7c:44:e5:82:
8a:39:50:c0:6a:94:b0:55:50:5d:de:04:b6:88:0a:
b0:9c:3b:2e:f4:60:20:23:70:d3:60:d2:b6:46:41:
a3:1c:d2:25:4f:1f:c9:b0:93:09:b7:e3:3f:24:df:
99:bb:bf:25:ef:8f:ad:e4:5e:57:05:42:29:65:12:
58:d3:ac:66:f8:38:ea:13:64:0f:3c:57:7e:87:b0:
be:4a:a4:07:fa:06:c7:b5:68:f4:b6:ce:92:88:66:
86:13:c5:50:9c:40:16:87:9b:1e:ba:86:1f:2e:cd:
e2:41:69:7c:66:80:fe:36:39:e1:0e:28:d0:d3:47:
73:e5:da:7a:3a:85:e6:08:c7:e5:79:88:e4:b0:66:
3a:e3:2c:67:bf:24:27:95:76:ac:16:0a:5d:dc:18:
ca:e7:66:e0:6c:55:35:fb:05:b5:90:d9:c4:0c:48:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:80:0E:91:93:D3:48:CF:89:3E:29:B7:9B:1A:B3:25:5A:C1:DF:67
X509v3 Authority Key Identifier:
keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/ZoAOkZPTSM-JPim3mxqzJVrB32c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.109.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:33:ee:27:71:34:1f:df:9c:9a:c0:d8:20:89:ae:81:3e:67:
5f:38:a9:05:1f:2a:40:ad:1a:74:5d:b4:b5:5d:39:24:c8:f7:
8f:e1:9f:57:18:cb:a1:5b:af:91:d6:52:f9:6c:a4:78:1a:ea:
da:99:57:de:6a:45:e0:82:c3:72:12:d2:4a:d6:f6:4a:d8:ab:
83:d7:9b:69:56:d8:a3:8e:fb:ba:20:9c:1d:19:98:b3:1d:c7:
f9:ee:03:2d:be:a8:ba:da:06:62:14:f8:da:ab:0a:ab:57:3c:
fc:08:1c:7a:33:40:e3:fa:3c:6d:21:06:4d:6e:41:10:12:1c:
42:39:a6:4c:0a:1e:9a:17:60:a8:83:50:80:47:f2:6b:0e:e4:
ef:b6:36:51:7b:10:74:63:ea:3f:c9:9a:74:c1:53:ce:61:a3:
78:08:45:0a:b5:bf:60:c5:25:7d:b0:cc:9a:99:34:4d:01:e1:
90:7e:ab:f4:d7:bd:40:cb:26:c3:80:de:20:49:76:e5:a7:47:
af:a4:f5:52:e6:53:d5:cc:cb:86:23:82:e4:e0:61:5e:77:1b:
ba:64:55:26:18:5b:25:89:58:a9:d2:73:b7:70:1a:55:a3:99:
8d:7e:c1:92:45:d9:15:7a:e5:8c:de:32:65:99:af:d7:7c:39:
2b:d8:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:12 2025 by rpki-client