Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/oRMFtiktmQd0zSPp5xkmwxrVFRM.roa
File: oRMFtiktmQd0zSPp5xkmwxrVFRM.roa (raw, json)
Hash identifier: 70G/gxFpHtpo0m7ndw+j9Fmp2V7SHviMccBRBaAZbvE=
Subject key identifier: A1:13:05:B6:29:2D:99:07:74:CD:23:E9:E7:19:26:C3:1A:D5:15:13
Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial: 5A
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/oRMFtiktmQd0zSPp5xkmwxrVFRM.roa
Signing time: Thu 29 Feb 2024 01:30:51 +0000
ROA not before: Thu 29 Feb 2024 01:30:51 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 18260
IP address blocks: 103.2.64.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Validity
Not Before: Feb 29 01:30:51 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=A11305B6292D990774CD23E9E71926C31AD51513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a4:8a:dc:20:f0:71:a8:4e:ac:ee:02:28:34:
b8:28:7c:91:05:c3:1b:06:e4:f0:d6:b7:a4:cd:e8:
38:e5:66:5c:82:79:95:5a:97:48:cf:97:14:3b:f9:
14:fb:28:ca:2f:e6:6e:3f:6b:ec:fe:c4:11:db:2f:
ce:4d:d5:8b:d8:1f:98:5b:e5:0e:35:4b:03:86:0b:
aa:bc:ab:e8:3e:b5:64:f5:bd:d2:2a:c8:ed:65:74:
97:0a:22:d6:90:29:39:82:f1:7b:3e:91:cf:f9:d8:
85:6f:86:f4:cf:3e:80:ca:74:5b:f5:8a:35:0b:83:
d2:d2:11:bb:ae:3b:8a:15:7b:f4:dd:15:40:8e:43:
23:4c:26:e6:8e:90:10:c2:39:bc:ac:6a:99:9e:83:
2e:62:c8:a9:38:0f:cc:cc:1b:70:9c:c5:b3:0f:de:
c5:b5:75:03:a0:e0:41:1a:fc:0c:1e:32:c8:e8:c8:
3a:2b:4f:52:39:09:df:d9:f1:45:c6:a5:d1:70:8f:
96:9b:a5:ed:2a:7f:2f:85:77:56:2e:7f:24:90:1d:
c3:78:c9:51:aa:8c:b7:6f:b7:35:75:8e:8f:ba:b0:
d4:05:cf:45:e1:b0:8c:96:5b:7b:1b:b2:23:cb:f2:
a9:91:f6:f6:cd:07:a1:2a:62:9e:dc:54:88:e8:4d:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:13:05:B6:29:2D:99:07:74:CD:23:E9:E7:19:26:C3:1A:D5:15:13
X509v3 Authority Key Identifier:
keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/oRMFtiktmQd0zSPp5xkmwxrVFRM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:9c:cf:f5:a8:32:92:90:4e:a0:13:6a:a0:f3:96:af:d3:59:
ac:75:f8:92:e7:78:ea:1d:cc:fc:af:d1:5a:6b:c1:de:24:8d:
e1:ae:bf:f0:ba:93:08:77:28:ec:e0:a9:82:dc:33:b0:91:1f:
a2:81:6e:e6:f8:04:ff:f2:0a:6e:b3:7c:23:c8:ea:15:a3:6a:
6b:91:62:eb:b3:1f:5d:91:b8:44:d9:3f:82:dd:ec:38:8b:6a:
86:2b:4a:67:af:4a:d3:53:59:fd:16:ca:a8:1d:25:1f:e8:4f:
ba:c9:5a:d9:35:f2:da:10:56:7a:f5:d4:a7:02:8f:7d:48:1f:
da:db:3f:ab:5c:90:31:4f:c3:53:ae:6c:f0:8d:56:82:e9:da:
c1:4d:bf:38:15:12:b8:53:bb:27:4d:77:e6:69:42:4c:89:2c:
65:93:49:7c:c6:cb:ec:73:bf:ab:58:65:56:19:a3:35:64:25:
d3:ec:e1:7e:20:98:05:1f:64:65:09:aa:59:2c:9e:f6:11:21:
9c:a2:d3:40:06:76:6f:3a:21:4c:9b:d1:9d:b6:a8:af:84:89:
7f:5d:01:14:99:2d:61:73:80:6e:ac:81:15:59:49:e1:dc:ef:
7d:56:52:8c:4e:15:71:b4:07:98:ba:74:fb:5b:fc:b6:12:c4:
df:a3:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:01 2025 by rpki-client