Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/YB42mj45EecHNuhcQTLAp_3T-O0.roa
File: YB42mj45EecHNuhcQTLAp_3T-O0.roa (raw, json)
Hash identifier: WBatyD94tUwFcbH/F/VkjrSjnF1Cn4DezazvGhCmaTw=
Subject key identifier: 60:1E:36:9A:3E:39:11:E7:07:36:E8:5C:41:32:C0:A7:FD:D3:F8:ED
Certificate issuer: /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial: 62
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/YB42mj45EecHNuhcQTLAp_3T-O0.roa
Signing time: Thu 27 Mar 2025 05:01:16 +0000
ROA not before: Thu 27 Mar 2025 05:01:16 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 2500
IP address blocks: 203.178.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Validity
Not Before: Mar 27 05:01:16 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=601E369A3E3911E70736E85C4132C0A7FDD3F8ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:bb:80:4f:47:63:5b:bc:55:5f:42:fa:52:
6d:f7:7c:cc:61:4c:fe:aa:61:fc:e4:dd:be:85:af:
7d:35:53:a5:21:d1:94:78:8f:5b:fd:67:21:b1:58:
cd:50:7f:9b:f0:cc:4d:e5:7f:3e:22:b8:88:21:9a:
ff:60:a3:34:4c:22:3a:7c:c1:f5:6a:8b:ae:95:2d:
61:e0:64:90:2f:0f:69:9e:45:8f:b6:f7:b1:6e:1b:
c8:7a:28:96:0f:2e:59:62:4c:96:f1:e9:17:0a:09:
63:dc:5f:8b:ee:e2:c2:65:bb:2e:75:1b:d7:c4:ae:
e8:c2:36:15:ca:37:78:91:e7:68:49:75:af:c3:15:
90:d0:29:e3:15:4f:13:ef:b9:21:cc:52:b6:65:80:
4b:2d:89:da:04:51:a9:c9:a7:9a:1c:a3:2f:b5:0a:
e2:82:23:20:4b:7a:11:86:31:e4:92:eb:64:43:ad:
3b:57:97:e1:4b:d6:2d:ed:ef:80:42:b1:8a:c6:c7:
85:62:e8:ee:e3:7c:1f:7d:96:6e:8c:79:0d:28:1f:
3c:73:e9:b6:00:4a:ac:53:53:36:e8:85:e0:80:59:
a6:ca:0a:6c:8a:20:12:7d:b0:b8:3f:6b:80:80:ba:
81:46:3e:92:9b:39:37:8a:22:d5:07:d5:3d:2c:76:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:36:9A:3E:39:11:E7:07:36:E8:5C:41:32:C0:A7:FD:D3:F8:ED
X509v3 Authority Key Identifier:
keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/YB42mj45EecHNuhcQTLAp_3T-O0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.178.128.0/19
Signature Algorithm: sha256WithRSAEncryption
65:ba:13:f2:71:8c:26:6c:3f:97:af:0b:4a:42:c9:ee:f3:51:
d0:f3:a5:ad:5d:87:b3:d5:71:19:96:14:3b:5b:d5:60:1f:3d:
15:b1:57:00:10:0b:2d:a5:95:f4:be:85:18:f2:8b:ce:86:a8:
06:75:6a:88:74:fd:18:5a:67:c1:f5:f1:4f:18:3f:47:76:8f:
29:34:1f:dc:c8:81:07:fa:84:fd:14:2b:bf:1b:74:6d:be:76:
5f:99:95:6d:e2:21:32:f9:3f:e6:59:f6:e0:4e:18:07:16:54:
f4:69:e9:9d:17:cd:e8:8e:d3:37:ed:94:4d:93:d5:fc:54:fe:
42:1c:48:ea:c6:d6:ad:a8:f3:f1:a0:c1:38:9a:1f:6d:26:7e:
d4:b6:ed:66:6c:ff:dc:25:cd:c1:09:71:d6:68:e8:33:39:18:
48:fb:25:0e:4c:20:8f:74:a3:36:43:74:97:a5:ce:a7:44:b3:
1e:08:b1:e8:1a:f3:fc:e9:eb:77:89:e1:7e:b9:43:98:cc:0c:
39:54:f2:49:7a:3e:10:8c:8c:2d:40:ce:dd:c8:dc:20:70:d9:
8f:c3:25:b1:4a:92:ad:78:da:9b:20:d4:ef:31:42:89:9c:ee:
0a:5e:1b:9c:f5:cf:0d:a9:a2:ab:cb:2e:ba:ce:93:64:c6:a3:
8a:88:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:28 2025 by rpki-client