Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/DRJ6QHoyd3aW7nNAC7MLNpd3eI4.roa
File: DRJ6QHoyd3aW7nNAC7MLNpd3eI4.roa (raw, json)
Hash identifier: R50iHFiDV2ifaUDN2gEgwEOS46QtmP5bO4dLA2LnJGY=
Subject key identifier: 0D:12:7A:40:7A:32:77:76:96:EE:73:40:0B:B3:0B:36:97:77:78:8E
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 35
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/DRJ6QHoyd3aW7nNAC7MLNpd3eI4.roa
Signing time: Sat 01 Mar 2025 01:31:47 +0000
ROA not before: Sat 01 Mar 2025 01:31:47 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 38628
IP address blocks: 61.245.32.0/19 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Mar 1 01:31:47 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=0D127A407A32777696EE73400BB30B369777788E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:a6:65:ff:4a:04:46:56:cb:b8:e4:84:f8:
c8:42:16:29:02:b9:cc:5d:42:19:be:04:a5:82:46:
03:c0:75:8c:1b:f8:5d:58:61:de:5f:81:29:6c:a1:
49:f1:09:7a:b8:76:8d:f6:d8:a7:6c:25:8c:07:55:
c0:28:c7:28:38:a7:41:08:55:ee:ac:ce:7b:fb:d6:
ff:02:be:6f:f8:c9:a9:2b:fb:a9:5a:d8:76:d6:14:
03:93:1a:8c:c0:ff:3b:41:3d:6e:33:54:91:9d:6f:
45:3c:17:8d:9c:5a:33:de:f4:8d:31:b4:a7:f7:90:
d1:4a:8f:9c:30:f1:7b:0d:a5:68:61:91:54:ce:c2:
0a:7f:cf:f2:e2:3d:98:fd:a1:da:a5:87:ac:31:0f:
90:76:5d:0d:8b:d8:09:19:c0:40:2d:8e:76:d0:bc:
88:87:7d:60:d5:80:2e:3d:09:be:88:e3:57:89:36:
17:ef:8f:1c:22:f5:ab:a9:ec:2d:25:29:07:e1:87:
0d:fa:7c:cc:71:a8:fe:da:72:76:ce:07:e3:e2:fd:
ae:90:e5:d8:90:9c:6d:9e:1d:2c:21:8c:ca:16:99:
07:3f:e2:fd:e3:1c:4a:55:42:75:b3:25:dd:1e:57:
ff:ef:8a:a5:ff:c5:21:b9:68:87:ae:6c:be:22:b8:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:7A:40:7A:32:77:76:96:EE:73:40:0B:B3:0B:36:97:77:78:8E
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/DRJ6QHoyd3aW7nNAC7MLNpd3eI4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.32.0/19
Signature Algorithm: sha256WithRSAEncryption
82:15:b7:81:4e:7d:15:d4:3e:69:a3:1b:72:4f:e2:9b:e1:2d:
c1:bc:65:a0:d9:d5:39:39:f9:dc:4e:80:be:ed:05:ec:f2:cd:
e8:e0:45:1e:84:e6:b0:15:1d:79:49:26:0e:6d:de:c1:af:c7:
2c:28:18:d0:2d:5a:fe:cd:7c:cf:86:f6:77:62:ad:06:63:75:
56:6f:58:1d:d5:a6:7a:70:5e:6d:6f:ea:20:3c:66:ab:90:77:
a0:67:f0:8a:bc:ab:17:d6:6a:0a:9d:2f:57:77:d6:57:be:37:
6f:5b:87:16:6e:1b:4b:b2:2e:a4:b6:fd:1e:34:b0:ac:26:10:
6e:d7:2c:53:4d:60:d9:46:e1:30:54:71:c6:8f:f1:e2:09:be:
ec:5b:30:5b:42:6d:7a:d4:61:b9:56:b0:b5:c8:93:3f:2d:fe:
62:b0:e7:f7:8e:9f:5f:0b:5d:aa:0a:13:b3:8e:31:52:ef:43:
91:f6:2d:ad:35:ba:47:11:6d:b5:b8:e6:19:64:a9:61:7b:fe:
6e:15:b8:78:42:8f:a8:ca:43:a8:b2:cf:7d:82:cf:bc:ea:b2:
d3:39:05:79:00:be:85:08:33:57:ce:2e:96:a0:98:e5:95:7a:
c0:21:08:25:34:7d:99:09:05:09:f3:83:df:f6:2c:5d:49:01:
6d:d4:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:10:22 2025 by rpki-client