Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/OxxjtEuceK62mBvGxmQH0rlGEHY.roa
File: OxxjtEuceK62mBvGxmQH0rlGEHY.roa (raw, json)
Hash identifier: hHiXhAvbQXl+5QQWHFULZGl1q30T4baWqLHQE3Oeng0=
Subject key identifier: 3B:1C:63:B4:4B:9C:78:AE:B6:98:1B:C6:C6:64:07:D2:B9:46:10:76
Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial: 6F
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/OxxjtEuceK62mBvGxmQH0rlGEHY.roa
Signing time: Fri 31 Jan 2025 01:31:42 +0000
ROA not before: Fri 31 Jan 2025 01:31:42 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 45680
IP address blocks: 103.235.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Validity
Not Before: Jan 31 01:31:42 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=3B1C63B44B9C78AEB6981BC6C66407D2B9461076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:98:e6:fa:29:61:a7:ab:36:01:a4:cd:47:
f0:76:e8:4c:ff:8a:81:a2:ad:01:e7:a6:4c:0a:a8:
4b:4a:cd:75:db:ea:19:4d:7f:9a:5e:9e:63:ed:77:
83:c1:92:ea:35:f3:3a:d7:3b:3e:73:c0:b3:be:90:
79:48:2d:2c:7b:70:31:c0:22:3d:71:bd:9b:fe:8f:
55:8c:a2:79:97:d5:78:b3:07:31:71:42:fe:b3:e4:
a6:4b:79:ed:73:2f:2b:83:88:36:ea:93:75:cf:93:
4b:72:83:04:11:e8:a5:64:70:b7:8b:06:89:7c:3c:
5f:76:f7:67:83:01:c4:84:2d:68:5c:48:6f:82:f7:
27:7c:a8:2e:65:bc:7d:67:43:c5:1a:12:5d:9c:e0:
e9:9e:83:71:ac:f5:83:48:0d:b2:38:90:72:44:75:
bb:db:fa:da:b2:dc:ba:81:8d:1a:8c:ea:ec:6a:1b:
bc:d8:00:f8:e4:a4:b4:d4:49:cb:3f:b0:09:88:83:
e4:09:5d:53:9a:28:6e:2d:50:6b:14:ed:bb:3a:21:
4e:a4:32:c1:4f:f7:4f:e9:93:9f:31:9b:3e:69:cd:
69:22:da:4e:38:86:bf:d3:7f:f0:f3:e0:e7:bd:b0:
7a:38:78:ee:d3:02:5f:75:de:b2:4c:61:6f:bf:86:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1C:63:B4:4B:9C:78:AE:B6:98:1B:C6:C6:64:07:D2:B9:46:10:76
X509v3 Authority Key Identifier:
keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/OxxjtEuceK62mBvGxmQH0rlGEHY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.40.0/22
Signature Algorithm: sha256WithRSAEncryption
77:e8:8a:99:2b:60:78:1b:17:46:56:c8:36:2a:3a:0a:da:34:
ac:32:eb:56:70:9a:37:48:04:8a:61:48:a7:ff:ef:05:d6:9e:
48:26:bc:68:cd:ab:d1:7b:bc:5c:28:d4:b9:b9:3f:79:df:4d:
ad:e2:97:36:ae:e4:24:12:b4:75:58:32:6d:ed:7f:ba:2d:72:
16:fa:91:8d:84:8a:31:6c:41:34:ce:2c:cf:9e:14:11:fd:a3:
88:c0:62:5d:4e:24:a6:69:87:37:ba:3e:81:93:7f:82:1d:f6:
11:71:cc:24:22:ce:dd:33:f3:76:87:6d:64:ba:b8:6e:9a:0c:
07:d2:d8:88:7d:f0:ba:70:14:25:5a:31:39:38:b0:45:a4:34:
c7:4f:f6:21:d6:81:f8:95:e7:68:4a:d8:f9:d6:8d:61:7c:ee:
9e:77:39:c9:c4:06:38:78:47:45:03:b7:44:10:9d:4e:6e:e9:
71:f7:84:0a:3a:e8:78:5d:01:f7:ad:c7:91:54:e8:b2:c4:86:
00:26:8f:2e:4b:e3:5d:3f:13:42:89:0d:04:13:22:02:44:a6:
92:11:d1:61:cb:e5:46:8c:f8:2e:29:06:ca:3a:a5:e2:f3:bf:
b2:55:f5:1f:e5:8f:3f:69:67:25:62:15:d2:d6:ae:8a:0e:6d:
29:51:bf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:29 2025 by rpki-client