Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/3WTngtwLsm1rKpNdJx6RlZWDn9M.roa
File: 3WTngtwLsm1rKpNdJx6RlZWDn9M.roa (raw, json)
Hash identifier: NFHPLherAn32s19+upIYzrj1+mkTJzys9pGN9ABipSI=
Subject key identifier: DD:64:E7:82:DC:0B:B2:6D:6B:2A:93:5D:27:1E:91:95:95:83:9F:D3
Certificate issuer: /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial: 12
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/3WTngtwLsm1rKpNdJx6RlZWDn9M.roa
Signing time: Thu 30 Jan 2025 01:26:44 +0000
ROA not before: Thu 30 Jan 2025 01:26:44 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 17529
IP address blocks: 211.128.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Validity
Not Before: Jan 30 01:26:44 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=DD64E782DC0BB26D6B2A935D271E919595839FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ae:ce:82:18:9e:d4:5f:ed:96:17:dc:f3:a7:
80:9d:3e:0c:37:bb:60:f5:f0:e3:29:2e:8f:b9:74:
a7:86:2a:16:0d:c2:bb:49:a3:ca:3e:81:0e:f9:76:
6e:2b:29:f5:a8:7a:d9:6a:54:2e:aa:3b:fd:1f:f1:
7a:b9:8f:dc:a6:2c:2d:25:20:aa:94:04:75:90:e9:
af:dc:f5:b9:90:dd:f7:d5:b0:9b:22:5b:89:05:a0:
b3:cd:06:7f:1c:46:5c:ab:d0:47:75:6c:75:fc:67:
5f:b4:33:d1:a3:c1:b4:ab:85:aa:e7:5c:8b:e5:74:
3b:74:6d:45:0c:98:95:29:e0:4c:60:f3:64:35:35:
29:56:0a:92:6e:a1:94:ef:f7:d2:c1:f8:7c:08:de:
fd:98:92:e1:e8:f3:eb:b7:a7:bf:6f:91:9e:8e:95:
14:0c:15:c8:e3:1e:83:f1:79:40:e9:b4:90:78:8c:
e3:32:43:48:a7:8f:71:e8:0e:34:ff:5d:54:c3:8e:
22:85:7b:a3:af:db:e1:70:c2:90:c5:f1:f6:89:ed:
c6:21:33:f8:94:99:dc:af:2b:95:55:8e:84:81:c3:
f6:17:98:a6:04:ec:2d:3d:5c:76:f8:52:50:7b:3c:
ee:0c:0e:8c:1b:a0:ef:38:4d:20:5d:d3:9b:0d:f0:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:E7:82:DC:0B:B2:6D:6B:2A:93:5D:27:1E:91:95:95:83:9F:D3
X509v3 Authority Key Identifier:
keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/3WTngtwLsm1rKpNdJx6RlZWDn9M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.128.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:43:11:8b:5e:b2:04:15:4e:53:64:03:35:21:f3:a2:e6:f1:
5f:7f:f9:72:a2:89:87:9a:05:3f:c0:0d:91:9b:1c:d9:1b:02:
25:43:f0:e1:52:30:ad:1c:60:a6:9f:87:0a:d8:54:44:42:3b:
f3:ee:5d:2a:2a:d7:ed:00:fd:2e:8c:52:27:bb:af:f5:e1:18:
4e:41:f6:36:42:66:3c:34:c5:b7:1f:be:1a:7c:bc:10:d6:0d:
56:7c:f2:01:98:fc:b9:4d:86:30:8b:38:91:d8:69:87:91:9c:
e9:98:da:1e:2f:75:68:fb:2b:9c:42:6a:0b:5d:3b:bd:15:d6:
04:29:26:69:d4:15:a2:ce:63:84:85:06:e1:c9:51:67:06:f1:
a1:ce:89:3d:66:30:e4:b3:28:54:89:3c:da:b2:a4:63:8a:25:
ec:90:25:37:d9:14:4c:1e:a6:a3:cb:e8:34:72:61:c9:5c:4e:
ee:d5:36:46:37:26:d0:60:c2:d2:d5:64:74:2c:17:6d:2c:3d:
e3:45:6d:47:66:ad:0e:52:a1:f4:a7:28:66:5d:b7:f1:c3:00:
fe:69:08:cf:29:90:9f:97:e0:04:18:75:93:5b:2f:a1:3d:ec:
a7:b2:62:80:50:18:bd:34:3f:e6:cb:d5:1e:3a:ac:4c:6c:70:
7a:6f:3d:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:48:06 2025 by rpki-client