Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/x1Ay94HoQw_gcLcowtRzX9EM0sM.roa
File: x1Ay94HoQw_gcLcowtRzX9EM0sM.roa (raw, json)
Hash identifier: /pfGomLTAnvQqxtlS+kSvIh6nAl0FUdVqWxT5i1ceNM=
Subject key identifier: C7:50:32:F7:81:E8:43:0F:E0:70:B7:28:C2:D4:73:5F:D1:0C:D2:C3
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: F8
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/x1Ay94HoQw_gcLcowtRzX9EM0sM.roa
Signing time: Sun 30 Jun 2024 01:28:32 +0000
ROA not before: Sun 30 Jun 2024 01:28:32 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 55898
IP address blocks: 203.141.54.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Jun 30 01:28:32 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=C75032F781E8430FE070B728C2D4735FD10CD2C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:25:af:ba:84:50:22:86:39:17:e2:b3:85:
4f:fa:3c:0a:9a:83:6b:08:2f:09:45:e2:17:0a:8c:
ec:a2:2b:96:2c:e9:69:32:85:72:b5:75:4d:3d:f3:
01:39:36:02:a0:f6:8d:08:88:9b:6d:b0:32:35:aa:
32:69:2b:a6:dc:71:df:9a:2a:00:ea:df:f1:22:52:
c5:71:af:a3:fc:8b:ba:e5:bf:0e:33:f4:ac:14:1a:
4a:48:67:22:10:d6:d4:a3:17:5d:29:77:49:8d:4c:
97:75:c8:ab:ae:6b:24:b9:5b:71:09:12:3f:94:5e:
04:6b:83:4e:3f:d5:28:6d:97:f3:ce:d3:71:a4:a6:
8a:d8:2f:7a:12:23:38:ec:5e:fe:e1:82:1f:10:67:
98:e0:5e:6e:ec:57:e2:41:57:1a:ba:f2:11:60:ef:
9e:02:95:13:dd:53:e1:31:2e:c2:68:a8:e0:bc:8c:
be:8f:fd:c2:89:71:ca:42:bf:52:64:30:58:33:ed:
aa:7c:f8:8c:9a:12:10:9c:f1:fb:6e:8f:67:a0:ee:
df:de:12:ec:a9:00:9e:7a:ae:5a:c0:b2:5c:d6:7a:
d9:57:16:e5:45:da:99:4c:8f:b1:8d:9f:fa:70:31:
8e:68:ca:49:ab:d5:e6:15:ae:7b:ee:49:87:83:68:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:50:32:F7:81:E8:43:0F:E0:70:B7:28:C2:D4:73:5F:D1:0C:D2:C3
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/x1Ay94HoQw_gcLcowtRzX9EM0sM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.141.54.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a9:cb:53:70:b3:03:d2:0c:3d:7a:c3:ab:c8:5b:fe:9b:ba:
21:15:bd:b1:00:21:7c:e4:0c:81:4e:8f:3a:d6:15:64:c9:b6:
aa:3d:ce:b5:ae:1c:49:c1:ff:24:d2:72:90:ca:a0:92:ce:f7:
c1:99:e0:3d:8d:28:a2:22:9e:11:30:38:27:ab:e3:5a:fb:73:
fb:b5:c0:64:3c:66:3c:3f:a0:55:8f:d5:16:d9:5d:cb:85:8f:
a1:5c:f0:d5:9f:50:7f:47:3e:5e:40:61:51:dc:bd:26:55:cb:
21:7b:9a:5d:59:78:57:84:5e:dd:9d:22:32:3d:16:58:72:0b:
76:94:cf:fa:2b:41:f5:23:48:e2:98:0c:54:44:13:84:fc:bd:
19:1a:ef:38:5f:5c:91:c3:69:35:6d:71:b4:33:e8:eb:e6:ad:
88:5f:99:aa:fd:9b:3d:04:b6:8a:5f:7b:d9:5f:14:f9:fb:4d:
15:39:41:da:62:6b:4a:00:c5:0d:64:02:c0:23:f3:11:99:90:
55:16:22:98:b3:e0:f1:4f:93:d4:d5:e6:49:7f:55:c9:7b:c4:
42:81:5b:54:de:f0:ec:27:54:f4:63:4d:3d:ba:8b:2d:b0:99:
ac:aa:cd:58:85:2f:1f:22:a0:9f:00:b6:43:45:a6:f8:94:41:
b6:4a:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 09:06:45 2024 by rpki-client on console-fra.rpki-client.org