Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa
File: iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa (raw, json)
Hash identifier: 8CjfmAubG1rN3/yYGa9jSzoh1YjrWwT5yuraFxJJrRQ=
Subject key identifier: 8A:ED:45:87:1F:F0:BA:C7:FA:A8:D3:C7:D3:B6:F1:76:C2:7D:B6:3B
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: C4
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa
Signing time: Fri 31 Jan 2025 01:31:36 +0000
ROA not before: Fri 31 Jan 2025 01:31:36 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 18126
IP address blocks: 14.132.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: Jan 31 01:31:36 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=8AED45871FF0BAC7FAA8D3C7D3B6F176C27DB63B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:d3:e1:82:46:d0:b0:d3:1b:14:9f:01:87:
20:7c:48:11:1a:d8:b4:cb:ff:79:c8:73:c7:5b:17:
3b:57:ea:c4:d2:be:7a:18:a0:bb:8a:9f:4b:40:03:
15:12:ae:52:f5:8c:8f:d5:b3:eb:3e:96:3c:2f:8a:
df:80:56:bb:09:b3:70:1d:27:bc:4c:e3:cc:6f:a1:
72:10:86:4d:65:df:a2:f9:e5:59:f5:52:1b:35:3a:
1b:5c:03:57:4a:c4:dc:18:b6:a9:1e:45:ff:67:ea:
4a:f2:72:f3:a9:49:96:b9:e0:e6:42:39:7a:e1:1a:
ec:cc:2d:24:56:25:ad:61:dd:bb:90:44:00:fa:74:
12:20:19:06:5b:2a:79:8c:ed:9d:1b:99:e8:9b:8b:
be:83:0f:69:2e:c1:77:bd:6e:8d:80:40:f2:f8:b0:
c7:c2:68:df:9f:b1:ab:97:0a:c3:78:6d:37:57:5b:
58:ca:61:ec:60:a2:43:f7:f8:c9:cf:22:aa:ab:d0:
aa:2d:ca:9c:c3:da:a4:fb:b9:e4:de:fa:74:2d:ad:
20:43:7b:fc:93:eb:4e:5d:37:8b:91:8b:d3:a6:16:
88:36:6a:3f:a4:6b:00:e6:4b:3e:12:ff:fa:c1:ec:
47:7f:8d:a1:b7:67:8d:fe:f6:97:1c:a8:04:81:a9:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:ED:45:87:1F:F0:BA:C7:FA:A8:D3:C7:D3:B6:F1:76:C2:7D:B6:3B
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.132.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2a:ee:86:ce:18:7d:95:b3:a9:2d:2f:6e:c5:dc:c2:02:bb:de:
a8:b5:d0:85:1e:d6:5d:74:03:af:7f:1f:7d:79:0c:7d:31:dd:
9d:f9:9e:37:05:f3:21:88:7f:f0:4c:7f:51:99:14:c5:22:ef:
9a:59:a1:0e:0c:bd:ab:ec:36:f1:a8:0e:a8:91:10:c8:ee:89:
21:eb:3e:08:ea:90:c9:dd:76:47:04:2b:5f:31:2a:e3:04:61:
65:35:a1:6c:32:d0:76:e8:07:eb:65:c5:4b:e3:5b:a3:81:49:
2a:09:12:2a:39:36:48:23:a1:57:49:e4:f8:fa:64:36:97:b4:
f2:81:52:06:87:d0:35:a2:9c:8f:38:b4:96:22:0e:d4:29:9b:
68:31:73:39:26:f3:95:a7:43:95:7b:75:20:66:91:2f:22:07:
cd:fa:d8:d2:4b:28:f7:93:c3:ed:60:43:68:b2:88:dc:27:44:
5b:82:36:59:b9:3d:03:64:93:f7:60:6e:72:28:4e:71:4c:47:
87:f8:3d:70:0f:0a:96:0c:2b:6c:94:f5:27:b6:21:b0:43:1f:
51:b5:c3:fa:1d:43:46:d6:19:3e:ba:1b:76:fa:e9:b2:02:a2:
ff:10:bd:6a:c8:6e:5f:37:53:21:55:8f:4e:49:db:42:6c:06:
ce:61:91:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:58 2025 by rpki-client