Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/2q2MbxApQMfVycV1fWL24pUMKAs.roa
File: 2q2MbxApQMfVycV1fWL24pUMKAs.roa (raw, json)
Hash identifier: Uzfw+6TFZ7cNZ2aWrfOLoceSZX6q977u2ogyEeAgp6Y=
Subject key identifier: DA:AD:8C:6F:10:29:40:C7:D5:C9:C5:75:7D:62:F6:E2:95:0C:28:0B
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 020F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/2q2MbxApQMfVycV1fWL24pUMKAs.roa
Signing time: Sat 01 Mar 2025 01:31:09 +0000
ROA not before: Sat 01 Mar 2025 01:31:09 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 4713
IP address blocks: 124.96.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 1 01:31:09 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=DAAD8C6F102940C7D5C9C5757D62F6E2950C280B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:33:b6:d7:6e:4a:62:eb:02:02:b7:5e:f8:
3b:3f:ce:e1:b1:ac:ff:2f:f9:d1:4b:e9:31:76:31:
7e:c0:ce:5d:f6:67:2f:cf:97:21:9e:e6:f7:74:b1:
cb:1b:a6:61:02:0a:2f:dc:c6:cc:2e:ea:49:89:ee:
ae:84:25:48:30:29:db:c8:1c:0f:53:f8:bc:a6:bb:
84:87:f1:a7:4e:81:60:3e:73:89:d1:60:8c:d0:97:
9f:91:6b:21:35:1d:00:c2:eb:e5:06:b7:13:22:a7:
dd:48:00:fe:34:52:6c:f9:57:a9:72:f2:a5:7b:d4:
f6:2a:d2:65:ef:87:aa:50:ad:79:89:a4:b6:4e:93:
2f:5f:c2:0f:58:d9:6d:21:57:0c:de:3c:a0:46:09:
9c:4c:f2:32:3f:82:9f:8e:c1:e9:1b:77:71:cd:0a:
09:d0:9b:81:10:d1:2b:af:2e:67:15:0c:77:9a:35:
e6:b6:32:4d:4d:e5:ae:d7:d2:54:bc:6b:50:78:86:
2e:20:8f:f5:fb:2b:f7:43:0f:9b:c6:55:73:ab:1a:
1d:7f:4f:c8:07:bf:5e:44:4d:dc:f9:05:46:3e:06:
3d:fc:d5:19:56:51:d6:fc:27:e7:4d:5c:98:c6:20:
90:91:a1:a3:25:60:81:60:79:a9:c5:fc:24:b0:1b:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AD:8C:6F:10:29:40:C7:D5:C9:C5:75:7D:62:F6:E2:95:0C:28:0B
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/2q2MbxApQMfVycV1fWL24pUMKAs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.96.0.0/13
Signature Algorithm: sha256WithRSAEncryption
bb:2f:aa:ec:21:86:d9:e7:84:b8:96:f2:1c:7a:9d:69:78:f2:
27:b7:af:65:bb:85:d6:55:33:f0:73:35:a0:7b:ce:fd:31:79:
5b:0a:8a:53:cb:7e:3f:d1:23:08:92:d8:8d:3c:5a:ba:f6:f3:
e2:07:33:c4:ef:7b:82:3e:41:56:0a:02:75:f7:11:db:43:e5:
2c:52:64:11:66:76:8b:11:a0:dd:41:52:1e:f5:da:44:c2:bb:
f5:0f:f2:26:6f:72:19:32:1e:28:76:11:67:0e:3a:71:45:00:
be:b1:74:b2:12:bd:34:ab:3a:97:0a:db:fd:f1:6e:b0:71:2a:
73:58:16:73:87:bd:26:7b:af:93:f0:b1:0b:f3:d1:5e:a0:92:
70:c8:5f:29:d3:eb:67:a4:a6:01:6b:12:c6:dc:ac:78:52:79:
ba:7c:f7:b6:60:4e:fd:ed:cb:da:c5:0c:e6:f8:76:c3:d2:85:
ab:19:ce:42:d8:d8:89:91:35:e6:0c:d8:95:43:57:38:e1:e1:
e0:09:1a:21:52:5d:ff:9c:cc:d8:24:ee:a1:14:7d:c2:99:bd:
2b:1a:81:9b:a9:7e:e5:df:83:60:06:f6:e9:74:52:da:f7:42:
87:41:ca:47:89:c1:16:af:20:ef:2a:78:ac:11:f5:fc:b2:d2:
9c:b6:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:38 2025 by rpki-client