Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/T7JnxMIqqT0LRx2L-90B6X1nO6Q.roa
File: T7JnxMIqqT0LRx2L-90B6X1nO6Q.roa (raw, json)
Hash identifier: gKXvXMtrE8WkM+EUoegQjgROQQLh4lj3L4vdg6TXjlY=
Subject key identifier: 4F:B2:67:C4:C2:2A:A9:3D:0B:47:1D:8B:FB:DD:01:E9:7D:67:3B:A4
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0210
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/T7JnxMIqqT0LRx2L-90B6X1nO6Q.roa
Signing time: Sat 01 Mar 2025 01:31:09 +0000
ROA not before: Sat 01 Mar 2025 01:31:09 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 4713
IP address blocks: 125.170.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 1 01:31:09 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=4FB267C4C22AA93D0B471D8BFBDD01E97D673BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:f0:b3:07:72:10:b7:7c:07:c9:34:c3:86:
bb:54:32:51:28:12:ba:81:31:1f:da:d2:c1:26:8c:
85:bc:eb:5e:73:7f:90:1a:82:cd:cd:ac:20:bb:e7:
eb:c9:96:ce:d6:0e:a7:e3:e5:dd:da:10:56:4a:c0:
9a:74:45:a2:3c:af:13:10:24:66:f4:f0:0b:ee:df:
bb:2e:35:f0:34:52:83:80:37:42:01:38:91:53:d8:
dd:f9:d8:f9:9f:71:29:6b:55:7a:d1:6e:f5:17:5d:
80:e3:65:59:6f:35:f6:62:96:a8:60:de:98:ac:f7:
bb:95:d3:60:41:1b:34:95:34:05:cb:d1:c9:fc:7e:
ce:83:17:26:a3:62:6b:b7:c6:e1:b0:58:07:72:cf:
6f:ad:d6:72:e7:c0:39:b1:cb:d6:49:16:c6:f4:b1:
a9:4d:16:70:39:ae:a3:f9:12:66:88:b3:ab:9d:3c:
b3:80:ae:d8:77:12:7a:d7:f3:69:3c:70:a6:d4:94:
6a:ed:95:a4:e3:bc:ef:26:8f:36:0b:d2:14:4a:b1:
04:d1:48:3a:ae:53:49:cc:27:59:5d:b6:33:13:da:
e6:98:0a:05:e5:19:56:02:07:74:29:11:d8:c5:b4:
d9:13:8d:92:3e:90:f5:98:67:c8:d2:a4:fb:c6:e7:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B2:67:C4:C2:2A:A9:3D:0B:47:1D:8B:FB:DD:01:E9:7D:67:3B:A4
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/T7JnxMIqqT0LRx2L-90B6X1nO6Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.170.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:78:2e:e2:cf:34:3b:78:96:67:22:25:8d:18:0a:68:01:c8:
77:b4:95:d9:52:19:83:86:20:66:7c:fe:65:4e:f9:76:b5:54:
60:ff:5a:d9:40:f7:12:c7:f7:fa:5a:3f:61:14:68:78:35:46:
c3:86:b3:2a:1f:ca:c8:1a:36:c9:81:61:6c:f4:90:9d:11:33:
ee:1b:07:00:01:fa:49:bf:cc:59:c9:60:37:51:06:c0:9c:48:
28:03:d6:1d:af:63:64:9e:6e:be:dc:7e:77:74:db:86:dd:3c:
9b:7e:71:5a:be:e6:ab:fe:87:e1:c4:13:94:96:dc:b9:b1:4c:
0f:77:70:ed:da:b1:3d:bf:ea:bf:08:92:b6:cf:e2:68:23:b1:
0f:f8:fa:f0:bb:36:75:8c:7d:dc:9e:d0:93:6d:25:31:b9:87:
ca:96:7c:e7:a0:04:63:e0:45:ac:d5:ab:ab:2f:f8:53:b8:ea:
07:6a:4f:9a:af:09:2a:82:18:18:c9:b5:75:af:52:69:ba:ab:
5b:c7:69:83:3f:83:51:5a:c1:7f:21:c6:fc:55:99:c5:43:d6:
c2:da:30:ea:1b:0a:80:36:de:b3:32:ca:68:46:3b:a4:a3:1f:
b5:c1:42:c6:36:3a:6d:89:89:a7:bb:3d:46:b1:a5:3b:3d:4c:
94:80:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:25 2025 by rpki-client