Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/kDPxcp7iq4_STyniVj91rFBsZUc.roa
File: kDPxcp7iq4_STyniVj91rFBsZUc.roa (raw, json)
Hash identifier: Lo7SOWUjPjUSSJJkmKlNJ9PLvDkWl4ZMH2unMUi0BM0=
Subject key identifier: 90:33:F1:72:9E:E2:AB:8F:D2:4F:29:E2:56:3F:75:AC:50:6C:65:47
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: C8
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/kDPxcp7iq4_STyniVj91rFBsZUc.roa
Signing time: Fri 31 Jan 2025 01:31:22 +0000
ROA not before: Fri 31 Jan 2025 01:31:22 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 18126
IP address blocks: 202.124.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: Jan 31 01:31:22 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=9033F1729EE2AB8FD24F29E2563F75AC506C6547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:11:62:53:aa:fb:ca:97:10:df:97:45:3c:
25:dc:f8:5e:cc:f6:62:93:41:6d:67:e3:c1:c3:1c:
8c:58:6f:e3:01:b3:ea:6b:5b:d6:f4:a3:8d:59:07:
da:03:ec:7d:07:80:a9:e2:78:25:7a:5c:c2:74:73:
4f:44:84:d6:24:63:c2:a4:a3:c2:1b:ec:16:a7:db:
3e:8a:10:8f:d7:2e:35:b9:3c:59:d9:db:8d:cd:bd:
3d:91:ad:dc:75:bf:cb:65:b0:7d:b6:41:88:54:ba:
44:22:05:c1:9b:e2:ed:1e:3c:02:08:d0:cb:91:7c:
49:41:21:d3:70:7a:4f:ef:9e:15:51:8b:78:fc:b9:
71:5c:6f:97:cf:c0:f5:bd:d8:7c:b6:34:a3:dc:98:
59:77:0d:d6:9d:43:2d:8b:01:71:cc:06:8f:a9:15:
69:ff:2d:37:04:b9:d3:a8:ee:1b:82:14:c3:89:e7:
9e:67:fd:66:7f:c9:35:13:b8:61:f7:da:b8:8e:9f:
50:df:13:43:3f:b5:68:1c:70:9d:be:b7:d4:c9:4b:
38:9d:72:81:35:ce:04:57:57:ed:28:af:bb:2b:8a:
37:50:dc:4f:ae:0b:d1:68:6f:f2:f7:bb:5f:27:7c:
c6:2e:3f:bc:1a:45:b5:56:b0:18:d8:7f:97:3b:bd:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:33:F1:72:9E:E2:AB:8F:D2:4F:29:E2:56:3F:75:AC:50:6C:65:47
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/kDPxcp7iq4_STyniVj91rFBsZUc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.124.208.0/20
Signature Algorithm: sha256WithRSAEncryption
60:69:bb:01:57:ad:b7:c1:0e:e5:4a:b3:70:73:f2:ae:f5:93:
20:54:55:a5:f9:5a:bd:77:0e:15:0f:17:2f:b4:13:0d:1d:5a:
44:dd:44:12:a0:d7:38:de:e9:0b:8a:88:bf:1d:18:dd:f0:04:
78:a4:74:be:81:87:a6:a8:2d:06:24:a1:fd:14:cd:94:bd:bc:
cc:09:3a:35:60:3f:75:99:fb:bd:7f:c4:26:46:63:fd:11:b4:
b8:0d:a7:21:68:21:56:42:b0:cc:e6:45:6a:4b:77:3c:96:99:
d0:f5:ba:7c:0c:a9:f1:4e:ee:eb:fb:05:82:d2:60:17:ba:44:
21:c7:bb:8c:15:d4:51:8c:da:24:95:ba:4c:fe:e3:15:e1:8f:
45:b5:08:6f:10:8b:7c:93:a8:ed:8f:69:c3:92:f7:66:0c:a9:
99:c9:d5:4b:ee:d7:57:40:32:94:a9:7c:7a:26:43:63:6d:32:
fb:1e:be:f6:91:82:f8:7a:bc:e3:21:51:3a:f1:8b:61:71:ab:
30:28:ed:4f:e4:82:e0:d5:9c:ae:a6:e6:ee:85:f8:fc:30:db:
ee:1c:82:c7:2e:6f:80:8f:e4:45:02:e9:e4:8c:ff:48:22:c6:
99:35:86:aa:e9:9e:98:f4:9d:de:81:0d:00:79:2a:4a:f7:ab:
9c:a9:87:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:13 2025 by rpki-client