Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20174/DHT-x1TkOwOKsXKXdzSVFdyZOiA.roa
File: DHT-x1TkOwOKsXKXdzSVFdyZOiA.roa (raw, json)
Hash identifier: zrUVj4d8FBjsvJ5bVQ0qZBibqZQG/2ABvTWkanKUpZA=
Subject key identifier: 0C:74:FE:C7:54:E4:3B:03:8A:B1:72:97:77:34:95:15:DC:99:3A:20
Certificate issuer: /CN=B773AE2B975AB2E4EEFF9B179D5A259A0CA49417
Certificate serial: 0C
Authority key identifier: B7:73:AE:2B:97:5A:B2:E4:EE:FF:9B:17:9D:5A:25:9A:0C:A4:94:17
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/DHT-x1TkOwOKsXKXdzSVFdyZOiA.roa
Signing time: Wed 12 Mar 2025 11:25:16 +0000
ROA not before: Wed 12 Mar 2025 11:25:16 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 152858
IP address blocks: 209.107.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B773AE2B975AB2E4EEFF9B179D5A259A0CA49417
Validity
Not Before: Mar 12 11:25:16 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=0C74FEC754E43B038AB1729777349515DC993A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:1b:1f:ad:ac:94:30:8f:ee:1c:76:b0:10:
b9:23:12:57:38:f4:03:78:16:91:0f:9b:a1:b1:62:
91:4f:21:0b:77:bf:3c:42:2e:47:19:c5:7e:f3:04:
66:94:fa:70:ca:30:6a:59:c5:78:b7:ed:e9:21:60:
51:41:19:07:ab:33:f4:a9:79:4b:57:d2:9b:57:2f:
d9:48:32:f7:54:10:e5:7d:51:5b:90:6e:14:8e:0c:
da:3b:34:8c:e1:9e:48:d8:59:90:33:48:f6:a8:1e:
fc:8d:c1:7b:47:f3:78:35:b6:8c:7b:94:b5:c9:43:
88:a7:ef:99:fd:20:a8:04:de:b1:a3:c1:46:2f:0d:
7f:6a:ab:02:4c:ac:4f:81:c8:f0:34:cd:b8:63:b7:
5a:c6:f4:44:22:33:40:68:d7:23:cc:4e:1e:0d:ed:
43:9c:41:d4:1e:73:1b:e5:b2:14:49:ba:81:dd:8a:
ae:f5:d9:d0:24:cd:af:eb:9a:4a:5e:ef:b9:06:2e:
07:16:94:c5:f0:6f:62:47:12:10:95:34:67:b0:c3:
9b:8b:53:18:58:5a:df:49:54:3b:1a:df:47:c0:d8:
4c:4a:e8:ee:bc:e2:0d:16:a3:76:42:7e:29:f3:48:
e5:bb:fc:a1:be:b9:f8:17:d2:cd:86:c9:95:98:3f:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:74:FE:C7:54:E4:3B:03:8A:B1:72:97:77:34:95:15:DC:99:3A:20
X509v3 Authority Key Identifier:
keyid:B7:73:AE:2B:97:5A:B2:E4:EE:FF:9B:17:9D:5A:25:9A:0C:A4:94:17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/DHT-x1TkOwOKsXKXdzSVFdyZOiA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
209.107.140.0/22
Signature Algorithm: sha256WithRSAEncryption
31:cb:c2:b9:f8:5e:ad:f8:70:1c:01:20:c0:5b:bd:3e:e7:b8:
84:f7:17:c5:19:69:ff:2b:ed:e4:ab:51:6e:8e:25:32:a0:1f:
07:5d:0c:8f:a3:22:11:72:63:8c:e4:9b:3e:c2:d3:77:77:a0:
23:72:ed:f8:de:02:57:64:91:9b:58:e3:25:1b:a1:0b:bb:3e:
2e:66:c0:0c:11:63:7b:a9:45:7a:ed:03:b9:fc:12:f8:94:10:
d2:b1:ea:c8:d4:02:ed:b0:4e:74:82:0f:6b:81:df:1b:68:3c:
16:76:44:99:53:62:26:b6:55:8b:5e:f5:51:2c:1f:22:06:32:
6b:c8:7a:d5:cb:05:6b:c7:15:3f:21:68:f5:c4:8d:b2:de:ab:
81:90:6f:35:d9:a7:0a:70:b5:0e:45:1b:39:e0:02:99:9f:a3:
ce:21:12:aa:33:57:02:ec:f8:a1:e4:6b:fa:d1:92:53:bc:fb:
14:c4:0c:49:89:52:76:8e:db:84:29:84:a8:a9:88:a2:9d:d8:
9d:99:ec:92:c4:bb:2d:74:8c:65:8f:5f:62:e1:d4:cd:16:da:
3d:f7:5c:05:39:ce:cb:e2:cc:cf:7e:b5:76:2d:52:98:ee:3b:
a5:cb:f3:78:2e:8e:3f:6e:7c:a0:a2:54:3d:7f:74:cf:e3:0b:
60:d9:30:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:42 2025 by rpki-client