Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0nD8Ck-1qGQW_yeFPP6ioJ5GbbE.roa
File: 0nD8Ck-1qGQW_yeFPP6ioJ5GbbE.roa (raw, json)
Hash identifier: WwQ7asjHbdkaG7C0hkbesELSctBwq+fweV4wTz46Oug=
Subject key identifier: D2:70:FC:0A:4F:B5:A8:64:16:FF:27:85:3C:FE:A2:A0:9E:46:6D:B1
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 021A
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0nD8Ck-1qGQW_yeFPP6ioJ5GbbE.roa
Signing time: Mon 20 Feb 2023 07:59:20 +0000
ROA not before: Mon 20 Feb 2023 07:59:20 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.92.218/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:59:20 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=D270FC0A4FB5A86416FF27853CFEA2A09E466DB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:f3:69:cd:52:df:c9:de:cf:e0:ef:d4:6c:
0e:39:49:8e:99:d4:f0:e5:02:40:73:50:f0:96:f0:
08:f9:86:9e:de:43:ee:ea:8c:25:f0:67:fd:cc:ab:
53:be:8b:87:d8:d0:07:1d:b8:e9:31:6a:db:9a:ac:
8f:60:9a:f5:e1:e6:b2:38:03:25:23:ea:01:fa:54:
a6:57:f7:5b:f9:2d:b7:ad:37:50:55:99:83:a0:0a:
05:40:36:52:20:51:a5:bd:28:eb:4e:fc:e4:53:4b:
91:34:cf:03:f3:56:18:ce:40:6b:7f:fb:12:68:66:
af:da:2d:d4:1b:4b:ce:4c:65:db:dd:f2:5f:90:fd:
f9:dd:5f:3e:a0:21:e3:1e:ba:f8:b2:b8:81:bf:1d:
57:4e:68:3f:42:ae:87:51:12:3d:0f:9e:b6:cf:b4:
be:b1:6d:0b:41:c3:b5:70:fb:e9:59:50:a3:12:27:
ce:c9:2a:44:55:79:47:38:48:74:02:6d:e7:bb:4a:
74:a4:3e:4e:ca:6a:30:c5:67:a8:d1:8a:6e:46:06:
a9:51:47:3d:d5:b7:23:71:f3:64:d3:55:bc:c9:bf:
4c:02:81:eb:d6:b0:f8:39:05:35:fa:b2:76:29:79:
f5:b2:3a:e7:2c:32:65:a6:99:84:64:ec:74:8f:9c:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:FC:0A:4F:B5:A8:64:16:FF:27:85:3C:FE:A2:A0:9E:46:6D:B1
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0nD8Ck-1qGQW_yeFPP6ioJ5GbbE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.92.218/32
Signature Algorithm: sha256WithRSAEncryption
2d:3a:ea:b2:c4:44:94:a9:d5:91:83:d6:90:72:31:00:9b:f1:
d8:64:38:38:c3:c8:70:95:8c:a2:67:f7:44:08:88:ad:71:ba:
79:a2:10:ce:ff:66:74:b3:9c:78:59:f6:49:0b:7c:14:8c:f2:
4c:09:f5:59:de:26:77:aa:83:34:52:b5:1f:e2:a1:76:f2:d1:
74:24:96:30:99:45:8c:4a:e6:25:9b:af:94:e3:30:0b:f3:bd:
5a:00:2c:9e:22:1d:22:a0:5c:7c:d9:95:4c:98:ee:18:de:a4:
6b:bd:6f:d1:e0:af:0c:26:9b:4d:bf:05:9c:41:fc:3a:f6:e3:
ba:93:e1:0b:cd:1b:85:c5:dd:48:47:03:56:9b:d0:45:d3:06:
c8:80:3e:15:2b:cb:ee:8b:32:32:aa:8a:69:12:f4:83:8c:89:
30:fb:cf:3b:96:8c:ed:06:14:72:be:03:f9:0c:80:7b:c4:30:
17:7f:82:5d:51:72:ac:ec:d1:10:9c:10:68:a3:43:08:d5:99:
15:fd:8e:18:d7:e9:9b:49:ac:ec:48:7a:96:1a:1a:6a:4a:6b:
e3:04:92:95:ea:a1:e3:e2:91:46:3c:d7:5c:fa:13:69:f1:04:
97:84:7d:5f:31:1f:40:fa:00:bb:ae:e6:c4:3c:cc:25:9a:12:
69:03:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:24 2025 by rpki-client