Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FTbtqNGiSPFalB6iiNC4702EtXw.roa
File: FTbtqNGiSPFalB6iiNC4702EtXw.roa (raw, json)
Hash identifier: 8ZXE9gXu8t9iFp9D75j3QKcHJjdIzm6gtwI87q8yd4Y=
Subject key identifier: 15:36:ED:A8:D1:A2:48:F1:5A:94:1E:A2:88:D0:B8:EF:4D:84:B5:7C
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0394
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FTbtqNGiSPFalB6iiNC4702EtXw.roa
Signing time: Thu 27 Jun 2024 04:04:29 +0000
ROA not before: Thu 27 Jun 2024 04:04:29 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 146979
IP address blocks: 202.236.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916 (0x394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Jun 27 04:04:29 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=1536EDA8D1A248F15A941EA288D0B8EF4D84B57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:d1:5c:e2:f0:d5:98:a6:c3:7a:3e:1a:62:
5d:31:24:c8:ec:93:9f:50:56:73:b4:da:8c:51:4f:
af:50:96:c2:ea:ad:d4:c9:6c:c2:6b:ec:cf:25:f3:
55:cc:ca:58:8f:5f:7c:01:d5:63:70:5e:8a:5c:e7:
55:c8:7f:4c:85:73:2f:ef:d9:8f:1a:95:08:94:5a:
a9:64:ff:ec:35:c4:f6:48:0f:74:41:3e:78:80:99:
c1:40:c1:71:db:68:26:12:47:28:7d:36:01:d9:9e:
87:60:59:05:6b:eb:54:67:d8:01:d6:b9:8f:f7:b8:
40:85:d0:02:d6:4d:b5:85:e2:d4:cd:ec:7e:31:3d:
47:ba:12:f1:fa:6c:dc:bd:6d:f2:73:80:09:d9:83:
1d:47:a8:3d:61:24:98:2f:67:1d:af:91:0d:e3:63:
06:03:02:f4:d9:fa:71:ef:e1:bc:ea:9a:f4:af:db:
11:3f:e5:8b:8e:c2:83:ff:2d:de:5d:94:0a:96:98:
8c:f1:79:8c:1b:1b:02:30:f9:f5:00:b9:5a:15:3f:
c4:35:86:bb:75:0e:28:f0:1f:0e:f0:f2:08:c7:a7:
2c:ed:da:ce:07:12:2f:a4:48:65:dc:c2:32:fa:94:
94:2b:df:90:ad:96:2e:d5:90:c9:f4:36:46:d6:eb:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:36:ED:A8:D1:A2:48:F1:5A:94:1E:A2:88:D0:B8:EF:4D:84:B5:7C
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FTbtqNGiSPFalB6iiNC4702EtXw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.88.0/21
Signature Algorithm: sha256WithRSAEncryption
86:a6:76:58:a7:fb:83:8a:09:b9:d3:4a:a0:f7:ae:c5:5c:ae:
6a:e5:8a:10:53:0a:27:72:0a:56:e6:d0:2f:8e:c6:00:d7:77:
04:fa:58:01:6f:62:40:b8:fd:d9:36:a6:13:cb:19:f1:99:68:
91:81:de:c4:75:7e:fa:2f:ff:fc:d9:9b:b6:0f:0b:72:eb:27:
25:04:77:d3:30:e6:63:ad:b1:a6:b0:e5:f5:bb:3e:7e:c4:2e:
02:90:b1:c9:f3:4c:d7:bb:31:83:d1:b9:7b:3e:ff:81:1f:b7:
e2:5a:3c:99:fa:60:14:ed:62:da:e3:b8:d6:70:0c:23:54:8f:
65:30:65:63:fe:7f:58:34:56:f2:df:3a:b4:c2:8e:08:9a:91:
b8:9f:21:50:85:f4:c0:27:6b:80:1d:26:0a:db:2b:7c:48:08:
0a:f1:25:42:03:f8:a7:a1:e9:08:00:bb:26:0d:a9:37:1a:76:
5a:a8:2a:76:65:bc:19:49:db:3e:f5:19:67:40:0f:49:ff:95:
65:ef:4f:f6:24:4f:51:a3:84:e3:1d:28:2f:cf:fe:0d:ed:03:
b6:3a:ca:aa:fe:83:41:08:74:7e:9e:84:f2:d7:c9:b5:13:56:
f0:c8:66:ed:8f:92:32:e9:a8:55:83:79:ed:91:38:a4:a8:0f:
98:47:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:23 2025 by rpki-client