Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/oMVzokfJHfK7CgARbXxI6mMXVww.roa
File: oMVzokfJHfK7CgARbXxI6mMXVww.roa (raw, json)
Hash identifier: +aQDH8piJD1ZAedakWI/BLi2gk5cqFMAS+lAm5cCaZ0=
Subject key identifier: A0:C5:73:A2:47:C9:1D:F2:BB:0A:00:11:6D:7C:48:EA:63:17:57:0C
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 5A
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/oMVzokfJHfK7CgARbXxI6mMXVww.roa
Signing time: Sat 01 Mar 2025 01:28:34 +0000
ROA not before: Sat 01 Mar 2025 01:28:34 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 63789
IP address blocks: 202.9.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Mar 1 01:28:34 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=A0C573A247C91DF2BB0A00116D7C48EA6317570C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:74:17:b9:ed:fd:1b:89:7d:64:bd:9b:e2:
09:7e:9a:83:d6:4e:4d:33:1e:1b:2a:5f:52:55:6a:
13:ff:4b:b4:87:df:47:4a:62:3b:9a:1f:88:ce:99:
f5:43:4b:13:40:fd:89:a6:bc:92:01:60:f0:70:4c:
b3:96:69:23:70:50:96:b6:b4:59:35:4c:2d:93:b7:
d8:29:c3:2d:1f:90:b2:81:85:43:c0:ab:3f:a0:60:
fc:32:9c:3d:69:6e:ff:14:54:09:18:6d:6e:90:5e:
61:64:86:53:7d:ec:7a:fa:2d:b7:45:e9:82:dd:9c:
fe:11:a1:b2:de:3d:9d:7f:dd:f7:45:e5:bd:03:c9:
9d:b5:d3:31:77:85:64:fa:4a:76:44:40:87:7e:8d:
1c:e3:c0:70:be:62:61:1d:ad:ac:a6:0a:2b:4f:4c:
d7:aa:dd:6a:b6:27:40:58:8a:1e:17:73:49:f8:d6:
ec:c9:fb:23:72:77:f3:51:23:a4:f2:79:5d:ba:68:
50:da:0b:6f:63:b8:af:72:51:20:ac:75:25:d3:fd:
f0:0d:05:1e:2e:87:10:eb:e9:3c:71:af:76:1d:49:
b0:bc:97:a4:25:a1:e4:fc:43:55:2c:32:5e:01:8c:
e7:b2:7d:bb:4f:4f:1f:dd:33:de:99:bd:9c:b4:e1:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C5:73:A2:47:C9:1D:F2:BB:0A:00:11:6D:7C:48:EA:63:17:57:0C
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/oMVzokfJHfK7CgARbXxI6mMXVww.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.9.209.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6c:91:5b:17:e9:fe:01:00:cb:70:c0:89:11:6d:54:8d:cb:
c3:03:a2:18:e0:37:d4:e6:15:02:24:84:c8:52:c5:d6:84:4e:
2b:12:1d:5c:22:da:52:da:d7:df:ca:bd:b6:17:f7:6c:76:9a:
6a:0b:54:55:44:ea:cf:fa:b9:d4:08:47:8f:54:1a:e7:07:d2:
49:fd:68:27:6a:35:f9:80:0e:67:ab:82:4d:1e:b3:5d:a6:43:
9e:98:6e:b1:da:4a:4c:81:fc:97:81:67:4e:8b:0e:70:b1:21:
ed:96:df:78:0e:e1:0b:97:e7:4b:b4:6b:31:a6:8f:6a:69:b9:
74:c6:3b:c9:7d:2b:e6:4f:fb:76:5a:70:f2:13:06:0d:f7:60:
00:35:5c:84:bb:39:3e:9a:4a:7c:a4:77:97:9c:a4:f7:d4:02:
88:df:12:b0:07:ce:19:ae:99:4b:4b:8e:f0:a5:9c:38:49:ec:
11:ec:04:4d:80:0a:11:b6:6b:73:ce:6d:70:d0:b5:9c:51:75:
b6:60:31:7d:f6:bb:fd:28:34:25:9a:62:5f:83:a0:2c:92:3b:
ae:94:a2:59:3d:b5:ae:24:c6:3d:1b:5e:38:fc:d6:46:af:c2:
5e:b9:c7:09:62:8c:b3:8a:63:38:4c:40:69:60:cc:36:45:68:
79:2f:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:21:09 2025 by rpki-client