Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/-k3F5AeQmJ3yE2Fzi8ABOJjwZEo.roa
File: -k3F5AeQmJ3yE2Fzi8ABOJjwZEo.roa (raw, json)
Hash identifier: rjpTDpXxZTJ1kU8mJ8ExXLnODkZ5oBQgR49MJ12SHps=
Subject key identifier: FA:4D:C5:E4:07:90:98:9D:F2:13:61:73:8B:C0:01:38:98:F0:64:4A
Certificate issuer: /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial: 03
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/-k3F5AeQmJ3yE2Fzi8ABOJjwZEo.roa
Signing time: Fri 07 Mar 2025 01:01:41 +0000
ROA not before: Fri 07 Mar 2025 01:01:41 +0000
ROA not after: Tue 17 Feb 2026 15:19:37 +0000
asID: 2515
IP address blocks: 2407:9900:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
Validity
Not Before: Mar 7 01:01:41 2025 GMT
Not After : Feb 17 15:19:37 2026 GMT
Subject: CN=FA4DC5E40790989DF21361738BC0013898F0644A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:f3:16:2e:d2:88:2b:65:1f:51:ec:70:22:
c9:7a:42:fd:b1:8c:7c:ae:7d:17:0c:f9:9a:09:18:
cc:28:c1:f0:d7:55:a9:a6:2d:17:a9:e7:bf:bc:b4:
8f:21:9f:b2:bb:03:8d:60:ff:e9:45:86:fe:fa:af:
3c:3f:df:c2:84:84:44:ce:b3:8e:ad:63:96:f0:54:
e2:de:23:97:0d:c1:03:bb:52:09:3a:aa:e5:f0:1c:
dc:2f:d4:cd:55:8f:d3:3d:7e:6b:62:df:1a:c8:e4:
dd:85:a9:d8:67:26:15:87:47:68:0a:0f:13:9a:05:
db:57:70:bf:e9:ce:cb:d9:62:f9:21:16:40:09:98:
6a:b8:5c:59:a6:5d:2b:5c:74:7c:0e:3b:44:ca:a3:
03:51:06:0a:64:7d:87:f3:0e:ad:06:72:62:b8:9c:
10:47:97:b7:78:6b:9f:bb:43:d7:2b:b4:1d:02:c0:
e0:c4:4c:74:be:c5:dc:85:3c:3f:42:fc:35:09:d3:
9b:e8:0e:69:e9:3c:f2:1b:fe:ce:15:77:9b:31:ca:
6f:56:5f:1e:d2:c1:08:35:2f:ff:87:d5:c1:2d:c8:
82:40:1a:bb:13:84:4d:0b:56:88:f6:8e:18:d9:c8:
6a:17:ea:82:ad:af:f9:10:f6:13:58:62:69:20:1c:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:C5:E4:07:90:98:9D:F2:13:61:73:8B:C0:01:38:98:F0:64:4A
X509v3 Authority Key Identifier:
keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/-k3F5AeQmJ3yE2Fzi8ABOJjwZEo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9900:1000::/36
Signature Algorithm: sha256WithRSAEncryption
17:54:c5:ff:71:e8:7a:c2:17:4e:83:1d:66:de:99:a9:28:fd:
dd:06:b2:8c:8d:f4:c1:16:44:63:7b:37:04:02:72:ed:b0:e1:
ab:4b:4c:57:b3:98:53:cc:04:dd:e0:04:d2:c9:1e:3b:3b:ce:
05:d9:3e:e5:b7:4c:84:cf:2a:b9:7e:6a:0f:dd:6d:9d:ec:95:
57:a4:4d:8f:20:21:7b:f5:f7:65:39:55:18:43:09:31:db:b3:
35:03:13:fc:63:d0:4e:82:b9:d9:8a:dd:67:7e:ba:08:84:c5:
d2:a4:fe:9c:c8:92:d4:51:11:78:e6:a6:c2:dc:6b:fb:fc:38:
b7:fb:3a:a8:b1:76:84:42:c9:74:36:ea:66:03:f9:97:57:62:
b6:9c:fb:23:8b:97:19:5d:d8:d0:0c:8c:38:d3:0e:0b:f5:a9:
fd:7a:bc:23:d5:df:7b:37:7a:e4:0a:b7:72:d7:97:cc:e1:10:
60:6c:18:e7:de:91:f4:ad:56:6a:ba:d1:27:9d:32:05:79:5f:
53:a8:d0:91:ce:ee:56:9e:5c:69:32:0c:41:c2:b9:0f:5c:33:
49:43:3d:75:56:1f:fa:2d:db:7e:d0:6a:1b:7b:c2:85:7b:d6:
13:18:55:a2:ce:4e:dc:43:a9:5f:b9:a9:15:4d:e0:cd:b1:ef:
bf:7a:03:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:50 2025 by rpki-client