Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CIQ8JaSW0h1cE8-83Ip_c8ENPBg.roa
File: CIQ8JaSW0h1cE8-83Ip_c8ENPBg.roa (raw, json)
Hash identifier: X4ENs7b55o603PTsKZ3t95ZnIO4QVRV7Dz9CSmeLCkc=
Subject key identifier: 08:84:3C:25:A4:96:D2:1D:5C:13:CF:BC:DC:8A:7F:73:C1:0D:3C:18
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 030C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CIQ8JaSW0h1cE8-83Ip_c8ENPBg.roa
Signing time: Mon 21 Oct 2024 01:08:38 +0000
ROA not before: Mon 21 Oct 2024 01:08:38 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 10013
IP address blocks: 122.145.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 21 01:08:38 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=08843C25A496D21D5C13CFBCDC8A7F73C10D3C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b9:32:4e:ab:0c:af:28:e1:ff:25:f1:0a:7c:
2b:8b:62:a7:5a:1a:b1:ce:ad:eb:66:24:40:fe:c4:
d5:45:fc:63:86:2b:33:0b:67:d1:0c:21:2f:3a:1e:
17:b4:e8:42:2c:0c:5f:2f:b4:b9:ec:d6:d3:28:dc:
50:10:fc:2c:7a:71:b9:e7:32:6b:f7:9f:d0:86:1a:
d5:b2:d6:16:cc:ce:50:c2:cb:2b:8c:06:ff:95:44:
c6:18:91:18:8f:23:4f:30:8c:79:15:3d:1b:b1:3b:
6a:d5:2c:c2:e2:91:e6:ad:66:64:9d:c1:3e:28:3e:
83:85:aa:d3:ad:b9:7d:88:2f:81:a5:a0:64:2b:73:
1c:28:e4:a9:ac:24:5c:4c:ff:0f:c8:00:d6:27:9a:
c7:33:b3:97:b4:65:3a:61:f9:67:02:f3:d8:c0:54:
3c:a0:f3:60:35:11:66:0f:8f:7e:f7:87:e4:3f:56:
ab:7e:03:82:34:f9:66:78:5b:2e:3b:ec:9e:7e:c8:
91:c6:4d:a2:d2:1e:55:80:32:00:82:e9:c0:91:54:
07:e6:78:b8:fe:cd:73:2a:c2:96:8c:6c:db:7e:06:
07:1c:64:28:a7:58:93:00:9b:6f:7f:0f:19:71:b6:
26:49:36:32:a9:78:f2:85:39:77:d9:e0:f1:df:94:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:84:3C:25:A4:96:D2:1D:5C:13:CF:BC:DC:8A:7F:73:C1:0D:3C:18
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CIQ8JaSW0h1cE8-83Ip_c8ENPBg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.145.32.0/22
Signature Algorithm: sha256WithRSAEncryption
63:51:6f:83:2f:cf:38:64:4d:cd:19:b8:65:f1:d6:97:4b:3b:
0d:45:3a:e7:67:36:19:28:59:98:95:6e:94:55:5f:db:e0:87:
75:8c:43:4b:e3:6d:ed:cd:1a:ad:70:40:2b:12:8a:bc:c5:9e:
4c:ba:7d:8a:10:38:b7:8a:9d:2c:19:11:75:24:ca:78:05:c2:
e6:4a:f1:84:90:2c:01:72:19:19:ca:9d:ad:ad:4f:bf:ea:cf:
b1:f3:91:d1:3e:f4:75:27:90:8e:14:fb:b9:03:2c:ad:c3:da:
2e:23:42:5c:77:f8:8e:e3:e1:7b:9d:c0:1e:e8:9a:e4:27:c9:
0e:a1:a2:99:cc:4d:7b:16:5a:8d:3a:2c:85:4e:e3:eb:4b:8b:
04:98:1a:d7:cd:8d:61:81:ea:ee:b0:2d:b8:41:e4:2e:29:5c:
0f:14:a7:ec:e5:cf:de:2c:b5:f9:0f:32:aa:af:2f:de:b5:5b:
91:20:dd:99:17:53:be:22:fc:0a:51:df:79:d2:81:b2:db:eb:
12:89:8d:e6:e3:d8:50:cb:e5:9b:5e:27:9d:2d:5c:44:d9:3f:
5d:48:0a:05:b7:ee:88:96:91:24:6c:de:e7:62:d6:b8:2c:c7:
89:ef:b2:fb:00:15:44:d4:c6:80:9f:89:c3:74:48:f0:7d:a8:
22:e9:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:25 2025 by rpki-client