Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Kvs-QsOa-CdkkClUl6678QcBfhA.roa
File: Kvs-QsOa-CdkkClUl6678QcBfhA.roa (raw, json)
Hash identifier: bqvIcmF0rgjM1WUwmwljk6maR5YR6FxUmmkujy6xRYY=
Subject key identifier: 2A:FB:3E:42:C3:9A:F8:27:64:90:29:54:97:AE:BB:F1:07:01:7E:10
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 21
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Kvs-QsOa-CdkkClUl6678QcBfhA.roa
Signing time: Fri 22 Jul 2022 00:06:03 +0000
ROA not before: Fri 22 Jul 2022 00:06:03 +0000
ROA not after: Fri 21 Jul 2023 04:07:13 +0000
asID: 10013
IP address blocks: 122.145.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 22 00:06:03 2022 GMT
Not After : Jul 21 04:07:13 2023 GMT
Subject: CN=2AFB3E42C39AF8276490295497AEBBF107017E10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:f9:10:7b:46:e4:dd:6e:52:09:1c:e4:56:
54:d9:2e:bf:7f:a3:0c:55:6c:f3:f4:57:aa:20:ba:
3a:51:20:fd:38:0f:27:8f:2b:df:60:dd:ac:da:a8:
fc:a1:9c:ce:97:74:26:74:62:7d:59:b1:3d:b9:54:
43:a1:d6:b5:8a:b2:df:d8:c3:f9:b1:5d:45:9e:02:
0f:4b:36:78:be:04:fd:03:a6:8a:5f:a9:20:6b:cf:
f8:23:17:70:3c:ce:50:e2:a1:58:35:51:a9:f4:bc:
6b:c5:a3:43:c3:c0:1b:b3:dd:b2:eb:c2:4f:cb:73:
00:fc:cf:cc:6b:ff:20:7b:21:63:ee:82:b0:49:be:
63:d7:a9:e7:e9:31:1b:f4:75:1a:be:04:0d:6d:cb:
ca:a6:f1:f4:3b:1c:d5:0a:7d:c3:bc:c7:35:6d:08:
a0:d5:f4:09:f8:3a:c7:b4:15:32:54:e9:2f:f4:22:
b3:00:b8:02:a0:cc:87:74:18:41:1f:fe:92:ca:f6:
52:66:1a:7e:0a:55:27:2e:3f:8f:9a:ce:a2:8b:a0:
c6:2b:62:f0:99:d7:08:53:54:1a:96:1a:f8:13:65:
2e:9c:77:d3:78:61:20:c2:56:bb:87:10:09:9f:87:
5a:58:65:95:0a:21:26:2e:dd:f2:c6:96:98:a5:3e:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:3E:42:C3:9A:F8:27:64:90:29:54:97:AE:BB:F1:07:01:7E:10
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Kvs-QsOa-CdkkClUl6678QcBfhA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.145.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:b3:72:88:2a:70:29:aa:54:86:ad:93:e7:ae:91:f4:60:74:
80:ca:f3:e7:72:78:b1:6a:03:54:a1:a9:64:81:b1:87:8f:4f:
41:e4:40:2a:1e:85:3b:9f:85:bf:4b:5e:10:fb:5a:29:52:74:
ca:7f:39:c6:00:3d:bc:a4:8c:39:4c:bc:c8:04:e2:36:c8:75:
44:23:99:a8:87:a0:21:fa:08:f6:51:b5:0b:25:ee:2b:b1:7f:
06:87:b0:a6:54:78:5c:fa:c2:af:eb:fe:d0:95:16:d9:04:fc:
6e:57:83:7d:fd:dc:91:33:13:29:3f:16:11:4f:c5:c0:e5:74:
33:d9:78:aa:93:67:4f:2c:04:16:9f:9b:b5:66:1b:c7:4e:54:
d5:30:ad:4d:cc:85:2a:7b:1c:1e:57:70:f9:e1:ab:b6:ab:6b:
1c:ed:8a:92:41:b3:f5:af:d3:1b:96:72:aa:a4:96:8b:63:46:
a0:8b:a5:4e:d1:83:a0:16:67:fd:5f:88:bc:de:59:65:a8:81:
83:e0:5a:82:79:c2:f3:29:7b:1e:c3:84:44:d2:8f:b0:f1:40:
f1:b2:d0:8a:84:e2:96:f4:1c:d3:82:d3:0b:d5:04:e8:1f:e0:
04:07:9a:cf:54:ed:2d:aa:27:15:09:86:7f:73:2c:d3:d6:4a:
a0:b3:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:52 2025 by rpki-client