Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/P-IjuL1Keb8NMxLo1k6iGR6gogg.roa
File: P-IjuL1Keb8NMxLo1k6iGR6gogg.roa (raw, json)
Hash identifier: 1EaZe2+9tKXdgIZzbYGvwCZJ1ZRBttFxIT0EDRoLsJs=
Subject key identifier: 3F:E2:23:B8:BD:4A:79:BF:0D:33:12:E8:D6:4E:A2:19:1E:A0:A2:08
Certificate issuer: /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Certificate serial: 4F
Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/P-IjuL1Keb8NMxLo1k6iGR6gogg.roa
Signing time: Fri 31 Jan 2025 01:34:58 +0000
ROA not before: Fri 31 Jan 2025 01:34:58 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 17948
IP address blocks: 203.145.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Validity
Not Before: Jan 31 01:34:58 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=3FE223B8BD4A79BF0D3312E8D64EA2191EA0A208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:05:51:9d:6d:32:fe:e8:31:66:b6:8d:0c:
60:b7:2d:35:cc:a6:c4:ba:37:f6:d6:85:61:4c:55:
2d:da:25:74:a2:e4:e0:81:55:fa:05:2d:0f:8d:15:
be:f5:67:02:c4:10:ab:d9:af:58:9a:5e:83:72:44:
3e:1d:fc:a7:90:84:d7:49:27:fc:a2:6c:8a:01:93:
95:08:70:ce:c7:d7:1e:b3:f6:53:93:0a:e4:e9:cc:
8c:35:9b:bc:92:1d:7c:f0:bf:19:73:b7:bd:e8:67:
40:13:b8:cc:7b:e1:08:72:7b:f2:8d:6d:94:5d:b6:
6b:21:a1:5f:7f:97:70:78:84:9c:0f:e7:82:66:89:
9a:66:cc:49:94:55:08:dd:5a:91:1e:37:78:18:52:
26:ce:a9:c9:85:4c:48:e8:27:d6:ed:62:d1:f3:54:
05:2a:67:5f:2c:43:1e:25:a5:0c:48:94:81:fa:44:
a3:9e:d4:91:08:e9:fd:74:f5:46:b4:34:40:7b:94:
58:23:f0:f1:7e:09:f2:b7:e0:d2:6d:d9:4e:35:d2:
f5:13:84:0f:40:f6:bc:c0:fe:a9:f4:9a:d3:af:92:
d3:7f:92:36:83:37:85:c4:98:9a:4b:63:5a:2a:95:
e2:de:b6:19:90:aa:1d:6d:1e:59:26:48:47:1d:33:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E2:23:B8:BD:4A:79:BF:0D:33:12:E8:D6:4E:A2:19:1E:A0:A2:08
X509v3 Authority Key Identifier:
keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/P-IjuL1Keb8NMxLo1k6iGR6gogg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.145.120.0/21
Signature Algorithm: sha256WithRSAEncryption
48:a6:a7:c5:e6:70:32:a1:46:6d:47:da:82:26:5c:10:99:02:
1c:56:f9:65:79:94:ea:74:97:88:28:c5:52:17:0d:ed:80:bb:
a7:18:bf:dc:e2:aa:1c:89:77:52:c0:38:7e:98:02:f3:fe:22:
4d:63:65:62:11:81:35:32:01:21:15:6c:6d:5d:8e:4c:a4:93:
ec:a0:f5:64:f4:8d:41:62:7c:6c:96:c2:c9:bb:7a:aa:fd:1e:
65:3e:a4:f3:67:53:49:3f:e7:09:07:3c:7c:55:3a:fe:b7:ca:
69:ab:67:72:94:94:a4:05:f7:b4:58:f6:44:2d:f9:70:36:eb:
13:ce:ee:f6:1b:51:0e:d1:a0:73:49:f2:1c:0e:d8:c3:e8:05:
6c:6e:05:45:1b:31:ab:10:17:94:3a:21:4f:39:fe:e9:ce:e0:
0a:0b:43:fb:2e:a8:4f:26:0d:0f:27:50:f5:15:de:5c:45:b2:
07:4a:c7:8b:44:49:09:7e:0c:92:1f:e3:75:9d:bd:85:30:8a:
10:dd:ba:b8:b3:38:3d:3d:8e:9b:73:9c:8a:a1:7a:19:88:01:
86:42:c4:2b:79:82:61:d5:13:eb:91:33:96:b8:1b:29:dd:fc:
1b:0e:66:94:fe:75:bb:f6:fe:14:7a:de:3b:31:81:af:8b:6f:
da:2f:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:48 2025 by rpki-client