Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/dKFcBSXoOdOtkzauz22Lhe05k8M.roa
File: dKFcBSXoOdOtkzauz22Lhe05k8M.roa (raw, json)
Hash identifier: T4frtTROvElRFijugcMGz4EXItL+/GdnmhXmMUD+GBg=
Subject key identifier: 74:A1:5C:05:25:E8:39:D3:AD:93:36:AE:CF:6D:8B:85:ED:39:93:C3
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 3245
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/dKFcBSXoOdOtkzauz22Lhe05k8M.roa
Signing time: Fri 31 Jan 2025 01:31:19 +0000
ROA not before: Fri 31 Jan 2025 01:31:19 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 7671
IP address blocks: 202.62.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12869 (0x3245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: Jan 31 01:31:19 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=74A15C0525E839D3AD9336AECF6D8B85ED3993C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:5f:34:c0:ac:99:1d:c0:2f:3b:43:00:96:
0c:05:1a:1d:27:f3:f4:8c:fe:d0:2e:8c:a6:80:c4:
d3:c2:ac:7d:75:5e:fc:b5:62:a9:ba:71:07:70:42:
63:ae:c7:9b:cb:62:56:d7:fa:d9:3a:8a:3b:98:70:
3c:45:53:96:1a:61:0f:bf:ed:2d:19:29:46:e2:01:
4c:a5:2c:0b:21:56:74:a7:a3:71:02:c3:65:37:04:
c6:54:d5:da:35:da:b3:c4:3e:0a:ab:79:08:ca:85:
7a:96:14:2d:f2:1c:cb:58:9d:5d:c8:57:db:de:dc:
9d:34:48:29:7a:c2:d3:b7:b9:ce:c7:4f:c4:5a:1f:
0b:6d:20:f6:46:da:73:4e:39:6b:29:56:fe:6f:80:
8b:1f:71:7f:28:9d:63:91:91:89:e8:48:4a:2f:e6:
6b:84:a3:2a:10:44:77:ec:7e:61:00:b1:d1:24:5b:
95:14:7c:23:6f:6a:fe:58:f1:51:08:f8:e9:6b:5c:
68:37:34:04:66:43:d6:d7:60:5d:ce:5a:be:f0:13:
77:7e:5e:ad:97:b0:43:96:f4:a9:c7:66:88:af:63:
31:64:cb:32:1d:2a:99:a8:e8:6c:df:40:0b:fa:f2:
6c:47:4e:8e:3e:43:a6:dd:dd:22:1e:8b:9a:c9:9e:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A1:5C:05:25:E8:39:D3:AD:93:36:AE:CF:6D:8B:85:ED:39:93:C3
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/dKFcBSXoOdOtkzauz22Lhe05k8M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.62.176.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:69:d5:5f:f1:87:4f:40:d0:a7:fe:c0:7b:f5:0d:c8:40:82:
5e:81:32:88:bd:f3:e2:6f:c1:0f:fb:e2:4f:6f:f5:08:5b:f5:
17:c1:8f:ae:33:a9:7d:cb:25:d9:e8:4c:28:17:de:ca:a8:7b:
e0:ae:1f:df:e7:5b:6b:ae:21:e3:39:27:1b:b2:b1:ca:16:0e:
eb:05:08:71:7d:26:7d:bd:24:71:7d:42:c7:95:e1:fb:db:77:
d9:a1:da:d6:d3:83:b5:a0:d8:2d:56:01:62:9c:ce:69:52:47:
ac:aa:d9:0d:88:3e:69:eb:ef:6c:4e:d7:44:eb:3a:67:bc:a0:
b9:a5:c4:24:d1:ba:a5:31:71:75:d4:85:9d:88:91:ad:1e:7f:
60:bf:43:27:1c:f0:36:b6:93:41:da:92:77:2f:df:78:a8:26:
48:22:7f:d9:80:01:70:77:76:0f:9d:98:f1:72:87:24:7c:61:
ac:fc:bb:c8:60:1c:92:40:3f:4d:e6:ba:26:b1:b2:b1:37:83:
8d:1c:28:ea:48:cd:c0:75:06:a5:86:74:a6:d0:e6:ff:62:a9:
12:ca:3f:cf:40:4f:dc:58:97:d3:64:47:23:4d:66:16:12:40:
52:c7:b9:0e:a6:8e:81:2c:8e:12:0a:53:9f:58:20:e8:89:03:
93:ec:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:05 2025 by rpki-client