Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/pKOAlMV-psx5Za-r3LNWwVHHzh4.roa
File: pKOAlMV-psx5Za-r3LNWwVHHzh4.roa (raw, json)
Hash identifier: bPulK/wCkFRPoQ2aclJZNZ8eisNiE6co1bDjJsVXVDE=
Subject key identifier: A4:A3:80:94:C5:7E:A6:CC:79:65:AF:AB:DC:B3:56:C1:51:C7:CE:1E
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 19
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/pKOAlMV-psx5Za-r3LNWwVHHzh4.roa
Signing time: Mon 13 Jun 2022 06:20:47 +0000
ROA not before: Mon 13 Jun 2022 06:20:47 +0000
ROA not after: Mon 15 May 2023 01:30:04 +0000
asID: 23778
IP address blocks: 210.235.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: Jun 13 06:20:47 2022 GMT
Not After : May 15 01:30:04 2023 GMT
Subject: CN=A4A38094C57EA6CC7965AFABDCB356C151C7CE1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:65:f2:b6:ff:96:a9:98:7a:af:29:6a:3a:
a9:40:20:4b:e8:5d:cb:20:d2:11:8a:b3:c8:7b:34:
fc:19:21:ec:7d:d3:e9:15:8d:b0:d9:a3:8d:af:7c:
00:b9:cf:81:2c:6d:e2:4c:ec:cc:fb:34:a0:6b:d2:
b7:bd:7c:67:5f:c4:48:52:7d:bc:7e:c8:ff:90:b9:
0e:95:70:44:a7:6c:54:93:f6:ee:43:f0:70:62:b6:
f7:e6:5d:af:75:f2:ea:0e:74:f7:5d:d7:4e:01:22:
07:8b:b9:c3:58:db:04:6a:f3:1a:46:aa:16:13:e7:
19:17:ff:54:aa:cf:77:9b:02:6c:77:d2:bb:ba:0e:
92:7f:17:54:f9:05:39:a5:87:7e:c1:cc:19:5d:7a:
9d:44:99:6c:37:8f:ae:4d:49:cf:ab:f1:2c:88:42:
32:10:4e:ed:da:23:f1:21:9a:9d:f9:eb:4b:05:e5:
71:04:01:65:86:d6:53:3d:8b:6c:7b:55:6b:22:3f:
4f:6b:5e:72:62:1c:b7:67:ac:f6:8e:f5:02:bf:6d:
df:9c:e4:86:90:a2:3e:ec:6d:8a:d6:a2:de:59:62:
e4:1c:57:e4:e0:59:11:a0:c5:78:44:53:6d:93:2f:
58:15:1d:12:e6:80:ea:f5:91:6d:9f:6a:bd:b8:e5:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A3:80:94:C5:7E:A6:CC:79:65:AF:AB:DC:B3:56:C1:51:C7:CE:1E
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/pKOAlMV-psx5Za-r3LNWwVHHzh4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.235.40.0/21
Signature Algorithm: sha256WithRSAEncryption
52:c0:49:85:5e:15:75:4b:29:c4:23:9c:53:32:9f:8a:1a:ca:
e9:45:91:1c:b0:c8:a2:fe:ff:1f:93:bf:9d:c4:d1:3c:2a:23:
7c:95:9c:9a:e9:1c:20:07:f7:c8:e9:1e:5b:03:2f:95:31:15:
2b:a3:be:a9:48:90:fc:b6:e5:46:6e:0d:04:09:7a:4d:57:f0:
35:fc:09:74:c5:eb:d5:af:fe:1f:a3:67:46:71:a6:18:7e:e8:
4b:82:42:e4:68:19:86:62:ea:27:53:18:85:62:3d:be:44:cd:
27:1b:ff:a5:53:df:7d:eb:04:d1:20:8f:9e:37:34:40:e4:ec:
7d:d8:5c:a8:0c:e6:f1:e6:cd:1e:05:d2:21:95:b4:61:7b:5d:
f1:56:38:9e:fc:ee:59:5a:45:57:20:11:05:28:d5:4a:70:ab:
5f:19:fb:f0:42:3d:5b:c6:b5:82:ee:c6:f6:46:04:8b:77:bf:
40:09:54:74:60:b5:bf:82:ad:81:93:a6:e0:1d:3f:23:7a:0a:
f9:71:0f:d1:49:7d:b1:a4:f3:33:62:0a:75:48:5c:a9:27:3d:
33:53:ba:a2:7f:de:3f:5b:52:2f:71:02:4e:ac:82:8c:24:8d:
97:10:1c:b2:61:c6:d7:a1:f9:bf:8b:c3:e2:f9:aa:66:21:d4:
0b:a9:54:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:23 2025 by rpki-client