Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/pOZ8eAgUlVI_-yL5pSuAtV1JM_k.roa
File: pOZ8eAgUlVI_-yL5pSuAtV1JM_k.roa (raw, json)
Hash identifier: 1XoX03XXVuCxzJMs8xyhBBCgnQ4SAcjhQljrZrRW1Pc=
Subject key identifier: A4:E6:7C:78:08:14:95:52:3F:FB:22:F9:A5:2B:80:B5:5D:49:33:F9
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 59
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/pOZ8eAgUlVI_-yL5pSuAtV1JM_k.roa
Signing time: Sat 01 Mar 2025 01:28:30 +0000
ROA not before: Sat 01 Mar 2025 01:28:30 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 23778
IP address blocks: 210.235.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: Mar 1 01:28:30 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=A4E67C78081495523FFB22F9A52B80B55D4933F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:6e:3e:95:4c:9d:c5:c5:f0:8f:20:91:84:
a4:b9:9b:9c:cd:80:27:34:f3:17:03:88:6c:a8:27:
7e:ac:75:d2:ba:7f:5c:29:30:6d:49:74:4e:79:8d:
1f:9f:7e:93:d2:cc:f5:7c:31:c1:ee:70:c1:df:59:
e7:63:34:ca:36:ff:cb:49:40:5d:16:a8:76:26:d2:
5c:64:4b:cc:60:1d:e6:bd:81:96:db:1f:37:59:0c:
59:5b:e4:e9:a9:30:68:0a:92:cd:ef:d5:72:2c:41:
5a:87:3f:f2:2f:bb:c1:0e:d6:92:ad:4e:4b:64:c6:
7e:35:7e:20:3c:a2:14:82:f5:26:24:7a:8a:ef:56:
11:c1:97:bb:de:99:e1:3c:6f:7d:26:4d:60:71:cb:
fd:dd:41:13:f3:8f:4e:c9:26:3f:6f:9e:37:46:47:
ca:ed:13:a7:7e:d7:3a:70:2b:9f:c1:38:f7:76:9e:
55:60:ea:91:a1:30:dd:6b:dd:b3:a4:34:c7:f3:09:
27:32:d9:62:b3:f3:f3:38:00:22:2c:d9:4c:94:0b:
bb:d3:72:3b:c0:6e:4c:f7:36:b7:9e:78:81:91:bb:
d7:74:54:9a:ea:45:06:35:61:9d:a2:f1:11:e7:f5:
d9:75:72:3f:c1:90:4d:1e:95:d7:fb:a6:e0:f9:7a:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E6:7C:78:08:14:95:52:3F:FB:22:F9:A5:2B:80:B5:5D:49:33:F9
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/pOZ8eAgUlVI_-yL5pSuAtV1JM_k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.235.36.0/22
Signature Algorithm: sha256WithRSAEncryption
61:8f:3a:1f:af:5f:ff:19:34:e3:f4:30:4a:b1:a3:fd:91:b7:
7d:b5:0c:1d:20:cc:30:f0:53:75:ca:23:8b:a0:05:21:ee:7a:
c0:35:6c:77:39:44:a5:96:de:4b:6e:dc:9f:20:46:a1:72:a5:
2c:45:57:0f:cd:75:2d:c3:31:2a:9b:dd:20:cb:9b:5d:04:cd:
81:a4:c1:f1:39:29:cc:cc:d7:d4:9e:2e:22:43:7b:99:8b:eb:
1f:78:40:72:24:da:75:44:2b:5d:bd:bc:1c:52:0d:71:a9:7f:
2d:cf:ec:ec:af:f8:1d:83:4b:25:27:d5:7b:1c:a9:ef:94:f3:
69:b2:84:db:d1:9c:f8:08:17:f9:ba:f8:a6:c2:ff:0c:e8:6a:
32:41:2d:4f:17:12:d6:dd:87:f3:0b:a7:1b:70:87:d4:dd:09:
86:63:10:11:c5:3b:11:a6:61:99:f8:79:cf:02:68:12:42:2b:
57:d0:09:63:91:1b:27:c5:4a:92:4e:ab:eb:3a:51:de:a1:c5:
1a:a4:68:e6:b0:d1:8c:3a:9e:d0:16:01:50:bf:7f:c9:52:f5:
a9:67:6d:57:ae:9a:ee:84:0b:25:8f:cd:0d:96:a2:13:3f:6f:
56:75:7c:47:ef:3e:a0:38:11:e2:78:5a:b4:2b:b3:15:f2:6c:
be:82:2d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:45 2025 by rpki-client