Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/RCVEzGZ0a15UIa0MSfR9SmLF4p8.roa
File: RCVEzGZ0a15UIa0MSfR9SmLF4p8.roa (raw, json)
Hash identifier: +t0/12t2DqUdnsV/w1fl8IkZ5gCFVfC0ZWYtfxqf5e8=
Subject key identifier: 44:25:44:CC:66:74:6B:5E:54:21:AD:0C:49:F4:7D:4A:62:C5:E2:9F
Certificate issuer: /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial: 1B
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/RCVEzGZ0a15UIa0MSfR9SmLF4p8.roa
Signing time: Sat 08 Feb 2025 06:48:22 +0000
ROA not before: Sat 08 Feb 2025 06:48:22 +0000
ROA not after: Fri 06 Feb 2026 03:05:32 +0000
asID: 23831
IP address blocks: 116.90.144.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Validity
Not Before: Feb 8 06:48:22 2025 GMT
Not After : Feb 6 03:05:32 2026 GMT
Subject: CN=442544CC66746B5E5421AD0C49F47D4A62C5E29F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:a1:cc:e0:4c:fd:6e:f8:ed:89:22:80:30:
3d:ed:16:6e:9d:a8:10:2b:ac:49:ef:b6:4e:65:b4:
3a:0d:b1:7f:51:90:6b:71:e8:ec:a1:de:c2:40:b1:
6e:19:7d:70:3c:9a:a6:31:b1:28:df:5f:27:cb:17:
c1:70:63:a7:92:4a:a4:6e:1f:af:8d:b4:8d:4f:20:
6f:9e:77:a4:ba:80:e8:75:bc:0d:d8:c1:08:79:76:
e6:ae:7f:df:41:46:f0:ac:38:2f:cd:43:66:81:b3:
30:aa:dd:5d:57:3b:8d:5f:fa:cd:af:18:bb:ea:53:
32:9c:ab:a9:87:33:65:d7:58:43:f0:e8:44:46:16:
46:0b:e1:51:e2:e3:40:b1:05:4d:ab:9f:30:b0:2e:
c0:23:a7:3f:f5:b4:6d:3c:20:f3:c2:24:bb:cd:8a:
28:bc:11:5d:a1:ee:a6:26:86:97:71:45:0c:06:dd:
f5:cf:b0:c1:0b:6d:0d:be:54:ba:f6:48:6b:8d:1d:
75:6b:ef:ac:41:c5:18:b7:6b:00:60:2c:aa:54:d5:
d1:4c:cc:5e:91:ef:06:2e:be:76:44:9f:3e:51:12:
85:5b:28:2a:ea:52:c3:ac:b6:93:b7:1a:b9:50:c3:
c8:e6:52:cd:d6:d3:8c:6e:e6:b2:37:42:3d:49:fa:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:25:44:CC:66:74:6B:5E:54:21:AD:0C:49:F4:7D:4A:62:C5:E2:9F
X509v3 Authority Key Identifier:
keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/RCVEzGZ0a15UIa0MSfR9SmLF4p8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.144.0/20
Signature Algorithm: sha256WithRSAEncryption
18:ff:c6:ba:b5:28:e0:58:9c:1a:d0:86:57:cc:d5:c4:c0:ca:
05:4e:6c:46:70:75:01:39:a8:da:1e:e0:9d:e6:84:c7:75:5d:
e5:d8:2f:98:13:77:ab:68:82:49:f3:21:d6:47:8d:a8:50:bc:
24:89:b9:84:0e:8c:18:22:92:77:be:2b:58:31:74:d7:15:3e:
c3:b4:bb:a6:18:fe:35:b1:87:6d:64:10:2e:9f:bb:a8:13:80:
9c:90:b0:a8:a1:76:90:3b:ad:19:16:9e:39:be:fb:44:01:d0:
0e:e5:1f:a1:b9:c2:de:9d:bb:5e:68:18:67:58:94:c7:b6:c2:
a8:7c:29:57:53:80:49:c4:cc:fc:a4:9c:12:f9:f1:2b:fe:b5:
3f:d5:93:d4:e7:58:60:f6:ee:63:91:e3:5c:00:e9:60:80:1d:
50:75:31:03:4a:13:89:dd:d9:9d:be:69:43:dd:66:45:88:3c:
d0:c9:8a:20:b6:21:33:df:6a:75:bc:37:58:94:84:af:57:f0:
52:b4:de:76:fd:5c:b6:84:b5:2e:98:66:70:80:06:9b:2b:63:
d1:6a:29:6f:6e:e4:10:61:1d:1c:71:0a:35:63:bf:ba:ec:ea:
c7:66:19:52:2e:75:30:f7:eb:9a:fd:b4:c6:b9:19:77:ed:24:
31:ae:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:20 2025 by rpki-client