Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/OnMOovgFe6Wh1ICp8jZIB-DRzPo.roa
File: OnMOovgFe6Wh1ICp8jZIB-DRzPo.roa (raw, json)
Hash identifier: iyevLsI8osh9npMC63He5+tSgirWqw8Kb7NtUC4c7IQ=
Subject key identifier: 3A:73:0E:A2:F8:05:7B:A5:A1:D4:80:A9:F2:36:48:07:E0:D1:CC:FA
Certificate issuer: /CN=4C11E03B4B88F3B90ADB73173864F7005132484F
Certificate serial: 42
Authority key identifier: 4C:11:E0:3B:4B:88:F3:B9:0A:DB:73:17:38:64:F7:00:51:32:48:4F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/OnMOovgFe6Wh1ICp8jZIB-DRzPo.roa
Signing time: Sat 01 Mar 2025 01:31:30 +0000
ROA not before: Sat 01 Mar 2025 01:31:30 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 24284
IP address blocks: 157.112.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C11E03B4B88F3B90ADB73173864F7005132484F
Validity
Not Before: Mar 1 01:31:30 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=3A730EA2F8057BA5A1D480A9F2364807E0D1CCFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:cf:93:c5:cd:99:08:14:0b:ec:29:8e:93:
a2:91:61:96:5e:9a:6b:47:cd:7b:3a:c1:b4:be:34:
02:2e:79:a6:5b:34:d8:04:8c:74:a3:e2:37:92:a9:
35:0d:43:0d:b5:02:b4:f4:34:83:4c:37:67:be:ff:
a6:32:0c:dd:cd:e8:ff:6b:e7:83:56:23:20:6b:a4:
bb:04:c3:c8:57:69:1a:56:28:e9:4b:cf:df:f2:c3:
8e:72:6f:dd:7b:13:17:40:c8:e2:85:f7:b2:be:be:
a0:8b:89:96:70:a7:e0:20:61:70:34:d7:f2:d9:ca:
e2:3f:76:93:da:31:21:1b:2d:66:cd:96:bd:52:a8:
36:8b:14:21:89:97:6c:1c:8b:67:39:4e:b8:33:3c:
8f:a8:6a:fc:52:db:b8:86:9e:1e:15:ba:05:2f:ab:
34:97:d7:6e:54:af:fe:65:b2:3e:a7:77:6e:1b:de:
72:44:f6:4c:1d:8d:73:d1:5f:cf:cb:f1:2a:07:d6:
97:59:bd:1d:6c:da:3e:47:5e:bd:9e:e1:d4:6e:8c:
1d:2e:9c:7b:f9:a4:a0:a9:97:92:f3:31:6a:0b:24:
ad:86:51:5e:ff:67:e3:83:88:63:55:6f:a7:1e:99:
f6:b7:29:57:85:ea:29:17:bb:75:8c:57:7d:d3:ed:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:73:0E:A2:F8:05:7B:A5:A1:D4:80:A9:F2:36:48:07:E0:D1:CC:FA
X509v3 Authority Key Identifier:
keyid:4C:11:E0:3B:4B:88:F3:B9:0A:DB:73:17:38:64:F7:00:51:32:48:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/TBHgO0uI87kK23MXOGT3AFEySE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/OnMOovgFe6Wh1ICp8jZIB-DRzPo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.112.64.0/20
Signature Algorithm: sha256WithRSAEncryption
90:be:17:c4:b7:dc:9e:29:87:df:80:97:2e:8c:fb:22:ad:26:
85:2c:7f:c5:a1:a7:46:4a:bf:93:15:43:4e:02:be:bb:1b:e2:
b9:3e:43:69:09:d4:8d:d6:5e:68:de:d9:98:a0:b4:b6:fe:af:
4e:ca:4b:d3:f4:fa:b6:1c:c1:e6:a2:0d:3d:f8:bd:fa:5c:f1:
36:28:3c:b9:a4:02:25:19:00:2e:71:9f:44:1a:42:24:d1:65:
fd:9e:61:11:d0:f4:16:c9:96:43:de:98:ea:0f:6a:8e:ea:28:
c2:62:43:0a:6c:54:18:ce:40:ee:04:63:b9:34:8a:42:cb:fc:
c1:a2:a0:63:65:38:97:04:5c:60:fa:2e:16:d8:d7:40:ba:06:
55:c3:26:4b:24:f2:6a:ea:6e:fb:d8:3a:7d:1b:51:22:f2:2c:
5d:07:c7:ce:5c:3a:0c:6e:d2:b8:0c:0a:61:b1:f2:14:02:c0:
2e:d2:1e:f7:d5:22:fa:c0:c7:3c:cc:65:ee:14:b1:67:28:6e:
a9:8a:b4:8e:71:db:d8:27:6e:15:de:71:0b:f3:40:4a:29:89:
17:e6:bc:46:36:da:7a:16:61:26:d8:71:a8:48:7b:f6:a2:57:
0c:6b:5c:c4:cd:6e:5d:41:bc:3d:f3:3d:28:7d:32:90:91:e8:
0c:1f:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:17 2025 by rpki-client