Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/fokcuLQdi7lL5niihvSROYk9t3E.roa
File: fokcuLQdi7lL5niihvSROYk9t3E.roa (raw, json)
Hash identifier: zZUVNVMAKWHGkuNskVMdDJuoIYYw5xNZt7m3U0ZTY1Y=
Subject key identifier: 7E:89:1C:B8:B4:1D:8B:B9:4B:E6:78:A2:86:F4:91:39:89:3D:B7:71
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 6F
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/fokcuLQdi7lL5niihvSROYk9t3E.roa
Signing time: Fri 31 Jan 2025 01:32:19 +0000
ROA not before: Fri 31 Jan 2025 01:32:19 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 37892
IP address blocks: 202.145.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: Jan 31 01:32:19 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=7E891CB8B41D8BB94BE678A286F49139893DB771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:4d:e4:94:28:4d:38:56:d7:78:6a:ba:04:
13:d3:75:e1:81:90:1f:ff:c6:3b:28:2a:03:e2:af:
a1:39:ed:72:94:81:99:fd:9c:00:34:35:d4:8c:01:
98:6d:e2:ac:4f:14:cc:90:8e:da:39:0b:25:32:00:
1c:5d:03:bd:32:77:3e:06:ee:9f:48:b8:07:9c:a2:
3f:fb:39:64:94:f7:f1:96:2d:22:24:48:81:8b:52:
58:85:f7:66:6e:07:7d:95:ee:d9:00:f6:8e:bd:c9:
c6:f1:3a:8e:1d:89:86:8f:c6:4e:b7:1c:4a:3b:b9:
b1:1e:0e:a5:f5:5a:cf:e0:24:83:21:04:23:41:5c:
98:74:10:bd:9c:1c:9b:6c:1f:db:07:9d:59:c5:49:
00:0c:d3:25:c1:81:e3:a9:bb:de:00:d1:4c:97:9c:
02:e4:3f:c0:d2:3b:05:75:5d:25:e7:a0:eb:60:d7:
1a:20:92:e2:f5:81:20:94:1a:5f:dd:53:1c:bc:cb:
92:be:5a:8b:17:93:93:ed:bb:c3:54:e6:90:b4:aa:
49:eb:9e:11:15:7e:cc:29:ab:4b:0c:20:a1:d5:b2:
b7:cf:46:2f:a6:2a:44:95:0a:83:fd:a2:9c:2a:5c:
50:13:e5:43:d5:50:bf:0d:c0:c8:94:8a:52:db:40:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:1C:B8:B4:1D:8B:B9:4B:E6:78:A2:86:F4:91:39:89:3D:B7:71
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/fokcuLQdi7lL5niihvSROYk9t3E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.145.20.0/22
Signature Algorithm: sha256WithRSAEncryption
58:1a:68:be:c3:02:8e:b2:e9:a7:d1:72:29:29:29:36:e3:3d:
d3:0b:ed:47:a6:4f:18:c2:d0:4d:82:ad:db:bf:67:35:aa:50:
26:7d:f7:93:e4:25:d9:a9:6e:35:59:56:18:30:cd:02:91:0d:
79:b8:ac:ed:c1:ba:9c:e3:b6:f2:d3:8b:2a:1e:ef:d6:96:b1:
e1:10:97:b7:be:ba:5a:25:25:78:b7:22:f5:3d:88:bd:0d:14:
94:58:d9:9b:77:25:0b:7d:5d:80:e8:8f:87:e3:57:71:b5:14:
c9:d4:34:1e:f4:05:a0:32:5c:99:5a:72:b3:5f:bc:94:48:12:
93:71:4f:43:c0:27:96:49:9f:b9:cc:44:b2:03:12:64:81:9f:
d3:65:31:f5:bf:d8:44:99:02:d5:5b:09:68:36:16:04:a0:da:
a7:3d:63:6d:e3:f9:5d:80:1d:ce:94:66:97:e2:db:b7:fe:31:
e2:05:25:45:c1:d8:c1:bf:d6:6d:bc:a4:8a:72:35:bc:ef:70:
4e:0f:f2:ac:81:c5:2e:92:23:2c:32:92:33:ad:30:d5:e7:ba:
04:70:38:a6:61:dd:b5:16:91:d3:39:21:56:b6:87:c6:0b:2c:
7b:4b:2e:54:6d:e5:2d:a5:5c:73:2e:27:2b:dc:42:46:9a:a6:
ce:34:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:48 2025 by rpki-client