Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/KBhozWeccxQ-5WSg-OAfJmxlMr8.roa
File: KBhozWeccxQ-5WSg-OAfJmxlMr8.roa (raw, json)
Hash identifier: 3nRHUqpzvixkO+mYg+7/vjez6GTBIfn4wCWQVh7p7MQ=
Subject key identifier: 28:18:68:CD:67:9C:73:14:3E:E5:64:A0:F8:E0:1F:26:6C:65:32:BF
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0357
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KBhozWeccxQ-5WSg-OAfJmxlMr8.roa
Signing time: Fri 24 Jan 2025 01:11:27 +0000
ROA not before: Fri 24 Jan 2025 01:11:27 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10013
IP address blocks: 210.229.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855 (0x357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jan 24 01:11:27 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=281868CD679C73143EE564A0F8E01F266C6532BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:32:b3:25:bc:6b:bc:5a:f6:c7:b6:63:01:
fd:69:cd:db:4f:df:01:24:06:49:05:cf:17:2c:f5:
54:68:28:b4:f5:27:00:59:be:81:68:57:05:08:2c:
6b:10:88:b3:56:79:0b:82:04:0f:21:5c:d7:e2:71:
b8:1d:f8:3b:92:bf:ec:a2:6f:0a:4e:9f:c8:a9:1a:
e0:16:a3:30:25:7d:49:f0:23:54:cc:d6:eb:b9:38:
15:ba:88:6f:0d:57:52:98:20:5c:7f:cc:19:f6:26:
fa:68:98:2d:57:b2:1b:28:15:aa:61:10:09:09:ac:
e1:c2:78:8e:a4:7b:d1:be:ee:4e:b9:91:72:59:77:
25:2b:42:52:5e:94:83:32:80:c0:0c:ce:1c:b2:9b:
d4:a0:a7:1e:89:08:63:d1:de:8b:fb:88:3b:71:48:
c9:55:d1:7f:17:d7:d0:30:bc:66:af:7a:ca:19:98:
05:9e:74:46:3c:74:cd:7c:d2:73:2b:49:f5:6c:52:
8c:92:ea:c9:b8:30:76:62:3f:81:23:c2:06:39:3b:
6f:39:73:05:36:9d:4c:f3:0f:30:fb:56:b1:c2:7e:
51:05:a5:24:ac:3f:ac:e0:f4:13:99:d9:ad:04:74:
c0:a0:c6:21:32:0f:cb:1d:a7:af:d6:68:1a:91:f4:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:18:68:CD:67:9C:73:14:3E:E5:64:A0:F8:E0:1F:26:6C:65:32:BF
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KBhozWeccxQ-5WSg-OAfJmxlMr8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.229.86.0/23
Signature Algorithm: sha256WithRSAEncryption
54:95:60:1f:35:68:c9:7e:fa:0d:e3:ae:0a:df:c0:21:3d:f1:
b8:2b:a8:74:f9:73:cc:ff:e6:46:79:9b:cb:9e:31:98:fb:55:
09:b3:88:e5:6d:23:00:b6:30:2c:3f:43:9a:c6:44:ae:bc:86:
64:0c:f3:aa:c7:ad:fd:13:7e:ec:41:ce:91:94:cf:f8:16:c7:
24:8f:fe:7a:68:a4:a7:4d:8b:29:4b:0c:91:0c:64:44:7b:f4:
70:e2:04:3d:f4:4d:67:76:96:a4:f9:11:df:b3:fb:53:d7:56:
3f:fb:31:11:7d:c0:27:c1:b4:b1:38:d3:fe:17:d4:e4:00:4f:
87:1c:9b:9c:5e:55:0e:3c:8a:e5:e7:2c:b1:2a:50:e1:80:84:
3c:8b:bd:d9:0a:84:6c:bc:80:a2:a6:b1:b1:96:ad:21:44:8d:
f1:99:3c:0d:23:5c:87:ec:4c:46:63:2e:ca:75:62:68:cd:8b:
f3:ee:e2:7e:68:31:78:79:fb:2d:bf:d9:81:6a:7d:61:e7:fb:
67:38:2b:06:0b:71:99:1b:b1:f2:06:c5:b9:d3:eb:1f:8e:24:
53:3a:8c:72:60:ad:6c:55:4a:c4:46:ea:77:f5:eb:2e:6e:3c:
c1:08:47:1c:1c:6e:e0:cd:6b:00:06:f8:71:92:bc:a6:81:51:
12:57:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:02:26 2025 by rpki-client