Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WnwAcq0itF1lqrd-yAfXmHq1KHg.roa
File: WnwAcq0itF1lqrd-yAfXmHq1KHg.roa (raw, json)
Hash identifier: EwXzim6nW79NcVTLMqTtwLlkJGA2SfCZGy5IashSyDs=
Subject key identifier: 5A:7C:00:72:AD:22:B4:5D:65:AA:B7:7E:C8:07:D7:98:7A:B5:28:78
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 034E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WnwAcq0itF1lqrd-yAfXmHq1KHg.roa
Signing time: Fri 24 Jan 2025 01:07:24 +0000
ROA not before: Fri 24 Jan 2025 01:07:24 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10013
IP address blocks: 202.216.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jan 24 01:07:24 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=5A7C0072AD22B45D65AAB77EC807D7987AB52878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:58:60:4a:40:d7:1d:60:f0:fe:56:b5:52:
96:38:1a:23:75:8d:62:ab:41:19:d7:20:52:23:98:
5b:8f:12:a8:c7:4a:5c:f9:49:f9:e7:cf:d6:f5:3c:
cb:1e:48:7f:9b:e6:63:51:aa:8c:08:73:42:c0:f8:
af:ae:7a:de:7d:a4:ae:23:5e:fd:25:49:1d:a2:c2:
cd:48:c7:39:26:99:35:83:37:f6:e0:16:6f:de:65:
04:e0:3f:80:2e:eb:16:34:c7:15:dc:d6:32:34:f6:
90:5a:d5:46:c1:b8:62:17:f8:5d:d6:d9:86:24:d6:
3c:3c:d1:78:93:56:57:8f:27:2e:8c:0c:9e:14:e5:
d0:a4:da:4d:56:1b:52:a0:8f:10:3d:40:e7:b8:18:
1f:7f:c2:da:d8:f4:24:15:ab:67:ed:30:8d:23:9c:
a4:23:a5:4c:1e:f2:0a:85:8b:a9:98:ab:77:b5:6f:
cc:af:31:36:ed:6d:9c:a3:cc:6b:d7:b0:36:68:92:
e9:7d:da:94:48:c5:2c:92:04:06:4f:db:b2:32:fa:
d9:1a:e8:c2:de:68:58:9a:28:67:bc:62:08:e1:5a:
7e:bc:03:55:12:3e:0d:c3:11:94:cc:a9:2c:9a:58:
d2:8a:d1:27:25:27:75:fc:83:47:21:35:ee:7b:dd:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:00:72:AD:22:B4:5D:65:AA:B7:7E:C8:07:D7:98:7A:B5:28:78
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WnwAcq0itF1lqrd-yAfXmHq1KHg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.216.240.0/20
Signature Algorithm: sha256WithRSAEncryption
19:f3:e2:24:e5:37:11:a4:6d:d3:de:c6:fd:18:5d:d2:4c:ae:
43:84:c2:58:7b:f1:b9:00:0b:c4:32:93:b5:63:43:3a:de:61:
f7:42:b7:ff:60:93:64:9f:19:81:02:fe:5e:36:13:b2:fe:04:
03:b8:cf:36:c1:75:d4:d3:af:41:60:1c:64:f7:3a:ff:f8:2c:
6f:e4:af:55:93:ce:9b:54:33:6e:14:64:3f:e8:15:34:56:2d:
cf:49:3f:2d:35:42:45:f8:6d:9c:18:0f:b6:61:a4:fb:dc:24:
81:05:04:00:b1:cb:72:b0:82:71:19:2e:57:ea:fa:19:2f:ec:
dc:53:5b:73:7c:bf:29:54:44:36:d2:94:4d:b3:54:07:e0:f9:
e3:f9:70:82:f7:bc:aa:8a:ee:c8:5c:18:a2:74:8e:11:ac:99:
41:26:90:fc:95:03:9e:22:40:87:30:3a:01:4d:47:b7:af:d6:
7b:4e:fe:29:71:08:2d:9c:ba:85:85:04:df:63:8e:12:6d:cc:
a6:2d:94:45:39:cf:b8:ae:8b:22:91:2b:4d:25:1e:09:9b:ff:
4b:35:6f:04:07:9e:08:88:20:ba:f8:db:df:a2:6d:d2:d4:cf:
59:4e:05:74:30:a1:4e:bd:d1:5e:60:04:b4:29:fe:64:07:46:
3b:e6:49:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:04:25 2025 by rpki-client