Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/LEJHSf0vPGK01DVRRUeoHsnPOKQ.roa
File: LEJHSf0vPGK01DVRRUeoHsnPOKQ.roa (raw, json)
Hash identifier: zo7x3a7FDqYuprvPrq3I0RUd1yjJ+BySPiDLIN7Iw7Q=
Subject key identifier: 2C:42:47:49:FD:2F:3C:62:B4:D4:35:51:45:47:A8:1E:C9:CF:38:A4
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 2F
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/LEJHSf0vPGK01DVRRUeoHsnPOKQ.roa
Signing time: Fri 31 Jan 2025 01:33:48 +0000
ROA not before: Fri 31 Jan 2025 01:33:48 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 17698
IP address blocks: 202.168.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Jan 31 01:33:48 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=2C424749FD2F3C62B4D435514547A81EC9CF38A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:6b:57:82:b0:87:c0:eb:d8:be:81:c8:30:
80:a1:50:ea:54:1f:56:ca:58:32:1e:ba:f5:f3:4d:
5b:a0:9e:53:e7:5f:78:ee:89:0e:93:1b:89:74:06:
9b:ed:61:93:e9:85:01:17:20:c3:fc:70:c6:2c:d2:
8c:fa:5c:d0:38:52:f0:c2:ec:68:bc:29:46:65:fd:
8a:b8:74:2b:80:f0:c4:60:7f:30:17:32:a5:9a:4c:
a2:7f:e0:ec:56:76:f0:43:8a:4f:52:0d:a0:9e:4c:
7a:2b:2e:d2:7d:be:7a:4d:9d:26:6e:64:fa:41:b8:
8b:6d:6a:c9:1f:86:a6:31:40:95:5a:a1:e1:d1:5d:
0a:1d:96:74:ee:9f:ce:90:ea:58:68:2f:ad:3a:b7:
5e:e2:9b:41:16:33:20:57:09:1b:39:4a:43:f8:ea:
de:57:bb:15:6f:64:be:ea:09:5d:77:10:00:23:77:
a3:2f:b2:7d:10:3a:44:00:2b:b9:8e:01:7a:de:99:
c2:72:db:aa:98:61:1c:e2:ba:bf:4b:83:ff:a3:f3:
80:02:92:15:e0:fa:6d:eb:65:ba:2a:81:7a:cb:bb:
95:fe:2d:d7:48:4d:17:5a:37:8a:30:a0:a2:5e:13:
92:04:b3:56:7f:cd:13:e7:57:35:4b:49:5d:00:f8:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:42:47:49:FD:2F:3C:62:B4:D4:35:51:45:47:A8:1E:C9:CF:38:A4
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/LEJHSf0vPGK01DVRRUeoHsnPOKQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.168.216.0/21
Signature Algorithm: sha256WithRSAEncryption
d5:c2:eb:a1:c9:fa:26:e8:06:51:3f:fb:0e:45:c4:dc:a1:e8:
b3:f7:26:f6:3f:99:a2:a6:0f:7d:45:9d:52:ac:e9:5b:6d:06:
c4:58:f1:59:d4:4c:94:14:0a:24:03:90:1c:51:ec:8c:05:cd:
f8:58:07:f6:6f:53:eb:51:39:70:7d:ec:e9:87:ba:97:c1:1e:
43:69:bf:eb:53:05:95:f8:14:5c:37:ad:bd:af:54:bf:e5:b6:
9d:73:2f:fd:8a:e3:00:80:40:5c:dd:f3:fa:14:e9:dd:7b:7f:
13:5c:32:3e:80:2f:41:10:67:b1:c1:eb:dc:ad:c1:07:86:01:
a5:95:24:a7:5e:00:24:e2:8a:09:af:47:65:d4:d5:95:f9:a5:
15:de:3f:ff:fa:fb:fb:86:b8:fe:cc:7b:76:08:d0:a2:77:df:
c5:97:8f:e6:fb:18:54:d4:e9:ea:dd:3d:0c:04:b7:d1:bd:d2:
29:b0:dc:d9:fe:ea:7d:63:60:48:58:d0:da:86:05:09:83:48:
6d:61:29:5c:da:bf:f6:75:d8:07:a2:8d:b2:51:ea:f2:fb:53:
3e:ac:03:05:fc:bb:96:0f:39:a0:fd:8e:d2:0b:b2:cc:94:a6:
4a:9a:b4:3e:a6:85:f3:88:a8:a9:28:6a:ed:95:f3:2d:b4:80:
ca:f4:76:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:16 2025 by rpki-client