Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/tUDGuA8OmxYbQpvkS72f8ZwTufc.roa
File: tUDGuA8OmxYbQpvkS72f8ZwTufc.roa (raw, json)
Hash identifier: Xn33hJjjnPMvOZNPUiwPZgaPupe28ukZKc0XCnlwmCE=
Subject key identifier: B5:40:C6:B8:0F:0E:9B:16:1B:42:9B:E4:4B:BD:9F:F1:9C:13:B9:F7
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0214
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tUDGuA8OmxYbQpvkS72f8ZwTufc.roa
Signing time: Sat 01 Mar 2025 01:31:11 +0000
ROA not before: Sat 01 Mar 2025 01:31:11 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 4713
IP address blocks: 153.192.0.0/11 maxlen: 11
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 1 01:31:11 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=B540C6B80F0E9B161B429BE44BBD9FF19C13B9F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:87:86:48:9f:8c:ae:af:56:d6:e3:ee:40:e7:
58:96:8f:73:7e:52:cd:13:18:ae:2d:30:2c:bd:ef:
34:5d:36:21:24:aa:0d:45:7d:ad:3a:91:49:2b:89:
2a:3b:1d:ab:30:5e:be:36:8e:d2:e7:92:16:cf:e3:
04:b0:52:53:cf:26:2f:f5:df:78:5e:8b:20:f1:12:
a6:a6:81:00:70:e0:92:e2:cc:17:78:81:6f:c9:aa:
a3:d1:c1:cc:7e:34:88:99:19:a8:95:5f:e9:ce:62:
de:87:4a:99:8a:45:fc:db:ce:f0:90:99:41:01:fe:
d6:12:2a:5d:a7:90:80:cc:86:90:61:41:6d:b6:86:
ee:0f:9b:9e:28:e1:00:39:da:49:9e:eb:32:98:01:
e8:8a:5c:ad:eb:95:6e:38:a7:58:db:7c:2e:af:aa:
ca:f4:9e:3d:d0:40:1e:b2:e4:ae:44:e3:20:65:59:
80:f5:cd:2a:15:f8:20:3f:be:1a:6d:9f:87:43:bc:
a5:fd:72:4a:60:82:13:7e:67:a6:d6:a0:a6:97:ae:
33:8b:85:77:65:b1:f1:8f:7a:af:0e:c0:ae:d0:20:
a9:7d:22:3f:4c:99:0a:b9:4f:df:c6:03:f4:7a:16:
c7:4b:59:d5:20:93:1c:a4:6d:5a:e1:61:92:ea:59:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:40:C6:B8:0F:0E:9B:16:1B:42:9B:E4:4B:BD:9F:F1:9C:13:B9:F7
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tUDGuA8OmxYbQpvkS72f8ZwTufc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.192.0.0/11
Signature Algorithm: sha256WithRSAEncryption
cc:b8:d4:ca:88:70:bf:a6:82:64:c5:fc:62:da:d8:0c:f8:00:
84:d4:61:3e:7a:c2:ce:71:0d:6d:b9:c1:23:87:60:a3:42:35:
e4:2c:0c:aa:ba:f8:db:c1:1d:80:8c:53:e1:83:0e:31:72:09:
16:3a:7e:55:16:9c:94:e6:02:21:39:bf:15:2b:8d:0a:d7:0e:
ca:dd:2e:58:e9:e7:f7:41:2d:e2:b5:bb:3f:a4:4f:41:cc:07:
64:c5:cb:87:4d:dc:b0:6c:6c:0a:7d:38:71:c7:85:ab:20:da:
44:2a:6c:41:b4:3c:dd:7d:59:be:9b:d4:7d:e1:bb:0f:ec:75:
eb:47:3c:f3:bf:ab:40:0c:ac:01:fe:fe:4e:2a:ee:47:85:e7:
7c:f2:18:d7:2d:df:1e:c5:93:43:9f:73:a3:0a:02:ff:c4:f7:
f1:ee:8d:0c:0b:8d:0b:14:32:61:3a:7e:f3:e3:63:6d:e2:62:
81:ee:75:5b:34:9b:33:b8:9d:29:76:43:f2:87:1a:92:b2:f2:
0b:83:23:0f:be:91:8a:6d:b4:a5:e1:23:f3:ee:1e:da:8f:59:
26:1c:78:df:9a:c2:99:2e:a5:16:3a:c1:80:c2:73:23:20:62:
c7:8f:97:25:58:1d:43:27:bb:46:e4:54:74:45:27:e2:b8:17:
f6:79:ec:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:13 2025 by rpki-client