Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1sIjByJ9wU6op2TjgsdUZUFIPEM.roa
File: 1sIjByJ9wU6op2TjgsdUZUFIPEM.roa (raw, json)
Hash identifier: 0skxfFQn+sTJIbQzTR0vX24xX/pxM02GWjZZPaf5dM0=
Subject key identifier: D6:C2:23:07:22:7D:C1:4E:A8:A7:64:E3:82:C7:54:65:41:48:3C:43
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0502
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1sIjByJ9wU6op2TjgsdUZUFIPEM.roa
Signing time: Wed 18 Dec 2024 02:40:12 +0000
ROA not before: Wed 18 Dec 2024 02:40:12 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.173.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1282 (0x502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:40:12 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=D6C22307227DC14EA8A764E382C7546541483C43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:3a:48:42:c7:2a:21:2e:06:c0:b2:fa:93:
92:b5:0b:95:6c:07:e3:26:cb:91:9e:e2:c9:60:df:
ec:95:9d:a8:cd:b0:a9:7a:e3:68:6a:d9:5d:93:f9:
5e:12:9d:71:e9:02:e0:9e:ee:44:0d:7d:47:fd:71:
15:43:5f:dd:0b:1f:a4:51:7f:35:61:a3:4f:72:9f:
9f:be:65:f2:56:fe:56:d0:34:60:82:90:4b:eb:28:
5a:45:9c:09:c7:a4:86:e1:15:5b:81:10:73:2a:5c:
57:be:7f:a7:b6:52:53:2a:9d:ed:a9:23:d6:09:a1:
39:84:15:55:e9:ae:f4:44:9c:06:fb:af:aa:8a:39:
2e:fb:0f:32:e6:af:81:60:bb:49:46:d1:0d:20:10:
f5:59:cb:08:5c:9b:35:a1:82:e4:b0:86:e0:75:e1:
4f:d7:74:e8:fd:3b:65:f2:5f:15:0d:01:17:1c:73:
9d:07:ba:86:c1:f3:2a:48:bb:7b:1b:15:57:a0:e5:
e0:56:53:ab:15:91:53:ab:34:42:e8:08:01:70:5c:
93:b7:42:93:ad:58:b5:6a:ca:e1:97:0e:d4:61:04:
21:5c:59:1c:ac:11:4e:c5:c0:be:6e:70:04:53:eb:
5b:d2:61:4f:94:64:7d:26:10:07:ee:08:0c:7d:17:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:23:07:22:7D:C1:4E:A8:A7:64:E3:82:C7:54:65:41:48:3C:43
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1sIjByJ9wU6op2TjgsdUZUFIPEM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.173.64.0/19
Signature Algorithm: sha256WithRSAEncryption
52:fe:5d:f7:ef:01:f8:5d:ba:4b:48:5a:03:03:81:4d:46:ab:
ae:8e:7a:60:4f:7b:f8:9a:b3:2c:91:85:91:d1:45:e0:fc:b5:
d7:47:c7:c4:58:43:e2:d0:51:09:cc:cf:00:57:e0:77:95:3b:
29:34:77:92:19:ec:82:d8:5d:dc:7a:77:d3:c4:f7:00:37:de:
5c:31:4e:3e:8c:7d:98:36:0b:08:f6:67:c3:48:58:5f:e5:3b:
78:a4:ca:c4:d1:93:db:36:05:db:ae:ef:b5:99:75:82:02:a9:
57:0b:b8:dd:b7:95:68:61:73:40:2a:25:0a:ec:32:16:cd:a4:
fb:5a:7a:25:e0:a2:f9:c5:7b:bc:8e:3b:b8:8f:67:f6:18:9d:
83:3a:80:61:8e:86:ce:3b:21:47:cc:81:59:4c:75:2b:02:48:
4f:dc:90:a5:68:f4:25:0e:29:64:1c:e2:4b:62:f8:7f:d3:c5:
58:0e:8f:f6:91:15:11:10:94:91:1a:b0:2c:eb:ea:97:02:9e:
ac:10:9a:49:b1:e4:27:cf:87:9b:3a:38:41:be:d8:ec:1c:84:
ab:11:90:e9:f3:37:a5:7b:79:54:0f:14:79:52:11:15:8f:f1:
08:9b:f5:76:9e:91:53:3c:8c:42:3f:ea:da:96:7a:ad:c5:d5:
7a:76:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:03 2025 by rpki-client