Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Q4Vw87TklFaLvSC1uescp3lPwpU.roa
File: Q4Vw87TklFaLvSC1uescp3lPwpU.roa (raw, json)
Hash identifier: EIwsDCVf/Es12Vn/OlcjQlguXA5zr3fRnsr7yBwkNWE=
Subject key identifier: 43:85:70:F3:B4:E4:94:56:8B:BD:20:B5:B9:EB:1C:A7:79:4F:C2:95
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04C9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Q4Vw87TklFaLvSC1uescp3lPwpU.roa
Signing time: Wed 18 Dec 2024 02:36:55 +0000
ROA not before: Wed 18 Dec 2024 02:36:55 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.1.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:36:55 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=438570F3B4E494568BBD20B5B9EB1CA7794FC295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:29:e6:d7:89:b7:74:17:5c:7f:63:02:5d:
12:b5:7b:18:61:d7:4f:62:a1:3f:db:fb:56:8f:14:
da:f5:37:91:ae:81:27:1e:c1:40:bf:6d:20:9f:13:
5c:61:df:46:2e:7c:92:b3:bb:af:7e:8a:b7:c2:fb:
1d:6f:b6:7d:7b:e8:47:8b:a3:a1:f8:9e:be:e1:96:
35:7d:74:27:71:99:93:06:52:10:e3:35:88:91:96:
91:c4:cc:d1:89:9f:00:34:3f:9e:1d:35:f3:1e:bc:
2e:e5:5c:00:a6:05:51:8a:12:79:21:57:46:50:98:
d2:f1:55:28:6b:7a:a3:96:29:97:6d:30:c7:e9:54:
d7:96:77:6c:f5:bb:09:58:96:ab:69:d6:69:5a:ce:
00:f0:5a:c6:83:3c:db:34:ea:e4:6e:e2:64:3d:02:
25:b0:b0:a8:3c:06:40:2e:7b:74:28:b0:a0:dc:be:
e1:6a:ab:14:f2:35:e3:d9:7a:28:55:19:df:9b:18:
a1:fc:b2:b1:83:d1:08:b6:81:13:fd:c2:bd:aa:70:
da:11:da:af:d5:07:e4:c8:da:9c:d5:24:76:64:ea:
96:88:7d:8d:c8:b2:45:a4:d6:73:5c:dd:58:d5:d3:
28:00:0e:f5:90:61:e1:c4:f0:31:7d:f3:1f:33:86:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:85:70:F3:B4:E4:94:56:8B:BD:20:B5:B9:EB:1C:A7:79:4F:C2:95
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Q4Vw87TklFaLvSC1uescp3lPwpU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.1.73.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0b:8c:3f:6d:8a:b4:4b:0c:4e:86:ee:c1:f6:84:0f:f3:7f:
9b:b5:98:bd:29:b0:24:b1:69:f9:61:59:b8:7f:cd:3c:f9:c2:
e5:20:80:01:f6:22:11:b6:60:9e:f4:6a:46:ba:a9:53:58:97:
3c:b6:d8:f7:fa:6d:06:bf:bb:31:60:d5:96:f0:27:95:b8:6c:
c4:96:6f:e9:e8:25:db:05:f3:cf:df:ed:4d:e9:ca:31:1b:e1:
4e:9c:bd:27:db:ff:aa:78:11:9b:e9:61:bb:04:f3:ce:11:62:
36:42:90:24:89:71:5c:b8:af:f1:1c:18:61:59:2d:c3:71:84:
c8:5a:37:4a:c0:62:a8:cf:b0:2e:b8:d6:13:33:e2:b8:17:d7:
30:d4:1a:b1:c6:fb:86:b0:80:25:f4:6a:72:61:a8:c4:eb:fe:
8b:ba:71:50:d4:96:84:3c:53:2d:2a:4e:aa:6a:09:24:31:77:
74:ba:71:3b:ec:5a:7e:18:36:1b:95:8a:2e:b3:e4:2b:42:ee:
79:8f:f4:60:d2:5d:52:e9:a6:da:75:18:56:f5:56:f8:db:5c:
99:fd:2c:80:cb:f8:7d:e2:5e:c7:1d:7f:5e:42:74:77:58:5c:
b1:4c:57:46:19:80:fe:32:55:cd:1c:94:27:c0:e0:7c:c9:0d:
41:5e:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:54 2025 by rpki-client