Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QR4juL_y6IozEkCGE_oEqo4C6aM.roa
File: QR4juL_y6IozEkCGE_oEqo4C6aM.roa (raw, json)
Hash identifier: 7IA3FzL6MrEq0tCJ5HaKtkzs2hS25cnDHMxkaPmY/30=
Subject key identifier: 41:1E:23:B8:BF:F2:E8:8A:33:12:40:86:13:FA:04:AA:8E:02:E9:A3
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 03FB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QR4juL_y6IozEkCGE_oEqo4C6aM.roa
Signing time: Wed 18 Dec 2024 02:18:49 +0000
ROA not before: Wed 18 Dec 2024 02:18:49 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 111.86.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1019 (0x3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:49 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=411E23B8BFF2E88A3312408613FA04AA8E02E9A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:43:b3:ca:ab:16:fe:c7:a3:cb:39:0b:bb:
f4:53:97:38:2c:1b:75:74:5b:3d:e7:1a:fc:23:52:
65:ed:2a:22:c0:51:a7:b0:ab:a9:e5:b9:d9:4c:4c:
91:d9:99:fd:b5:56:41:41:9e:e6:77:31:93:86:0a:
ee:1b:64:e9:0a:a0:ec:7e:c2:32:8b:72:b5:85:b1:
aa:24:22:58:d6:33:4a:db:93:20:59:47:4f:bd:96:
a6:44:ad:bb:eb:c9:58:ec:c3:cf:c9:0a:cb:32:2b:
3f:3e:18:2a:88:58:38:91:d5:60:4d:ab:bf:81:43:
29:67:fe:eb:34:60:8c:e9:50:47:35:e7:80:2e:d3:
52:75:a3:b4:8a:f1:30:1b:71:78:1a:5e:5f:6d:aa:
49:48:0b:72:34:68:03:86:e7:b1:12:c6:d5:6e:fd:
73:97:5d:8a:af:55:e5:79:50:48:a0:3c:51:3f:93:
77:0a:5c:d9:a9:5b:80:f7:0b:67:ec:b2:70:2d:6e:
84:ad:13:d3:4f:1d:98:df:ed:40:ee:a6:9f:5f:3c:
47:71:b1:57:82:45:6d:19:10:37:aa:92:c4:f6:3f:
c6:f3:25:f2:42:c6:b5:25:0c:83:4a:35:22:07:8b:
3d:27:d6:9a:75:1a:4d:b3:0f:69:e2:5e:e4:1a:05:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1E:23:B8:BF:F2:E8:8A:33:12:40:86:13:FA:04:AA:8E:02:E9:A3
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QR4juL_y6IozEkCGE_oEqo4C6aM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.86.0.0/17
Signature Algorithm: sha256WithRSAEncryption
91:90:c0:f2:e4:34:28:8f:81:ba:de:28:97:2e:da:47:8e:a8:
a2:b9:d1:18:f5:43:49:3f:50:46:c7:35:c0:df:5b:ae:0a:31:
1a:74:a5:45:0b:bb:49:b7:e3:4e:64:48:59:c3:a0:b9:4c:79:
2e:4e:42:31:3a:6a:84:c5:d8:ba:7f:2c:d5:8d:04:8d:d0:cb:
12:1a:9a:0d:26:3c:33:2e:17:a8:bc:c0:e5:3e:1d:a9:1f:79:
80:29:f2:da:c8:a2:62:e1:6c:60:8d:69:33:49:b4:cf:04:9c:
e1:1b:65:4b:98:14:25:aa:e2:04:8c:4d:ff:c0:be:b6:86:b3:
fb:8c:b1:cf:af:ad:2d:e2:5e:e5:97:c4:e4:f6:f5:32:16:80:
6e:3e:d3:da:e9:7b:19:c7:66:75:7e:24:bc:88:c3:d0:fc:54:
66:f9:01:58:70:66:8f:90:3b:f1:75:13:ec:b7:cb:11:fc:21:
18:b7:a0:a5:cc:84:e1:c9:aa:f9:6c:20:bf:4f:8d:57:f6:f3:
e4:91:56:e6:27:64:71:26:5e:a5:26:d4:37:97:b0:a7:14:66:
da:26:91:77:64:cc:51:44:67:9a:3a:78:22:83:13:05:3b:fe:
8a:16:db:c1:56:92:1b:40:0b:57:19:a5:a5:c6:90:63:0c:dd:
99:25:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:58 2025 by rpki-client