Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Z6fSs8Ivq-ehJ6xt5LkQBu0k7mg.roa
File: Z6fSs8Ivq-ehJ6xt5LkQBu0k7mg.roa (raw, json)
Hash identifier: li6rO2OZIOQ+w9Qli7ndn1TFOIURACFO3npmrfnvSJY=
Subject key identifier: 67:A7:D2:B3:C2:2F:AB:E7:A1:27:AC:6D:E4:B9:10:06:ED:24:EE:68
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0531
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Z6fSs8Ivq-ehJ6xt5LkQBu0k7mg.roa
Signing time: Wed 18 Dec 2024 02:42:29 +0000
ROA not before: Wed 18 Dec 2024 02:42:29 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.13.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1329 (0x531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:42:29 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=67A7D2B3C22FABE7A127AC6DE4B91006ED24EE68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:8e:0a:a5:03:09:cd:17:6f:d1:9d:d4:e3:
09:ca:03:4b:95:e9:d2:9d:47:17:94:63:ae:c4:1c:
d6:77:6f:49:6d:30:a1:c3:f1:80:07:f2:ae:d8:f0:
85:11:c6:c1:2f:d4:23:4e:d1:3c:1d:a6:82:e9:65:
38:8b:4d:ca:5e:ea:a7:2c:99:ea:ea:e6:65:99:d3:
dc:d6:3f:f9:d4:90:4b:47:c6:a6:25:0e:34:b3:96:
42:c5:19:11:eb:92:80:bd:9e:24:4c:f6:f5:54:c4:
81:06:1e:bb:67:15:6b:01:7e:25:b7:4c:b1:25:fa:
5c:d4:dc:86:ac:96:2b:8f:05:39:a9:88:19:bc:92:
b1:8d:0f:6e:e4:74:e3:c3:59:4a:94:20:42:fb:a7:
03:03:26:f5:f8:e8:a1:df:2e:78:2a:2b:42:84:76:
e7:f1:6f:81:ee:e2:ff:5b:86:6a:04:2d:be:a7:e1:
0a:f1:2a:d4:32:90:18:3d:28:06:b6:16:3a:0b:f5:
e0:92:d3:6d:57:f7:7e:ea:c4:76:51:72:51:65:34:
b2:84:24:85:24:b1:32:57:55:21:13:ae:2b:6f:aa:
5a:22:55:60:8c:0b:65:92:72:fa:68:c5:71:d1:1f:
d9:11:b0:52:a6:6a:db:0d:8e:e1:37:a3:b7:ef:b0:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A7:D2:B3:C2:2F:AB:E7:A1:27:AC:6D:E4:B9:10:06:ED:24:EE:68
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Z6fSs8Ivq-ehJ6xt5LkQBu0k7mg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.13.160.0/20
Signature Algorithm: sha256WithRSAEncryption
02:01:c3:74:1b:61:ab:54:1b:cf:5e:e6:34:54:69:8f:a5:45:
90:4e:f3:f1:29:08:ff:fe:85:ff:85:3b:fb:ac:e9:81:ee:2e:
f1:38:07:ff:a7:4a:e6:4d:56:bf:c3:d4:92:e5:af:a1:ec:30:
41:0b:d5:91:fc:39:6a:16:6d:58:30:40:df:ff:70:22:df:61:
f9:42:22:00:d6:3b:ea:28:eb:38:c9:62:e6:94:aa:9a:3a:40:
64:5b:72:cd:95:09:84:0d:98:85:a1:71:90:2f:53:79:d2:3a:
39:d2:6a:00:41:a1:08:ba:33:18:c3:d2:62:3f:1b:4a:1b:c1:
c1:71:a4:45:5e:92:96:b5:1e:e6:6a:b0:1b:b3:0f:af:fb:83:
b3:aa:d3:55:8a:2e:b7:42:67:a0:18:97:cb:a0:32:63:59:94:
c4:a6:b7:8f:d4:f1:00:84:c8:03:08:f6:cf:ff:e4:61:26:db:
37:3d:f0:62:ea:b1:eb:b4:50:20:da:9e:7c:ce:49:21:24:cf:
95:0c:5a:4f:44:3f:78:19:d7:ac:99:07:ce:89:d1:70:59:0e:
6a:fc:4e:5e:59:34:be:53:c8:57:e2:c6:e3:f8:28:d4:03:9f:
3f:ce:2a:fe:de:3f:4e:97:ef:fd:fc:e5:26:dc:47:95:e7:67:
cd:7e:dc:79
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQyMjlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY3QTdEMkIzQzIyRkFC
RTdBMTI3QUM2REU0QjkxMDA2RUQyNEVFNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgMY4KpQMJzRdv0Z3U4wnKA0uV6dKdRxeUY67EHNZ3b0ltMKHD
8YAH8q7Y8IURxsEv1CNO0TwdpoLpZTiLTcpe6qcsmerq5mWZ09zWP/nUkEtHxqYl
DjSzlkLFGRHrkoC9niRM9vVUxIEGHrtnFWsBfiW3TLEl+lzU3IasliuPBTmpiBm8
krGND27kdOPDWUqUIEL7pwMDJvX46KHfLngqK0KEdufxb4Hu4v9bhmoELb6n4Qrx
KtQykBg9KAa2FjoL9eCS021X937qxHZRclFlNLKEJIUksTJXVSETritvqloiVWCM
C2WScvpoxXHRH9kRsFKmatsNjuE3o7fvsB1BAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUZ6fSs8Ivq+ehJ6xt5LkQBu0k7mgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1o2ZlNzOEl2cS1laEo2eHQ1TGtRQnUwazdtZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATTDaAwDQYJKoZIhvcNAQELBQADggEBAAIBw3QbYatUG89e5jRUaY+lRZBO
8/EpCP/+hf+FO/us6YHuLvE4B/+nSuZNVr/D1JLlr6HsMEEL1ZH8OWoWbVgwQN//
cCLfYflCIgDWO+oo6zjJYuaUqpo6QGRbcs2VCYQNmIWhcZAvU3nSOjnSagBBoQi6
MxjD0mI/G0obwcFxpEVekpa1HuZqsBuzD6/7g7Oq01WKLrdCZ6AYl8ugMmNZlMSm
t4/U8QCEyAMI9s//5GEm2zc98GLqseu0UCDannzOSSEkz5UMWk9EP3gZ16yZB86J
0XBZDmr8Tl5ZNL5TyFfixuP4KNQDnz/OKv7eP06X7/385SbcR5XnZ81+3Hk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:49 2025 by rpki-client