Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bD9xoyvHBIDMF-07jFwPKIQ9NpY.roa
File: bD9xoyvHBIDMF-07jFwPKIQ9NpY.roa (raw, json)
Hash identifier: WE6Xr7524JSQT56YwiRmVsf+6W4jvGJ44oNwgJiAnGI=
Subject key identifier: 6C:3F:71:A3:2B:C7:04:80:CC:17:ED:3B:8C:5C:0F:28:84:3D:36:96
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0527
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bD9xoyvHBIDMF-07jFwPKIQ9NpY.roa
Signing time: Wed 18 Dec 2024 02:42:24 +0000
ROA not before: Wed 18 Dec 2024 02:42:24 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.141.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319 (0x527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:42:24 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=6C3F71A32BC70480CC17ED3B8C5C0F28843D3696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:9c:57:1c:84:75:ba:79:71:db:ed:84:28:
5a:20:9e:a6:96:e9:5f:a1:b0:a7:3b:dc:31:de:25:
c4:72:44:c6:d0:e2:0c:4b:51:94:53:fb:f1:2f:c2:
30:9d:a4:d0:81:2c:17:a8:94:52:8c:cd:4f:fc:80:
31:9e:5b:d5:7c:07:77:68:e6:ac:87:de:36:a3:40:
23:4a:d4:fe:82:27:e1:b6:1f:c2:ad:d0:40:0b:04:
a3:5c:7e:d2:9a:b4:bf:b7:7e:1d:30:85:c5:5e:b3:
4d:c5:0a:10:4e:88:89:d1:21:c5:4e:d2:fa:a9:51:
88:fe:10:1a:6e:c1:71:5f:f2:bf:9b:61:7e:ed:92:
f4:01:b9:2b:54:9b:e5:ac:2f:d3:e8:d7:1c:e8:4f:
84:e9:0d:1c:62:fb:9b:3f:cd:64:bf:87:43:59:ab:
de:02:18:58:81:58:ce:35:cc:42:60:20:1e:16:e9:
6e:d3:be:4c:71:e0:8b:09:6c:2a:3a:5f:dc:4b:49:
c0:a0:13:24:dc:71:5d:59:07:7c:9d:ab:43:cf:80:
51:50:23:39:d3:b4:2a:56:0c:5a:2c:64:b5:f2:ea:
04:7a:33:90:a0:3e:d8:43:47:c1:30:a3:65:92:e2:
a2:0a:66:cb:b4:3e:fd:58:92:0b:02:e3:6c:ef:24:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3F:71:A3:2B:C7:04:80:CC:17:ED:3B:8C:5C:0F:28:84:3D:36:96
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bD9xoyvHBIDMF-07jFwPKIQ9NpY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.141.247.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9b:bd:7f:f4:b2:ca:77:17:f9:f5:c1:c2:f8:e8:51:03:81:
18:e9:fb:9e:31:de:9e:70:57:26:14:37:b0:bb:b2:68:a8:54:
40:ea:85:09:c0:e0:05:a9:bf:3a:93:6c:ee:ad:ff:fe:8e:ca:
22:d2:d1:f6:7d:b2:b0:1b:60:dd:eb:48:91:48:ae:1a:0a:86:
8b:fa:c1:df:0f:a8:c0:62:74:e5:81:50:3e:e9:24:fc:41:ff:
6d:89:d8:67:c5:12:d1:1d:54:fd:03:0e:1d:20:fe:9b:a9:ca:
5b:51:49:2a:22:65:14:b7:e1:5d:cb:3d:9e:ac:30:b4:7f:3c:
d0:cb:64:7d:ed:1a:8d:87:59:d1:8e:9b:a5:b6:e0:61:f5:ef:
7a:0d:a1:c9:86:36:b4:60:1b:37:85:a6:90:4d:f0:d2:87:97:
fd:3a:86:90:54:ea:2f:ca:bb:fe:16:32:d7:fa:0f:72:80:d9:
a5:a6:29:24:cb:fe:5d:e0:a9:f5:80:83:3f:ac:22:83:2c:06:
15:f2:1a:8b:4c:8b:38:e8:cb:ce:f7:dc:f5:d1:e6:21:7e:68:
bb:57:bc:98:04:f4:6c:eb:50:5a:da:cb:bf:42:58:a1:d2:d4:
66:e3:4d:85:3b:d3:f7:42:59:88:03:07:74:17:d9:89:a1:b9:
3f:58:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:24 2025 by rpki-client