Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/iwC3dJtUpZE6xZKNSxyJBO2mJIs.roa
File: iwC3dJtUpZE6xZKNSxyJBO2mJIs.roa (raw, json)
Hash identifier: 1Z3EqLLWEHEGLRKJPBVdcFLT4a9Qglh5m90R6xHPhWY=
Subject key identifier: 8B:00:B7:74:9B:54:A5:91:3A:C5:92:8D:4B:1C:89:04:ED:A6:24:8B
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 041F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/iwC3dJtUpZE6xZKNSxyJBO2mJIs.roa
Signing time: Wed 18 Dec 2024 02:19:01 +0000
ROA not before: Wed 18 Dec 2024 02:19:01 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 114.19.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055 (0x41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:19:01 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=8B00B7749B54A5913AC5928D4B1C8904EDA6248B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:eb:5f:fc:20:5e:f3:5c:5b:e0:2a:67:29:43:
c9:9f:4a:54:b8:80:b1:f2:b0:0c:c0:e9:3b:fe:2e:
b0:e6:3a:6d:79:7b:c8:1c:54:b0:3f:e5:27:fc:02:
e4:41:55:3e:d0:75:cd:40:6b:ac:d4:2d:81:72:25:
27:f8:46:2d:75:8e:9e:b7:07:47:0f:93:fa:1c:da:
40:1e:f9:c0:3d:69:f1:03:fc:a3:1b:74:34:8f:05:
cc:bc:aa:93:71:05:e9:f9:b3:db:f8:74:63:28:10:
7b:30:04:a6:27:42:dc:c1:a8:23:10:2a:de:5f:23:
cb:34:6e:c2:9d:d0:f4:3d:75:9c:67:5d:08:84:b5:
4d:64:09:61:43:e7:73:e3:64:eb:ad:c3:99:72:0f:
f9:24:15:52:18:13:64:b3:81:34:c6:6e:ef:3e:8b:
61:1a:7c:5a:55:c9:81:92:b5:63:ef:cf:66:98:c5:
39:cb:5f:0f:7c:29:53:db:18:09:24:77:30:9e:e9:
26:52:cc:8a:52:b9:f5:a5:f0:37:78:62:4a:50:96:
93:3e:1e:b2:28:ac:5c:ed:39:08:c0:bc:55:27:ce:
12:cc:35:56:52:fe:51:fc:67:fa:54:0d:55:b9:c0:
89:33:3b:20:58:d7:66:7f:5b:1a:84:d6:0f:3e:fe:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:00:B7:74:9B:54:A5:91:3A:C5:92:8D:4B:1C:89:04:ED:A6:24:8B
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/iwC3dJtUpZE6xZKNSxyJBO2mJIs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:df:5d:c8:d3:c2:f6:fc:88:66:c3:82:1c:c7:77:e1:d4:45:
da:7d:d5:59:83:fa:52:1f:d8:d6:90:cb:3b:89:4e:fb:91:2d:
47:7b:4e:94:7f:be:ef:dc:04:91:ae:55:1a:9c:10:d7:06:0e:
1f:a4:f4:cb:95:9e:86:a8:69:00:6c:47:0e:67:e0:fb:97:32:
56:35:1d:30:c4:3d:2b:6f:42:ba:21:28:ff:95:a5:6b:32:0b:
36:0e:0d:7b:64:5d:0d:b7:cc:2e:40:7b:5e:ee:c4:09:e7:46:
56:9b:9f:08:0d:ca:1f:35:bf:a1:9d:8e:fc:5e:c6:f7:a8:21:
4b:8d:bd:32:f7:7b:43:a3:9f:16:ec:ad:76:fa:92:6f:12:a8:
a0:4a:28:7b:81:5f:ed:83:b4:4a:31:13:e4:f2:33:ce:8b:49:
0e:13:9c:08:d4:9c:a4:aa:91:d4:66:05:44:a9:9e:bd:a4:db:
0e:9b:07:83:3e:1e:2f:c9:7a:97:8b:89:39:aa:4e:10:08:00:
bb:26:65:1d:92:56:ef:d2:05:7e:92:af:09:63:12:50:55:7e:
ca:0d:09:0a:fe:1e:e0:01:0c:3e:7e:e5:f6:72:fb:a8:de:a5:
aa:84:68:08:ae:c3:e5:2e:20:2b:a3:0a:7d:23:3d:29:66:bd:
96:00:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:33 2025 by rpki-client