Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/kbQDGQZWJAwT4aNbQFxgDz5iQ84.roa
File: kbQDGQZWJAwT4aNbQFxgDz5iQ84.roa (raw, json)
Hash identifier: Fbth1M8zFgtgFiZ++4iREL42MZjVvMZdaobZaHyPSjw=
Subject key identifier: 91:B4:03:19:06:56:24:0C:13:E1:A3:5B:40:5C:60:0F:3E:62:43:CE
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04A5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kbQDGQZWJAwT4aNbQFxgDz5iQ84.roa
Signing time: Wed 18 Dec 2024 02:28:59 +0000
ROA not before: Wed 18 Dec 2024 02:28:59 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 111.97.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:28:59 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=91B403190656240C13E1A35B405C600F3E6243CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0d:b1:98:d3:90:2a:7d:f5:39:ae:25:cc:e8:
a1:78:3e:eb:2a:9a:24:94:17:bb:14:62:3d:63:12:
0f:e2:08:77:90:e8:7f:f8:ea:48:a8:42:79:54:a9:
51:cf:7a:ee:88:18:10:ca:e3:b4:d2:22:8c:dd:9b:
57:ba:a7:1a:ec:f1:c1:82:8d:05:bf:dc:b7:0f:a6:
44:9d:e4:89:f8:dd:ff:71:ee:5a:32:68:35:7b:09:
10:48:c9:07:52:25:fb:79:19:bd:36:81:8f:c8:78:
dc:e4:bb:02:73:46:c9:f5:a2:36:b8:77:0b:86:b8:
57:9d:82:3b:7f:50:14:f3:87:f5:71:97:1b:b8:68:
f2:a4:6d:82:51:5a:e3:df:bd:89:5a:8c:c3:85:23:
7b:ea:31:ac:fa:68:59:f8:40:49:38:f1:49:49:4d:
eb:e6:6a:a3:e9:c9:48:db:16:b7:43:34:09:94:ae:
44:85:d8:a4:88:f1:ac:0f:b5:a2:70:6b:92:3c:14:
4b:0a:27:81:96:27:dd:82:67:3a:f1:14:d6:af:e9:
f3:ae:e6:64:4f:79:0c:b3:08:27:ca:c3:20:f5:aa:
c9:1d:6f:dc:b9:ba:87:91:35:96:7c:40:6b:9a:45:
b8:f1:88:b6:73:0b:14:80:53:3d:4e:23:f0:ac:35:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:03:19:06:56:24:0C:13:E1:A3:5B:40:5C:60:0F:3E:62:43:CE
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kbQDGQZWJAwT4aNbQFxgDz5iQ84.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:b7:a3:9c:50:f5:80:f0:b8:47:74:84:c5:4e:bc:87:7f:55:
7a:47:dd:13:f6:1d:e7:3d:84:7b:f5:83:c0:b3:b6:0a:a3:8f:
a7:c3:ae:bb:e3:a5:67:5b:15:5f:a7:be:4a:92:6f:f7:75:fa:
d1:d5:26:c7:c7:e4:ee:a0:f6:34:c8:3a:39:e4:9a:d2:b1:ae:
5c:32:65:c3:b0:f6:13:7b:bf:70:25:db:b6:4d:a9:77:0b:2a:
07:10:ee:39:6c:ff:7c:b5:28:c5:71:f6:7c:6b:e8:59:1b:75:
ee:19:0f:a6:b9:44:2d:5c:f0:b1:82:ae:1b:1d:39:9d:35:eb:
cd:1d:ef:e2:7e:25:1e:b4:9b:9d:40:5f:1e:47:e9:79:57:ab:
95:7a:99:28:cf:d6:cc:58:12:d4:65:30:c5:a5:1f:0b:fc:e6:
bd:25:33:ba:83:f3:71:cc:88:0a:f3:44:30:7c:62:d9:db:fb:
a4:a8:82:06:fd:93:2c:12:09:8e:80:7c:e4:ca:fe:7f:e8:52:
f3:21:09:2c:1f:e3:44:b6:7f:0e:bd:01:53:86:62:7c:57:1e:
84:80:ab:7b:ea:12:73:4d:58:4e:44:af:74:09:0f:3b:49:6f:
0f:d6:06:25:68:04:26:d7:6a:6c:d9:77:55:81:96:9b:28:8a:
fa:06:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:35 2025 by rpki-client