Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qWQfASpNj9c4GfcDaiCQq9xXvWY.roa
File: qWQfASpNj9c4GfcDaiCQq9xXvWY.roa (raw, json)
Hash identifier: FB6Ps4iQPNI5zb1p2DG0s8HCq21TMsf6B6KaKDwMIvs=
Subject key identifier: A9:64:1F:01:2A:4D:8F:D7:38:19:F7:03:6A:20:90:AB:DC:57:BD:66
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04D7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qWQfASpNj9c4GfcDaiCQq9xXvWY.roa
Signing time: Wed 18 Dec 2024 02:37:01 +0000
ROA not before: Wed 18 Dec 2024 02:37:01 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.228.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:37:01 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=A9641F012A4D8FD73819F7036A2090ABDC57BD66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:14:71:da:03:3c:82:a2:36:99:8a:62:dd:
f8:96:75:98:12:26:1f:70:f8:3d:f4:39:42:ce:cc:
f2:55:27:44:75:32:8a:ac:a6:45:88:1d:be:2c:01:
7d:e2:b3:c9:91:2c:b3:da:f4:ba:68:ff:5c:d5:f4:
f3:d9:3e:f5:7c:51:2f:2b:e7:e0:5c:ed:24:71:49:
21:f0:51:57:ad:cf:40:99:e3:63:7f:2d:3d:9a:41:
04:99:b5:fb:8e:bf:a7:25:00:70:cd:a3:b5:aa:84:
aa:d1:55:7e:b2:d1:4b:67:31:0f:ec:d8:14:95:eb:
87:b6:08:46:b7:15:58:22:21:43:a8:6b:cb:fc:be:
76:46:06:99:0c:97:25:5a:76:88:72:bb:14:53:7b:
95:ec:be:ce:06:4e:40:32:47:35:e8:af:72:b9:8e:
82:c1:e6:15:6f:b0:7b:bc:6a:eb:da:cc:02:0e:dd:
cc:40:f3:6e:86:f5:30:6c:e4:c0:a5:0c:01:39:d2:
24:23:90:51:12:ec:84:59:40:db:40:41:9a:7e:44:
fd:bb:c7:c5:89:16:3b:a6:7e:a3:80:3a:4f:b5:bf:
54:64:de:b2:76:a9:19:f0:85:4d:b4:9f:34:1c:5b:
ae:3d:90:ed:ae:d0:0f:42:30:4a:47:a1:e4:d4:a5:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:64:1F:01:2A:4D:8F:D7:38:19:F7:03:6A:20:90:AB:DC:57:BD:66
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qWQfASpNj9c4GfcDaiCQq9xXvWY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.228.32.0/19
Signature Algorithm: sha256WithRSAEncryption
88:79:fa:b8:ac:e0:86:ca:e7:27:8d:15:75:a7:65:c3:bb:7f:
ba:24:35:fe:f7:0e:6a:d6:e4:7c:fc:64:bf:6e:e2:d6:c0:6e:
1f:24:04:58:7d:3a:af:2f:fb:85:e4:65:78:e5:6d:78:11:05:
80:d7:f7:7f:6d:ad:66:1d:4b:2a:17:c6:ab:14:89:09:c6:61:
6a:9f:4a:f3:78:90:73:43:d5:9d:86:e8:0b:fb:10:5c:f9:d9:
7c:2b:40:24:b4:1d:3b:b4:21:16:7e:e9:f1:50:04:b2:31:0f:
9b:10:ab:f3:65:f5:81:13:1b:df:7d:51:da:56:54:3e:55:46:
81:7a:9c:16:16:b4:1e:1f:c1:e5:6e:ff:2a:7d:92:e6:ff:7a:
63:e1:80:3c:2c:ce:4b:5d:6f:3e:1a:3e:6e:61:34:b1:93:5e:
81:cc:65:37:4f:78:18:7f:e1:a7:5a:dc:60:9d:49:36:0e:a4:
82:f8:7b:35:37:20:7d:0d:b9:e6:5d:4c:8b:11:14:f9:68:e8:
03:8a:58:70:15:da:e6:c0:64:28:3a:8c:6d:f7:48:3a:9b:ad:
b3:38:dd:c5:11:ff:7b:b3:a1:af:75:73:5a:87:a9:b3:b2:a6:
87:45:72:d6:75:43:4f:ad:3c:1f:af:3a:ee:39:50:1e:2e:2a:
44:4d:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:37 2025 by rpki-client