Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/MzL2w-fOogmBDVjBtK9dP6bk5uY.roa
File: MzL2w-fOogmBDVjBtK9dP6bk5uY.roa (raw, json)
Hash identifier: oDTeBznF2ixTFgMlCHgAbhn4d8b/jugb7G1iXmhiqak=
Subject key identifier: 33:32:F6:C3:E7:CE:A2:09:81:0D:58:C1:B4:AF:5D:3F:A6:E4:E6:E6
Certificate issuer: /CN=151B1BA80303A776F3F7B431110766C66671EC16
Certificate serial: 02
Authority key identifier: 15:1B:1B:A8:03:03:A7:76:F3:F7:B4:31:11:07:66:C6:66:71:EC:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/MzL2w-fOogmBDVjBtK9dP6bk5uY.roa
Signing time: Thu 18 Apr 2024 07:56:43 +0000
ROA not before: Thu 18 Apr 2024 07:56:43 +0000
ROA not after: Fri 18 Apr 2025 07:41:21 +0000
asID: 131926
IP address blocks: 103.104.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151B1BA80303A776F3F7B431110766C66671EC16
Validity
Not Before: Apr 18 07:56:43 2024 GMT
Not After : Apr 18 07:41:21 2025 GMT
Subject: CN=3332F6C3E7CEA209810D58C1B4AF5D3FA6E4E6E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:eb:6d:e0:dc:cd:fc:0f:d0:a4:6f:e1:df:
1c:68:a1:cb:31:3b:39:c1:e2:5b:c3:f2:43:ed:27:
55:5c:5d:be:75:c0:c4:ec:c1:44:37:cf:b8:ef:26:
fd:55:21:d5:d2:4f:ec:9b:63:4c:a1:4e:19:4c:00:
ce:0f:a5:5b:37:ec:32:99:e4:f3:41:ac:8a:9a:ae:
35:71:f8:84:ad:e4:aa:14:72:72:08:72:68:3c:d2:
87:80:8e:52:e0:f6:a5:42:5f:88:d6:61:c3:74:6d:
85:83:45:70:d8:c8:7b:67:d5:01:ce:9e:cb:e9:9d:
53:15:e6:e0:e6:a1:67:48:55:45:15:6c:d8:24:86:
99:ef:ca:91:cd:a0:07:01:bc:5e:2e:df:5e:2b:a9:
ff:63:6a:f2:f2:df:34:f2:31:45:f1:63:29:fa:d9:
f3:f1:1c:a5:f4:11:be:8f:54:1a:0f:59:73:b4:a7:
c3:20:e9:54:45:b4:0b:3c:c3:f0:d8:c9:6c:e2:98:
e8:25:d5:93:e3:3b:3e:1f:f7:e8:c8:92:0f:bd:1d:
f0:08:c7:b7:17:cf:9a:c2:15:a2:3e:61:a2:fe:93:
68:a2:92:bc:ac:95:72:46:ee:b0:c2:63:da:9d:2e:
a7:d7:e7:d1:06:17:bd:04:3b:6e:51:72:00:97:69:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:32:F6:C3:E7:CE:A2:09:81:0D:58:C1:B4:AF:5D:3F:A6:E4:E6:E6
X509v3 Authority Key Identifier:
keyid:15:1B:1B:A8:03:03:A7:76:F3:F7:B4:31:11:07:66:C6:66:71:EC:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/FRsbqAMDp3bz97QxEQdmxmZx7BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/MzL2w-fOogmBDVjBtK9dP6bk5uY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:f6:d0:2c:f4:df:af:66:00:7d:20:a2:95:f7:33:9b:3a:46:
a1:bb:d8:07:55:ba:57:6f:f4:8a:e5:e4:27:db:9b:de:e8:99:
86:24:b5:ca:69:1c:b8:87:18:e1:8d:e5:a9:1d:40:db:d2:7c:
45:25:a1:c7:28:27:6b:3a:25:6c:a1:36:4a:59:4a:14:ab:e4:
54:47:ef:45:e3:9b:80:b1:f8:ad:3b:77:b6:23:6c:2f:62:c8:
ef:44:22:08:e3:03:6a:87:29:d4:de:23:f0:2c:aa:78:4c:92:
15:13:e3:b8:41:47:8d:4e:42:06:c7:93:75:a6:ef:02:69:f9:
90:27:8e:70:7d:22:8c:35:b3:b2:b4:50:d6:71:db:24:11:14:
21:ad:c9:db:ed:bc:2b:89:81:62:52:2f:a0:1e:0d:51:2a:3f:
8c:49:31:b7:de:ec:86:66:14:74:d5:41:3b:69:35:32:a2:1c:
17:d2:6e:a8:22:10:54:f8:df:8d:a4:f0:28:ee:18:6d:9a:42:
0c:78:b5:d4:b7:cc:7c:51:84:7a:29:80:71:54:32:e7:6b:e9:
86:cc:e1:59:b8:56:1f:57:73:3d:73:0b:df:97:0a:41:73:b6:
24:39:a7:ce:e7:e5:f7:39:7d:0d:cf:28:2a:3a:a5:01:94:17:
21:f8:a6:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:23 2025 by rpki-client