Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tP5xUc-mvkDh0LMbNVmQTsPiHX0.roa
File: tP5xUc-mvkDh0LMbNVmQTsPiHX0.roa (raw, json)
Hash identifier: i15GyDl5WWsVbq6Xdzb4y3iC0oeVnDTlsL2jZOmgfS8=
Subject key identifier: B4:FE:71:51:CF:A6:BE:40:E1:D0:B3:1B:35:59:90:4E:C3:E2:1D:7D
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 7C
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tP5xUc-mvkDh0LMbNVmQTsPiHX0.roa
Signing time: Tue 03 Dec 2024 17:16:18 +0000
ROA not before: Tue 03 Dec 2024 17:16:18 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 2914
IP address blocks: 153.254.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 3 17:16:18 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=B4FE7151CFA6BE40E1D0B31B3559904EC3E21D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:80:a8:86:12:d1:17:31:da:d4:a9:38:40:
33:c5:db:13:53:06:20:28:8a:aa:1c:6c:95:f2:59:
a5:17:46:55:55:17:d7:5b:cc:3c:a7:2c:1c:32:bf:
09:d7:4f:9b:ac:02:00:dc:47:a2:9e:ad:89:c5:6d:
ab:f6:5c:02:1c:df:26:35:35:c3:26:2b:ba:d3:e2:
25:ab:cd:9d:25:fc:19:20:44:76:01:32:94:b6:a7:
49:61:c2:07:34:19:0a:b7:2c:50:d1:db:43:59:c8:
59:88:64:5c:66:d0:d5:b3:3f:bf:16:b8:27:e5:7f:
78:93:de:87:56:0e:7b:8d:a2:23:a4:fa:39:d2:5d:
ee:ce:8c:58:b4:d9:26:8e:e6:f3:75:25:f8:10:51:
de:14:5d:bc:b0:73:50:83:44:92:01:20:0f:9b:e1:
27:c1:72:3c:3e:15:43:54:6c:32:d2:ea:53:7b:f3:
09:e3:d6:80:32:b9:14:08:ac:9a:19:9e:19:49:dd:
10:fa:e0:cb:89:a2:6d:01:48:d4:d1:3d:a7:8d:20:
ae:47:40:21:8f:c7:7e:2f:93:d6:4c:fe:06:c9:64:
8e:da:cd:17:77:8e:a7:a1:4a:a9:3a:c0:18:0c:b8:
fc:53:27:7d:d7:54:79:b7:c1:e5:10:c9:d7:dc:67:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FE:71:51:CF:A6:BE:40:E1:D0:B3:1B:35:59:90:4E:C3:E2:1D:7D
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tP5xUc-mvkDh0LMbNVmQTsPiHX0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.254.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:b0:b9:28:b4:bb:26:7f:20:f4:80:7d:2c:af:6a:12:0f:be:
45:bf:9f:d5:19:5b:d0:10:09:6d:87:24:13:6e:2a:82:7b:13:
d6:7a:8b:54:6f:9d:96:7c:14:cc:c6:df:d3:9a:17:2a:16:55:
7f:67:af:f7:3e:ef:5e:65:72:ab:99:d4:42:57:67:54:d9:6f:
07:c9:06:fe:6c:aa:c8:b9:9b:67:b3:8e:9e:58:0a:72:bb:49:
56:e1:36:56:75:f6:5a:71:a1:ac:fe:c9:cc:42:9a:d9:8e:f2:
56:a6:ac:f7:2c:2d:5c:cc:17:3b:89:72:5d:48:5e:fe:e3:55:
b8:6a:48:e7:d1:56:9c:7b:2a:e2:d4:d0:2e:0e:64:2f:ad:56:
13:91:0f:40:4b:b7:c6:60:af:2b:0d:35:8c:3e:7c:4b:3b:d7:
c0:45:64:6d:2b:a5:5f:bf:4f:28:ad:1a:6b:d8:88:83:9c:11:
42:b3:11:17:9d:58:77:b7:99:fe:80:e2:f9:55:05:0a:3a:69:
53:ac:38:83:b6:03:ff:7c:f8:36:e6:6f:95:ea:41:7b:ac:ac:
83:ca:b7:c4:5b:5f:bb:53:fc:1d:bf:dc:b3:d5:30:ff:ca:ff:
38:b9:c6:b1:de:29:72:07:24:51:3a:54:18:67:ef:c2:7a:37:
e1:6a:82:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:55:10 2025 by rpki-client