Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/BFIiUtW6FmsrSvdIfPf6NP4RLUY.roa
File: BFIiUtW6FmsrSvdIfPf6NP4RLUY.roa (raw, json)
Hash identifier: 8bveK4yplQSDe3P6YGLWkVxiLbDrGoDxh9tU/IrskkU=
Subject key identifier: 04:52:22:52:D5:BA:16:6B:2B:4A:F7:48:7C:F7:FA:34:FE:11:2D:46
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 0103
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/BFIiUtW6FmsrSvdIfPf6NP4RLUY.roa
Signing time: Sun 30 Jun 2024 01:28:37 +0000
ROA not before: Sun 30 Jun 2024 01:28:37 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 23816
IP address blocks: 211.14.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Jun 30 01:28:37 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=04522252D5BA166B2B4AF7487CF7FA34FE112D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:3c:5a:86:02:5e:9a:b9:fe:1c:03:1f:3c:
fe:90:6c:78:51:da:b7:d1:2e:c1:20:fc:d6:7f:4e:
cb:51:0c:33:a2:64:6b:45:31:28:9a:aa:38:b3:ac:
f4:48:33:2c:97:73:45:f3:ae:ba:5d:cb:ec:e0:cc:
2c:87:91:c1:93:34:53:23:81:50:8c:49:5e:58:dd:
4e:4c:fc:b4:6d:d0:25:e1:1c:6e:fb:2d:1b:b5:b4:
40:a7:20:90:88:b5:d5:5e:be:c3:6a:02:de:c0:9d:
da:8d:ec:da:8c:dc:f3:44:47:5b:1d:cf:61:58:4b:
53:a5:bd:e7:9b:a7:12:a6:47:f5:57:52:fe:a7:a0:
6f:88:da:73:16:de:cd:8f:fb:4f:67:4c:d7:b9:33:
c9:f4:6f:1e:c5:d3:9f:50:dd:b3:af:c0:4e:d9:60:
be:34:8e:33:e2:09:72:b4:c5:c7:98:90:30:fa:e1:
77:88:f8:a2:32:a4:0e:fd:69:86:79:98:84:82:f9:
10:b4:02:03:f5:be:7c:7a:3e:66:6b:9d:bb:b4:fb:
48:6c:40:f1:91:53:42:3c:ee:6b:9e:4b:1a:6b:13:
cb:05:c2:60:50:8c:9f:b6:f7:09:67:65:6c:86:1e:
70:bd:04:41:4d:21:08:c4:14:c7:fd:e1:71:60:c8:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:22:52:D5:BA:16:6B:2B:4A:F7:48:7C:F7:FA:34:FE:11:2D:46
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/BFIiUtW6FmsrSvdIfPf6NP4RLUY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.12.0/22
Signature Algorithm: sha256WithRSAEncryption
26:86:81:9f:5e:79:59:d3:93:62:7a:14:53:31:f4:4a:d3:d4:
84:85:13:04:62:9d:01:39:76:02:29:c6:37:7b:4d:e2:e8:4d:
5a:be:0a:18:4f:36:72:9f:35:f4:5a:e1:94:65:b0:3d:3e:68:
49:bb:e1:67:f7:a0:b8:88:aa:14:e2:87:c8:4f:4b:3d:9c:3e:
99:14:6b:16:ad:50:aa:d4:9c:bc:c2:c1:db:6a:4c:3e:7b:99:
91:bd:d5:57:80:95:f4:e3:0c:55:9f:5f:8d:1e:a0:36:28:00:
11:18:2e:b5:b7:ae:76:bb:55:0c:45:9b:b5:4e:77:5e:d9:48:
8e:01:e0:68:96:a5:8c:6b:84:31:66:d0:45:38:1e:b3:d4:3d:
3a:d8:df:e0:f7:8b:f9:b7:09:2f:74:10:58:ec:69:9b:92:28:
6c:b4:0f:ea:33:e4:67:75:c2:4c:22:de:61:b6:e1:e1:66:e6:
5b:5f:f7:a0:4f:e4:94:a0:6b:7d:38:32:fb:36:68:21:62:66:
52:3a:ed:1b:4f:83:c5:88:00:65:67:56:59:f8:e0:6d:42:86:
4d:c7:1e:b9:15:78:3f:02:d0:03:68:f9:7a:a9:ea:64:91:ff:
f9:d8:53:e1:15:c4:21:09:63:ce:b8:31:7a:19:f3:72:72:f0:
45:2e:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:59 2025 by rpki-client