Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/BFIjyBQ0hAqL_RwE1SXbCzlrRQQ.roa
File: BFIjyBQ0hAqL_RwE1SXbCzlrRQQ.roa (raw, json)
Hash identifier: 0B83IMHaiIIdKrgEL25M1r2YLb8ApNXZkV+bjubsJuQ=
Subject key identifier: 04:52:23:C8:14:34:84:0A:8B:FD:1C:04:D5:25:DB:0B:39:6B:45:04
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 055D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BFIjyBQ0hAqL_RwE1SXbCzlrRQQ.roa
Signing time: Fri 31 Jan 2025 01:36:15 +0000
ROA not before: Fri 31 Jan 2025 01:36:15 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 42.125.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:36:15 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=045223C81434840A8BFD1C04D525DB0B396B4504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:9a:83:c1:81:7b:63:6b:89:64:f3:d9:0a:
8f:3c:da:05:d5:ea:8f:62:12:94:75:d2:a6:f7:2e:
d0:f3:6d:52:35:1a:76:34:06:70:54:36:da:83:28:
4d:e9:d9:03:ca:48:94:a5:36:11:b4:67:cb:22:b8:
34:49:fe:4b:40:8b:82:be:e9:1e:67:8b:06:08:97:
b2:41:89:e0:e5:bc:5f:f0:1c:08:0e:90:9a:84:88:
ea:8c:16:12:75:5b:2a:b5:e2:e1:8e:33:85:ea:7c:
e5:b2:58:3a:9b:1d:d4:1d:73:68:a5:95:37:62:bd:
d1:46:53:6e:ab:c1:c4:e4:ae:4f:a4:5b:b1:30:5f:
8a:4a:ac:18:df:e3:59:7b:c1:57:5b:55:27:8b:1b:
9f:16:39:72:89:52:41:fe:c7:fb:d6:2e:6e:c8:bd:
d1:05:2c:65:4f:f9:6e:24:ee:1b:14:c9:d2:b2:b8:
e1:33:0f:34:46:93:91:f5:8a:8a:48:20:6e:90:99:
9d:15:2d:e2:b2:d8:92:2d:e1:27:fc:de:4e:08:85:
a0:32:ab:5d:33:a2:ee:1f:55:97:22:0c:99:a0:7d:
ec:9b:64:5f:61:eb:b3:8b:00:b2:51:a8:cb:9e:41:
f3:a1:d0:f9:21:d6:c2:11:55:dc:97:30:fb:bf:f4:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:23:C8:14:34:84:0A:8B:FD:1C:04:D5:25:DB:0B:39:6B:45:04
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BFIjyBQ0hAqL_RwE1SXbCzlrRQQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.240.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:88:e9:f5:40:1a:e8:cb:7b:3e:d1:d4:fb:eb:b7:3e:78:e5:
ff:11:98:ac:93:68:41:a8:14:42:99:cd:40:53:94:e6:bd:48:
b7:04:45:30:c8:26:35:9e:f1:47:62:a4:8c:aa:71:ae:46:a1:
c0:8c:ff:54:19:2c:5f:ad:5b:85:49:ab:ad:0d:b4:e9:2a:58:
62:b8:e9:ba:89:c4:87:78:59:d6:20:b9:f4:9d:ee:0e:c6:29:
0a:59:82:fa:af:30:65:29:a3:ef:d2:41:1f:19:a5:5c:0c:2c:
87:a9:66:8b:93:57:37:2c:b5:c8:8e:32:dc:ea:e1:3c:93:94:
10:8e:37:f0:ae:c4:a7:64:f4:29:d1:98:ec:de:14:01:5e:06:
44:e5:d6:6e:02:62:ee:38:5d:3e:a0:36:46:43:e7:4b:f8:0b:
0a:ad:09:41:1b:a4:d4:04:9b:b7:e3:2b:54:91:1e:a6:e8:fb:
dc:f0:2c:81:14:a4:4e:f2:a3:17:7e:19:1a:97:92:24:98:5a:
4a:cb:54:79:d3:f6:64:8c:81:63:4c:9a:ba:f6:82:5a:f3:04:
a3:19:76:7f:09:bb:0e:eb:fd:87:d3:29:3f:88:ca:fc:c4:f8:
25:87:7c:0a:14:d3:ab:a4:a8:a9:f8:c6:ca:cb:a1:54:d9:b1:
92:bb:c5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:42 2025 by rpki-client