Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/BhwgcURuIa_G3L9QHc2XGBdU3r0.roa
File: BhwgcURuIa_G3L9QHc2XGBdU3r0.roa (raw, json)
Hash identifier: 6cqacPmeQLerHFdsP8dT0OGzX6cQWThkWUOjNsBo1G8=
Subject key identifier: 06:1C:20:71:44:6E:21:AF:C6:DC:BF:50:1D:CD:97:18:17:54:DE:BD
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 054A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BhwgcURuIa_G3L9QHc2XGBdU3r0.roa
Signing time: Fri 31 Jan 2025 01:36:07 +0000
ROA not before: Fri 31 Jan 2025 01:36:07 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 116.68.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354 (0x54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:36:07 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=061C2071446E21AFC6DCBF501DCD97181754DEBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:9e:20:1b:c7:bf:49:f3:a2:07:f6:02:ef:
f6:5d:e1:f0:bf:30:80:d2:d6:8d:fd:ae:98:38:1d:
6a:58:36:78:bf:94:e4:78:81:03:77:88:d0:ab:5c:
47:65:a2:ec:87:eb:98:99:a6:54:ca:a8:47:1f:6a:
fd:2f:24:75:df:6a:15:8f:d4:96:49:99:76:96:1b:
03:8d:fa:f7:2d:a2:bd:82:d5:b2:31:29:21:74:8e:
0a:6c:94:ea:fb:bf:55:03:3c:8f:60:18:33:c8:ab:
62:d7:86:f2:b8:4c:c6:a1:3c:dc:49:47:47:d3:6d:
37:40:39:1a:e7:20:11:0a:67:ad:a4:c0:97:5f:67:
40:ab:6b:58:fe:9b:35:ed:f6:8e:a5:0e:81:5d:b6:
6c:e9:7b:b5:2f:70:e9:ce:cd:6a:70:2a:ba:6f:62:
51:64:ad:90:a8:a5:d0:93:3e:26:85:1d:ba:c1:e2:
75:bc:19:9f:33:02:fb:9a:40:de:3e:8f:e5:5d:e2:
f9:66:9a:1a:31:83:98:b9:6f:72:4f:dd:66:5d:5f:
6f:ed:8b:d5:1c:c9:1a:c2:a6:aa:f3:96:1b:c4:56:
38:46:55:42:23:87:5a:77:f2:77:e5:dd:e6:06:f5:
08:a7:c7:9c:76:29:c7:73:8e:e2:1d:12:6d:c1:53:
79:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1C:20:71:44:6E:21:AF:C6:DC:BF:50:1D:CD:97:18:17:54:DE:BD
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BhwgcURuIa_G3L9QHc2XGBdU3r0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.68.220.0/22
Signature Algorithm: sha256WithRSAEncryption
42:fa:d8:d4:fe:84:88:ab:3b:cd:23:16:2a:72:5f:87:92:3a:
ae:a3:6c:2a:7a:30:b3:b2:23:15:81:cf:f0:84:6e:89:4d:bf:
b5:10:32:06:73:a8:5c:9a:a7:66:dc:43:b7:df:fa:c5:6c:1f:
e1:01:79:2d:57:ca:ef:9e:1f:6a:1e:80:86:91:84:6f:29:69:
c3:ab:fb:f7:36:70:74:30:f9:58:d2:b8:ab:c9:d2:bd:f6:32:
09:9d:e9:ca:aa:9e:3e:73:3c:17:6e:8a:1e:60:e9:c9:60:be:
17:bd:ee:a5:99:9b:2b:46:af:59:86:a0:90:7b:91:1e:84:71:
81:8b:49:02:54:55:5f:35:f4:43:b5:b5:6e:6c:e3:e5:a1:0f:
51:8b:6a:91:75:55:d6:d7:25:23:b6:6f:2d:f9:4d:8a:8c:fd:
d5:99:ed:40:7f:1c:f5:47:a7:08:38:82:d9:b1:36:25:53:8e:
bf:7c:5b:4f:31:c8:a9:6e:e5:a6:69:85:c3:5c:f7:aa:52:46:
13:73:7b:f6:80:2c:c6:99:7b:32:7e:a5:cb:99:d5:07:da:80:
8c:cb:89:82:99:79:53:3a:3a:f1:b4:1d:d2:14:e9:cc:99:b1:
9d:7c:3c:1e:83:55:52:79:d2:af:2b:b6:de:74:35:70:81:12:
1c:be:7c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:12 2025 by rpki-client