Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/DZY_R8W6biue5s2LlvQTNwLiQRs.roa
File: DZY_R8W6biue5s2LlvQTNwLiQRs.roa (raw, json)
Hash identifier: pkjqVLZ9pL3ulsT3vh74l8UA7qnxE6tFwLfkttMIbto=
Subject key identifier: 0D:96:3F:47:C5:BA:6E:2B:9E:E6:CD:8B:96:F4:13:37:02:E2:41:1B
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0581
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/DZY_R8W6biue5s2LlvQTNwLiQRs.roa
Signing time: Fri 31 Jan 2025 01:39:53 +0000
ROA not before: Fri 31 Jan 2025 01:39:53 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 42.126.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409 (0x581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:39:53 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=0D963F47C5BA6E2B9EE6CD8B96F4133702E2411B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:5a:c6:3b:c4:54:ce:34:48:42:68:73:aa:
86:ff:15:58:e6:a7:75:18:dc:ce:6b:7c:b7:e3:d7:
f1:28:5a:02:03:48:cc:9d:ec:99:ba:19:e4:20:b5:
4b:47:81:5c:b1:3d:6a:1d:d5:85:9a:5a:70:17:76:
61:37:01:93:ac:f2:3a:6f:f1:ef:7d:89:7a:ad:11:
b6:d3:1d:05:ff:41:ef:35:2a:70:65:30:ff:73:df:
65:49:f8:26:bb:41:1e:87:b1:12:86:a4:4f:46:1f:
b5:65:42:94:ff:f4:b9:a4:4c:4f:0e:0b:0c:a9:16:
f3:71:19:11:78:ef:26:f7:8b:aa:1c:a2:74:d9:55:
71:8e:ad:7c:0a:d3:eb:ab:32:7b:c5:f6:9e:40:43:
d1:07:64:df:1e:a8:e7:92:7a:7e:dc:5d:86:b0:5b:
5a:77:2c:06:19:b1:45:fc:ac:a2:98:df:03:5b:83:
95:16:a2:17:0d:0a:7c:0f:c1:00:7a:c9:d8:0a:56:
66:cb:91:87:35:6f:7d:e9:e4:17:90:25:ab:6c:57:
64:2e:0c:aa:53:9e:1d:b2:ce:ca:d4:c4:71:04:1b:
72:32:68:28:57:7c:3a:d5:bb:bc:44:c2:e2:24:9d:
e1:76:b5:6c:7c:c9:3a:b3:b2:ee:32:c5:4d:48:92:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:96:3F:47:C5:BA:6E:2B:9E:E6:CD:8B:96:F4:13:37:02:E2:41:1B
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/DZY_R8W6biue5s2LlvQTNwLiQRs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.126.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:c8:27:04:04:14:96:2f:54:6f:96:9c:6d:dc:5a:27:9e:a3:
65:c3:42:ce:88:0f:0e:4b:a8:0a:35:30:36:9b:ae:5b:42:98:
a5:b4:4b:5c:30:ef:01:11:a4:d9:cb:6a:e4:5d:a3:a6:3c:d1:
25:8b:f1:03:b8:76:3f:ca:a0:16:dc:8f:82:39:98:d5:fc:06:
3d:7f:6b:3e:6a:62:c6:cb:96:47:18:ee:d7:c2:27:a0:02:c1:
72:04:c2:50:86:95:1e:68:96:dd:e1:bb:bd:2e:15:43:76:28:
a3:4d:9c:bf:19:60:d2:1d:30:fc:5a:65:0e:8b:74:b1:fe:1b:
39:ee:d4:5e:b3:d5:15:01:51:c7:95:70:9c:29:ee:77:ff:4f:
7a:6d:9c:cb:74:42:d3:5f:87:d2:3c:c6:99:0d:3e:22:33:68:
c0:2c:72:59:30:af:1c:a3:c8:73:95:8e:e5:b4:40:23:8c:06:
96:0f:ec:23:b8:0b:75:e9:f1:b8:d4:e5:a7:82:d9:cb:21:64:
44:99:de:57:65:8b:63:db:49:35:c1:e3:c8:38:11:08:8f:1c:
3e:25:23:52:81:8e:29:4a:7d:c2:ae:37:db:cc:4b:30:b2:31:
50:cb:24:7a:ef:08:07:7b:a1:3a:be:2b:a1:13:01:39:bb:2f:
a3:99:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:35 2025 by rpki-client