Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PCyQrI0nOEPjFZgKiDlVJK-6VVU.roa
File: PCyQrI0nOEPjFZgKiDlVJK-6VVU.roa (raw, json)
Hash identifier: 2fd7AkDmcrOBTKoU5BEXtXaQsq17L5ZDbPuAtMG288k=
Subject key identifier: 3C:2C:90:AC:8D:27:38:43:E3:15:98:0A:88:39:55:24:AF:BA:55:55
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0545
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PCyQrI0nOEPjFZgKiDlVJK-6VVU.roa
Signing time: Fri 31 Jan 2025 01:30:29 +0000
ROA not before: Fri 31 Jan 2025 01:30:29 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 42.125.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1349 (0x545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:30:29 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=3C2C90AC8D273843E315980A88395524AFBA5555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:01:87:f9:12:41:9d:39:a8:dc:a2:65:ad:
1a:3b:04:ac:de:43:fc:35:8a:86:5c:b8:46:88:7a:
e1:5d:42:89:83:21:b5:55:80:de:04:87:27:f5:1d:
2b:6c:27:83:60:5d:f2:ad:8b:a2:f3:11:73:71:9e:
6d:bf:20:73:47:14:44:53:b6:fe:5f:76:22:ba:4c:
4d:11:cd:76:e6:cc:91:6c:9f:87:cb:26:38:77:95:
45:e9:76:e6:fe:3e:3b:83:e9:67:a1:1e:92:d8:a7:
da:52:5d:b1:d8:c6:26:73:e7:9a:6c:8d:3a:16:de:
12:84:7e:62:ad:64:06:8f:93:90:e9:8b:ae:66:db:
e5:d1:f4:6c:17:72:80:ed:ee:79:c7:1b:a8:06:c0:
cb:da:97:da:2f:bd:7d:81:36:99:ed:71:59:aa:a9:
f7:6a:87:29:91:fc:1c:31:49:7d:65:8e:69:7d:13:
dd:42:dd:5b:68:eb:44:a0:2d:1b:a8:3e:92:2c:a6:
b3:20:95:5b:7e:21:29:35:a9:c4:a4:50:0f:6b:82:
60:6f:c9:ca:25:31:68:ab:c3:1b:ba:11:d5:34:36:
bc:a8:25:83:2f:50:1c:94:39:ca:08:9f:8c:46:43:
3c:6a:fa:e6:8d:13:6c:0f:c3:9a:5e:57:9a:af:ed:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2C:90:AC:8D:27:38:43:E3:15:98:0A:88:39:55:24:AF:BA:55:55
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PCyQrI0nOEPjFZgKiDlVJK-6VVU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.228.0/22
Signature Algorithm: sha256WithRSAEncryption
39:b7:52:a1:44:8d:bc:1a:47:d5:80:e1:86:8e:9a:20:7e:bb:
25:1f:d1:28:16:c3:15:4d:74:fa:b1:fc:29:62:aa:e6:05:1d:
ce:63:1d:1d:b1:7a:a7:50:2a:fb:e0:37:a8:55:08:ab:6b:bf:
c7:da:23:53:3f:f3:c1:f8:fb:a0:2d:cc:59:ad:00:58:f2:d1:
c4:68:e9:c9:9e:7c:18:10:88:44:4d:01:24:51:a6:bf:fb:43:
8d:74:31:c0:96:48:d1:ee:cb:ff:28:78:96:a8:cc:c9:38:3f:
45:77:e1:35:b1:12:cb:4c:d8:dd:31:24:b9:25:bc:c4:02:14:
0e:23:72:5c:81:4b:09:ab:16:03:0c:fe:df:84:a9:d0:cd:68:
c8:48:43:ed:4f:da:83:6f:92:92:fe:22:d3:f9:63:d5:84:47:
2c:84:f1:62:98:54:01:5e:03:dc:c8:c0:2f:86:06:30:63:f7:
ee:69:9e:37:2f:87:f6:c3:6f:b1:86:e2:cb:ca:d6:b6:cb:de:
c0:d3:19:9f:90:6f:55:b5:23:a0:c0:58:25:1c:12:70:b9:1d:
80:27:f8:79:49:2f:6f:fa:5f:26:7b:03:a5:1b:fc:6f:90:d1:
01:11:ec:cc:a8:72:43:40:67:9c:2d:97:d5:22:04:8f:ef:4a:
5a:b9:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:19 2025 by rpki-client