Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/TCJjxLTKYUM1JKVOvA_o9QhcBFA.roa
File: TCJjxLTKYUM1JKVOvA_o9QhcBFA.roa (raw, json)
Hash identifier: L3/XGv2OKAdJ1bX7TCYYCoJbZ2Umm56bJ63oPQLZCo0=
Subject key identifier: 4C:22:63:C4:B4:CA:61:43:35:24:A5:4E:BC:0F:E8:F5:08:5C:04:50
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0530
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TCJjxLTKYUM1JKVOvA_o9QhcBFA.roa
Signing time: Fri 31 Jan 2025 01:30:20 +0000
ROA not before: Fri 31 Jan 2025 01:30:20 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 61.200.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:30:20 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=4C2263C4B4CA61433524A54EBC0FE8F5085C0450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b4:4b:1c:06:e1:ac:94:6d:a1:93:6f:bf:99:
46:01:b2:81:46:d4:d9:f6:bf:2c:c5:98:67:8f:4e:
98:f3:b7:7d:4a:cc:74:5c:81:fe:76:e2:8d:b4:b1:
1d:df:5b:e7:a1:75:59:2c:b0:47:4d:1d:25:f7:8f:
1f:3a:50:41:19:d4:63:14:6e:56:d2:e7:26:1e:5c:
a9:bf:b1:bc:bd:db:a5:3c:69:0f:7b:e1:7c:45:c8:
3c:ee:94:c5:ec:b7:9d:f9:1d:cb:dd:ad:87:26:4e:
15:07:4e:44:1c:d0:22:6d:2d:d5:8e:5c:c8:41:85:
e7:3a:b9:41:f4:49:f9:83:1e:84:42:39:ac:68:60:
8e:80:44:b5:5c:ac:4f:6a:ec:46:c1:84:f8:7a:7e:
35:50:b4:ca:5a:e5:d5:16:38:5e:1b:1a:93:ef:e4:
21:7e:a8:ee:6e:6b:a4:88:29:5a:14:31:3d:4e:82:
f9:a1:08:f5:4d:b5:1a:55:cc:40:71:0f:ca:28:47:
3d:b5:08:0d:95:77:3f:aa:79:be:94:1d:3a:79:e1:
d1:0a:0e:21:b5:19:68:18:0e:5c:31:5a:7f:29:be:
7b:72:0a:e1:d0:bb:c0:12:4c:64:fa:91:da:8a:e7:
af:4a:21:c8:c9:ad:cb:b2:12:8d:37:0e:35:61:aa:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:63:C4:B4:CA:61:43:35:24:A5:4E:BC:0F:E8:F5:08:5C:04:50
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TCJjxLTKYUM1JKVOvA_o9QhcBFA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.200.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:12:ad:2f:1d:2a:dc:a2:f0:fa:57:3e:ae:44:65:fc:2d:e7:
17:85:17:6f:f2:2c:c7:61:d2:8b:59:58:4b:d8:a5:38:7b:b4:
a3:85:29:12:b2:73:6a:cd:40:6a:39:43:cb:71:58:16:55:a3:
26:c4:a7:40:87:18:91:25:be:d2:b5:4e:9a:42:6b:59:b6:33:
dd:b6:e5:6b:c9:aa:1c:54:3d:4a:cc:d3:93:f1:5a:78:9e:99:
a1:d7:6d:c1:f5:d6:37:ca:82:b2:5b:ec:44:80:f6:6c:2a:de:
80:69:c8:57:8f:1c:eb:78:21:91:06:17:66:53:09:2f:fa:d2:
c6:21:e7:03:d0:4d:03:34:6a:83:13:02:4e:31:b9:4d:f1:45:
63:9c:b9:82:85:8c:0c:2b:60:50:51:10:20:cd:b8:74:2a:7c:
d7:16:39:3c:8f:d6:5e:3c:78:1f:5e:85:33:05:a9:9f:d6:cd:
24:52:05:14:e1:81:13:45:4a:bc:49:52:07:35:77:83:e3:95:
81:4e:9c:90:01:b5:ee:f8:c6:c4:ce:c0:d4:31:2b:de:80:be:
62:ff:32:ec:46:7c:d3:2b:21:50:68:9f:ce:2b:8d:0d:7d:38:
0e:eb:25:da:b5:06:36:1b:a8:05:48:46:b1:65:21:91:a3:e6:
8d:14:0c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:19 2025 by rpki-client