Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/YBrJzBifIYOp9Wb7FbkRj1q5-HM.roa
File: YBrJzBifIYOp9Wb7FbkRj1q5-HM.roa (raw, json)
Hash identifier: 3IfxGuKTKkBgIqeNxKdwAKmgzrNlTyEuozIBPkd3vG8=
Subject key identifier: 60:1A:C9:CC:18:9F:21:83:A9:F5:66:FB:15:B9:11:8F:5A:B9:F8:73
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 05A3
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YBrJzBifIYOp9Wb7FbkRj1q5-HM.roa
Signing time: Fri 31 Jan 2025 01:42:18 +0000
ROA not before: Fri 31 Jan 2025 01:42:18 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 220.148.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1443 (0x5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:42:18 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=601AC9CC189F2183A9F566FB15B9118F5AB9F873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:53:f1:11:e4:6e:99:a3:5c:46:6b:19:08:
94:99:90:1a:d9:7c:9e:cb:5e:ad:09:2e:f4:dd:3a:
ed:dc:b8:d4:7a:67:30:a5:6d:50:d3:4d:49:9e:24:
67:da:13:90:c9:ac:ea:b7:e1:66:92:72:cf:a1:74:
0f:c7:e1:80:c7:02:49:02:a2:05:7c:8a:d4:2e:67:
73:75:6d:65:1b:ff:54:51:81:a5:15:60:48:84:6d:
45:f9:e3:48:13:ad:d2:ef:f9:31:9b:da:e8:20:71:
7d:48:c5:34:f3:b4:46:65:52:66:ea:7b:9a:2f:43:
fb:de:86:32:e9:33:bc:1a:3b:09:21:60:df:30:63:
07:da:6d:f2:d7:23:74:ff:ca:df:03:3a:2e:ab:f9:
d2:29:fc:55:3e:5e:20:37:5d:48:31:ec:18:5f:37:
d1:be:dc:36:75:a6:5f:9f:28:62:5c:63:a0:54:0e:
7f:a3:d1:c5:56:df:04:09:43:da:3b:bd:ac:03:7b:
d7:13:61:5c:12:4b:26:86:bc:f4:fa:36:e3:78:27:
25:c4:10:76:fc:50:d7:eb:39:0e:ab:53:21:e8:f5:
1e:97:3e:5c:20:e2:ad:3c:b4:11:ee:ba:fc:44:cd:
b4:cc:fa:7e:30:b2:25:62:3a:1a:33:30:56:09:d0:
29:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:C9:CC:18:9F:21:83:A9:F5:66:FB:15:B9:11:8F:5A:B9:F8:73
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YBrJzBifIYOp9Wb7FbkRj1q5-HM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.148.96.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:f0:4e:bd:1a:c1:6d:a5:ab:a3:fa:dc:18:81:72:dd:ff:29:
03:96:66:da:9c:16:30:12:74:21:d7:73:b1:5b:7c:6b:c9:90:
d7:67:fa:4d:06:b5:39:f8:e7:2d:5d:53:ba:fd:86:3f:5e:16:
54:d9:46:81:74:9f:8e:f5:97:46:c1:09:14:46:6f:fb:0d:13:
42:6f:9f:64:48:f0:f3:e2:cb:3d:6c:82:48:16:de:75:5f:4a:
de:eb:aa:a2:74:83:8f:8a:23:ce:ff:14:4d:cd:83:c2:23:04:
08:35:ae:ff:de:9f:8e:81:0c:3c:80:bf:1c:f1:36:d5:64:3b:
ca:3b:45:8e:76:73:36:07:66:7d:a9:74:94:1e:06:59:ac:4d:
13:c3:37:01:95:a8:ea:15:cc:21:21:62:3e:49:04:b3:d0:66:
c3:ea:8b:2f:ae:0b:de:5b:61:07:47:1e:55:a4:6e:2c:6c:a4:
ff:03:d9:b9:be:4a:83:7b:35:fd:82:de:d8:82:b0:8c:8d:95:
5b:61:0d:cf:af:15:5e:36:51:17:f5:de:7d:7a:0e:32:6a:5e:
a9:d3:20:4b:d9:89:c3:05:8d:8e:22:83:ba:2d:e2:86:0a:7a:
0d:32:e3:57:e8:91:7b:86:6f:89:d9:a7:46:c4:8a:2e:a9:6b:
f5:87:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:24 2025 by rpki-client