Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/crBcVLqQ1SPW1O9s_taBB747L2k.roa
File: crBcVLqQ1SPW1O9s_taBB747L2k.roa (raw, json)
Hash identifier: 5OVEW5BEInHk+Bzai2dHvo7/9b5XDxzNqcnSHZDN0lA=
Subject key identifier: 72:B0:5C:54:BA:90:D5:23:D6:D4:EF:6C:FE:D6:81:07:BE:3B:2F:69
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 052B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/crBcVLqQ1SPW1O9s_taBB747L2k.roa
Signing time: Fri 31 Jan 2025 01:30:17 +0000
ROA not before: Fri 31 Jan 2025 01:30:17 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 210.171.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1323 (0x52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:30:17 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=72B05C54BA90D523D6D4EF6CFED68107BE3B2F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:af:84:27:2b:55:74:79:f0:85:f3:21:e9:
c0:21:43:c2:1c:02:9c:d1:0c:c9:28:71:7d:01:13:
5c:b5:11:6f:d1:e0:08:b0:f7:e4:4e:02:a6:e5:71:
32:84:00:60:64:be:9c:cc:e6:e8:de:01:dc:dd:db:
ee:43:a3:cb:93:a0:92:ef:5f:52:8b:7a:21:4a:2c:
ff:84:f2:f7:62:c1:8f:73:6a:12:1f:23:4f:ac:22:
e0:67:c5:9e:2a:5e:da:48:4b:d1:91:a6:5d:47:35:
dd:7e:7f:02:23:ec:54:98:7b:1c:63:12:3b:31:aa:
93:04:96:82:81:ff:41:96:79:f2:06:8c:ff:d3:0c:
c8:b3:af:90:1b:c7:ae:db:34:e6:c1:03:cd:78:d9:
25:d2:f9:d1:4f:1c:a0:cd:5f:52:1c:77:18:36:e6:
52:bd:f2:a1:f8:a4:42:79:ee:95:4f:b0:07:65:bb:
32:85:a6:3b:34:3a:b9:3a:18:b4:4b:6c:ab:ce:9b:
84:b8:ed:af:42:b0:aa:da:c5:41:77:11:77:99:62:
a3:d3:3f:ca:1f:5c:1f:7d:5d:4c:f8:df:e3:06:a1:
be:dc:2e:46:83:4a:c9:61:d2:52:a1:fe:13:e9:1a:
ba:7c:59:4f:86:4b:f0:9f:51:ab:6c:b0:7e:0b:28:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B0:5C:54:BA:90:D5:23:D6:D4:EF:6C:FE:D6:81:07:BE:3B:2F:69
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/crBcVLqQ1SPW1O9s_taBB747L2k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.171.240.0/20
Signature Algorithm: sha256WithRSAEncryption
55:fa:ee:52:0f:6b:c5:01:9f:cc:67:ec:bc:20:e4:c0:93:6e:
d8:8d:22:27:23:3b:f2:b0:2a:59:4b:84:2c:8f:c3:3c:ed:92:
ea:66:2c:b6:19:cd:64:1a:99:fc:50:f5:b8:22:fd:11:5e:ae:
86:de:6b:56:ef:2f:9b:80:54:32:57:de:58:08:4e:63:0d:fe:
d2:91:a0:40:d6:7a:56:14:7c:61:73:d9:fa:98:65:4c:68:e1:
f5:ca:62:0f:9d:bd:f8:61:d5:d6:be:47:b7:84:0f:73:c2:dc:
c7:eb:57:00:04:0e:a9:94:d1:1b:c1:9c:86:74:9b:cd:39:1f:
cc:e0:a7:ea:0e:e0:15:3d:5e:02:ce:cd:36:bd:de:d6:82:da:
34:5f:20:88:84:a0:69:0a:1f:19:43:cc:25:1c:73:62:0e:42:
82:65:a6:b5:58:da:c2:13:eb:4d:c3:e5:bf:26:de:da:85:d6:
0a:9a:4c:cf:19:08:b8:d5:b4:5f:17:1d:c0:50:f5:5d:54:78:
3f:8d:c5:f7:e7:14:90:9e:dc:c3:fa:bc:bb:9c:bf:7e:10:3c:
30:77:3c:b4:76:a5:30:8c:3c:44:44:24:d3:31:9e:7f:b2:ab:
69:56:e5:ff:d3:33:dc:c8:f0:2b:1d:c3:b3:f7:6a:e4:7f:26:
cd:02:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:07 2025 by rpki-client