Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/rpLc4w99Qr45r9biVuYslfW7U0U.roa
File: rpLc4w99Qr45r9biVuYslfW7U0U.roa (raw, json)
Hash identifier: SS4bTntmMvYW9zL8O28R/qxLb/sOptLFS8QiyhMuRx8=
Subject key identifier: AE:92:DC:E3:0F:7D:42:BE:39:AF:D6:E2:56:E6:2C:95:F5:BB:53:45
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0552
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rpLc4w99Qr45r9biVuYslfW7U0U.roa
Signing time: Fri 31 Jan 2025 01:36:10 +0000
ROA not before: Fri 31 Jan 2025 01:36:10 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 42.125.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:36:10 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=AE92DCE30F7D42BE39AFD6E256E62C95F5BB5345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:19:1e:3b:36:49:39:93:60:bb:1c:91:e8:
7f:62:a5:01:f8:8b:7f:69:44:4d:fc:a1:96:f6:b1:
5f:d3:17:81:f7:84:4d:e4:01:89:8f:93:1e:69:97:
e4:34:b6:38:1e:40:15:f7:78:03:86:ba:d1:db:a4:
20:89:40:06:e0:64:f6:f6:3a:71:83:4e:aa:6f:7e:
6f:82:58:dd:e7:98:1a:b0:67:02:e5:eb:44:95:8f:
9c:4e:95:ea:46:4d:99:db:e2:1c:df:4c:4e:fb:33:
bf:68:08:d2:ed:75:f7:10:d7:20:0b:2b:02:a7:7e:
00:b4:1b:02:44:f6:61:9e:f1:ed:df:56:2e:81:81:
5f:63:2a:63:38:85:c0:17:8c:65:1d:5e:8a:84:7d:
57:6e:54:31:7e:14:1b:39:e4:ff:ac:a0:35:3c:b4:
18:90:ca:77:91:4a:bf:a9:32:e6:f1:fd:6d:1f:10:
4e:3b:99:fe:27:62:b9:ff:a8:03:82:6b:90:ed:a4:
e5:84:78:b5:5c:a5:88:7a:d8:b7:0a:6b:a1:66:60:
ca:58:00:82:d5:99:f4:03:cf:e4:48:0a:df:07:7c:
53:af:72:4b:d8:1a:84:85:a0:55:cf:62:a8:1f:6a:
0e:51:68:96:fb:12:79:fb:05:31:7e:69:6f:b9:68:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:92:DC:E3:0F:7D:42:BE:39:AF:D6:E2:56:E6:2C:95:F5:BB:53:45
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rpLc4w99Qr45r9biVuYslfW7U0U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.244.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:e4:a1:66:64:6f:84:55:6b:bd:9c:ce:ef:ed:4d:af:71:f1:
fe:2b:7e:32:ab:aa:cf:8e:62:47:1b:f9:56:a7:f7:58:02:1a:
86:ed:ef:fe:c8:cd:a0:c0:11:80:9e:46:7b:53:ba:a0:d2:b8:
8c:da:2b:44:df:cc:2a:25:9f:f7:e5:10:91:40:11:7e:10:93:
ec:d0:2b:e4:64:d4:95:eb:66:99:4c:31:a3:b3:c7:2d:90:47:
b4:87:49:47:e7:64:59:40:50:0f:be:d1:a7:86:86:75:01:28:
f7:48:a0:47:6d:68:b5:1e:8d:0d:58:39:ae:e7:87:77:7c:34:
fd:cf:70:ad:b6:2d:82:45:cd:b8:77:85:2b:79:3a:51:96:d3:
29:0c:c7:26:ad:14:47:b7:78:4f:7c:04:ea:1f:ed:5a:f7:46:
1f:54:08:a4:1e:39:6d:5a:06:74:8d:1b:2c:e6:0b:ee:ea:6d:
8f:36:d5:a8:c6:81:57:c0:33:a3:1b:a0:a5:77:94:0b:0f:60:
66:e9:9a:4f:ce:f9:e6:83:bb:28:ad:a4:a4:46:93:e6:d9:a4:
fc:b2:bd:48:55:8e:c3:62:25:85:86:bc:d0:14:d3:84:1f:e3:
74:5f:63:77:af:52:05:74:c8:e5:be:06:8e:a9:a7:17:e9:78:
e5:90:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:06 2025 by rpki-client