Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/txN8Z9LLbsfkfo9QdHFhnaT_xZU.roa
File: txN8Z9LLbsfkfo9QdHFhnaT_xZU.roa (raw, json)
Hash identifier: 3fjbAFpZQlFnOdGABsTkbh6ZgpEfcBsQ/ZVk313CMwQ=
Subject key identifier: B7:13:7C:67:D2:CB:6E:C7:E4:7E:8F:50:74:71:61:9D:A4:FF:C5:95
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0571
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/txN8Z9LLbsfkfo9QdHFhnaT_xZU.roa
Signing time: Fri 31 Jan 2025 01:39:45 +0000
ROA not before: Fri 31 Jan 2025 01:39:45 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 219.96.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:39:45 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=B7137C67D2CB6EC7E47E8F507471619DA4FFC595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:fc:ab:11:8b:d6:21:12:57:47:07:61:47:
7d:2b:08:3e:69:2c:ec:9d:94:75:a3:de:dc:04:14:
49:28:56:4c:1e:5a:5c:4a:32:67:c4:33:cd:63:68:
ea:b6:6e:38:fc:e0:91:f6:1f:53:54:78:0e:d9:cd:
8a:d5:dd:8e:56:a9:0a:f0:0c:30:9b:a1:22:ae:57:
9e:92:13:a3:8b:d1:c3:69:9c:02:a6:89:d9:df:cd:
33:ce:1e:62:c7:77:a1:9b:6b:73:dc:c2:78:c2:1e:
6a:3d:70:1d:21:40:b5:e3:8f:a8:26:2e:a6:1e:0d:
94:d9:fb:62:80:9c:e3:fa:72:5b:07:3b:2a:03:02:
2d:b7:81:d7:d6:99:fd:1d:3e:75:1f:53:b8:90:e5:
cd:45:de:e2:af:4c:ad:7d:88:b6:38:c4:ab:99:bf:
0a:da:22:93:c4:5c:12:f9:e3:79:60:11:28:07:b6:
e0:fe:2f:1e:02:34:26:6e:54:30:93:a4:49:e3:b8:
ee:e4:3e:c0:d8:46:55:02:83:2b:28:b4:84:b3:a6:
da:4a:e1:6b:83:a8:10:40:3c:36:1c:64:80:d1:49:
8b:6e:6f:b1:0d:c9:4e:aa:2f:91:50:4f:e3:b1:a5:
5c:a2:2e:2d:ab:02:f8:8a:72:8f:3b:c4:32:df:a4:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:13:7C:67:D2:CB:6E:C7:E4:7E:8F:50:74:71:61:9D:A4:FF:C5:95
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/txN8Z9LLbsfkfo9QdHFhnaT_xZU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.96.0.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:36:fa:6d:29:dc:28:45:72:4f:41:11:ab:6a:33:4f:3d:c5:
f8:3a:22:eb:26:2e:c1:61:3b:65:8b:60:ee:3a:44:6d:a8:e8:
54:4b:8a:0d:f1:7b:55:2f:6d:35:78:1c:18:77:44:c7:90:e0:
6d:3d:8e:1e:02:f6:5d:99:e5:b4:e2:10:7e:17:eb:f1:21:f8:
a5:16:26:98:d6:52:9e:fd:f3:d2:c5:4f:9d:da:b6:bd:81:6a:
2a:ca:47:d0:48:46:85:0e:a5:b3:15:dd:93:16:a7:83:40:0e:
27:80:7a:fe:ef:6d:13:47:b1:0f:10:12:92:41:cc:c6:3d:f7:
f1:6f:8f:a1:a2:57:93:39:d2:7b:b6:55:d6:85:85:0c:99:32:
2a:46:57:e0:a4:89:8e:07:a7:2e:9c:01:d1:73:b5:ea:bb:d4:
2c:e0:db:14:67:40:29:13:b1:fe:b7:f3:e3:ac:4d:0e:5a:88:
69:6a:7f:3c:8f:07:d4:c2:b8:f9:89:a7:90:b2:56:6e:64:12:
fb:01:cf:72:0e:61:af:4d:dc:ee:ff:93:a6:30:af:47:14:c2:
31:df:c5:56:f1:4e:8c:50:b8:da:d0:30:ba:04:ff:cb:c3:1b:
f7:d2:e8:8f:0d:ca:cf:fb:a9:12:0d:a2:0f:cf:44:de:b7:64:
35:14:6a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:32 2025 by rpki-client