Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/xIwI53kiyboPMQMRvSzGHzNpJcU.roa
File: xIwI53kiyboPMQMRvSzGHzNpJcU.roa (raw, json)
Hash identifier: jaNwmM/eWFI8mdfKh1a0CvWfjNGmb/qnfOcnu+g+hMM=
Subject key identifier: C4:8C:08:E7:79:22:C9:BA:0F:31:03:11:BD:2C:C6:1F:33:69:25:C5
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 052C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/xIwI53kiyboPMQMRvSzGHzNpJcU.roa
Signing time: Fri 31 Jan 2025 01:30:17 +0000
ROA not before: Fri 31 Jan 2025 01:30:17 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 220.216.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:30:17 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=C48C08E77922C9BA0F310311BD2CC61F336925C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:3c:42:b1:b0:52:ce:03:16:78:3a:3d:a7:
04:3a:84:d7:27:b6:be:d3:1b:87:2d:2b:7f:09:ff:
e0:6f:e3:97:77:cf:5f:97:50:39:d9:89:62:4c:a2:
e4:fd:71:e0:20:a7:99:31:62:fb:17:52:8c:08:5f:
a8:db:9b:e2:22:93:a5:a1:e7:f1:02:29:6b:f8:b7:
51:9f:b0:e6:aa:c0:51:39:cc:c2:40:ac:1c:3d:99:
10:7b:d3:a8:fc:14:66:4f:96:b2:4e:63:8d:8d:68:
16:19:7a:78:87:21:f9:87:43:61:3b:76:6c:09:60:
f0:77:17:a3:11:30:1d:c0:e3:10:1d:b7:da:c0:51:
62:63:d5:0f:01:eb:69:1d:0a:f0:47:25:3c:75:0f:
94:80:24:46:9f:93:23:c5:79:42:53:4b:29:47:e8:
c5:86:da:5e:72:2b:f6:92:ec:01:52:32:73:f3:8e:
18:59:49:21:e1:1e:3c:e4:78:76:b4:54:bf:ae:4f:
ac:fe:ae:01:80:2e:37:3c:59:c1:49:b1:9b:b4:91:
27:2d:f3:40:82:df:a1:c9:c0:e4:fd:e3:93:64:09:
53:1a:54:5e:aa:10:cd:88:0a:21:0a:5a:06:37:87:
dc:54:a2:76:2a:35:da:7c:9c:6c:85:16:18:49:ae:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:08:E7:79:22:C9:BA:0F:31:03:11:BD:2C:C6:1F:33:69:25:C5
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/xIwI53kiyboPMQMRvSzGHzNpJcU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.216.96.0/22
Signature Algorithm: sha256WithRSAEncryption
80:b4:4a:f1:69:da:40:f9:8e:58:93:f7:12:4f:ba:b5:45:b1:
95:b0:e6:a8:2b:85:8a:5d:95:a5:67:ef:6d:7b:47:ae:3d:35:
9a:99:2b:cb:21:3f:89:95:e9:84:76:66:03:be:ea:24:bd:e3:
36:81:36:6e:61:bf:c9:6a:f2:86:36:84:af:78:93:42:49:9d:
cc:cf:5b:98:a8:b4:bd:eb:40:93:80:d5:20:c9:47:35:31:fb:
66:a3:52:42:cd:43:a6:da:fe:04:9f:b5:56:41:8c:ea:80:0b:
59:e0:87:df:b4:22:22:7c:c6:69:00:02:4b:49:13:05:ab:6c:
cd:25:9d:3c:32:f3:1a:02:55:36:96:a9:4a:7f:fa:91:90:82:
22:1f:04:76:d7:e3:3c:ba:5f:d5:2a:d4:55:78:2a:31:ff:cb:
ee:3e:e8:c2:a6:7c:54:68:1d:c7:1b:b0:aa:b5:86:87:44:3d:
18:84:1f:6c:95:ed:0a:d2:e2:5d:37:22:de:7d:92:d1:b8:f1:
a7:b2:05:80:8b:06:4a:4b:2d:5e:43:60:24:d6:86:04:ea:29:
f4:9b:5c:15:ea:ac:48:56:7e:54:8a:f0:2a:fe:6b:f8:27:01:
49:91:6a:2c:47:dd:e8:c1:53:31:41:f3:5b:74:64:10:11:8c:
99:59:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:28 2025 by rpki-client