Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1175/QY2z08QoWHcbX6UJwUVZlm4BiqQ.roa
File: QY2z08QoWHcbX6UJwUVZlm4BiqQ.roa (raw, json)
Hash identifier: /lwLOJlJ93pJL027CjqRk1LqIQ3pqxxdYL5j5TTKWqo=
Subject key identifier: 41:8D:B3:D3:C4:28:58:77:1B:5F:A5:09:C1:45:59:96:6E:01:8A:A4
Certificate issuer: /CN=8A57051C84A2BF078749E7BB34BE19678E131119
Certificate serial: 4A
Authority key identifier: 8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/QY2z08QoWHcbX6UJwUVZlm4BiqQ.roa
Signing time: Fri 31 Jan 2025 01:34:54 +0000
ROA not before: Fri 31 Jan 2025 01:34:54 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 14418
IP address blocks: 150.35.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A57051C84A2BF078749E7BB34BE19678E131119
Validity
Not Before: Jan 31 01:34:54 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=418DB3D3C42858771B5FA509C14559966E018AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:33:23:e6:27:9a:b8:de:a1:32:7b:f2:25:
a6:ba:17:58:86:4d:8e:93:8e:9c:d9:fe:1a:d7:fe:
32:a6:a6:9a:dd:ad:10:45:a2:4a:7e:1a:e8:27:a4:
0b:27:e8:4d:bc:aa:b4:2c:d7:ec:a4:e7:f6:7c:68:
f7:3e:8e:fd:c3:87:5b:57:03:20:61:74:6d:ea:6b:
a9:be:e1:6d:b6:61:7e:a5:5b:d4:74:e4:44:0d:fd:
02:df:90:4f:22:42:4f:c3:6e:e0:63:2a:76:a0:0d:
c9:5a:4f:96:d6:96:45:f9:77:0b:d5:8d:cb:32:af:
a6:45:89:e3:59:1b:7b:27:44:5e:21:d2:bf:29:14:
9d:b4:c7:96:cc:b2:88:d2:2a:c3:33:36:55:31:66:
da:59:48:b4:2f:e9:80:be:cd:29:55:8a:be:c1:7a:
e5:21:fa:dd:95:9a:33:f5:46:02:13:fa:db:49:e9:
92:45:3f:b5:7b:d2:fb:73:02:64:7f:35:67:9b:7e:
b8:e0:0b:74:46:26:ec:71:cf:78:78:08:71:18:1a:
14:4d:ce:b7:3d:d9:de:85:47:f9:ff:63:a8:c3:64:
9f:5d:4f:a6:c8:ac:5a:ea:31:da:b6:37:9e:c3:17:
55:03:92:d2:d3:84:46:63:8b:b0:90:f0:2e:ed:1a:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:B3:D3:C4:28:58:77:1B:5F:A5:09:C1:45:59:96:6E:01:8A:A4
X509v3 Authority Key Identifier:
keyid:8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/QY2z08QoWHcbX6UJwUVZlm4BiqQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.35.240.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6e:ad:e3:26:2a:72:af:2e:8f:67:16:8f:72:35:19:99:b6:
96:63:fb:28:1c:93:ec:aa:60:df:5e:cd:a4:74:8d:3d:37:e8:
4b:75:ab:ca:86:c3:02:1b:98:94:77:10:8f:b2:29:d9:73:81:
a0:48:0c:07:77:be:e2:9c:0a:86:04:05:30:ea:42:40:1e:51:
67:35:39:a9:9d:aa:27:1a:f7:85:5c:9b:4e:71:d4:e6:7c:b0:
bf:af:c3:a5:de:bb:4c:f8:f2:19:4d:80:0b:e9:48:58:0d:6b:
f7:12:34:49:05:de:e1:37:fa:42:5f:77:6d:59:68:cf:79:b0:
50:01:ac:58:e3:27:e5:4b:50:df:2a:05:29:5c:83:25:c3:14:
c0:3c:c3:d8:e5:e4:a0:f1:ff:17:5e:15:21:d9:ee:9f:7e:2a:
a4:9f:27:67:f2:5f:36:e2:6a:ab:ab:3c:9e:c3:23:c3:e3:45:
62:17:0a:2a:e6:5e:57:1f:03:c9:9f:20:bd:cf:9d:b9:fc:df:
38:b9:30:09:95:5f:ab:24:77:f2:58:22:0e:bb:bd:74:0b:5c:
c6:23:1b:b7:81:15:46:40:a8:1f:4b:5d:56:40:2e:3f:85:87:
62:c1:d4:8b:ad:f4:f5:06:54:a9:1e:8f:75:71:78:6c:81:d9:
3a:8f:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:33:21 2025 by rpki-client