Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/GeMJvwa9B0Ip9JcYR91aT3ArfbE.roa
File: GeMJvwa9B0Ip9JcYR91aT3ArfbE.roa (raw, json)
Hash identifier: UDxjuRerL4daPYyGxzwTs9Q6iXr8tOw5rxRRjEWSNR0=
Subject key identifier: 19:E3:09:BF:06:BD:07:42:29:F4:97:18:47:DD:5A:4F:70:2B:7D:B1
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0457
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GeMJvwa9B0Ip9JcYR91aT3ArfbE.roa
Signing time: Wed 18 Dec 2024 02:24:09 +0000
ROA not before: Wed 18 Dec 2024 02:24:09 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 106.171.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1111 (0x457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:24:09 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=19E309BF06BD074229F4971847DD5A4F702B7DB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:35:24:8b:11:47:e5:53:0a:21:56:4d:26:
33:11:25:c6:1f:23:48:89:43:8d:ae:17:88:03:f9:
65:59:d7:f3:e3:6c:7e:ff:91:d2:ae:66:25:3e:a0:
9c:34:d7:b8:5d:b7:46:ec:0b:ac:1e:e4:70:f9:f8:
82:a3:b0:ea:b2:9b:46:1d:78:96:7c:af:fb:0e:0c:
3c:31:5f:e1:7d:0c:d5:2a:6f:81:c8:2d:c5:f4:a3:
71:21:a5:c6:12:94:ec:5b:53:92:cf:5a:f4:f8:f4:
ba:a3:3a:85:14:79:f8:e5:9d:3d:02:85:70:8c:d1:
bd:72:31:4b:9c:88:bd:e5:fd:e4:9a:b0:7d:0a:e2:
54:0c:14:51:c4:4c:59:d6:d1:ab:59:76:f4:04:60:
92:89:47:67:7f:b3:77:c2:c5:e9:9a:df:ac:e4:d1:
90:21:60:1c:dc:5d:97:bc:5d:f1:f1:35:b9:68:ab:
aa:85:9e:c4:2b:d2:c7:11:2f:f9:3a:c3:48:8c:d1:
98:eb:e8:e2:a0:b5:47:c1:e1:af:32:4e:9d:f2:5a:
1d:8f:f0:a1:47:84:32:2a:d4:cc:89:f6:d0:a9:b1:
a9:1c:24:cf:06:2c:08:47:3e:7c:06:9e:50:cf:d3:
b0:ea:dc:d4:8f:55:90:60:49:b8:11:2e:ed:29:2f:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E3:09:BF:06:BD:07:42:29:F4:97:18:47:DD:5A:4F:70:2B:7D:B1
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GeMJvwa9B0Ip9JcYR91aT3ArfbE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
106.171.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:27:a7:be:91:ad:6c:18:2c:e0:d6:bf:76:4a:72:a7:10:83:
74:b7:9b:76:25:9b:09:d5:97:07:24:d8:45:e3:51:fe:82:56:
61:64:6c:ec:cb:f7:16:e2:f7:95:56:9b:ef:c5:17:0c:8f:5e:
50:34:05:ca:c3:4b:47:86:ba:13:62:d3:21:da:eb:fe:2a:76:
ba:56:89:35:72:66:ea:d6:03:32:9c:56:1a:98:37:83:5d:ed:
8e:13:29:c1:84:27:cd:f1:08:b0:81:ab:7a:48:5a:d8:d1:62:
fb:6e:96:a4:d2:7d:89:e9:26:09:1b:92:5d:1b:29:80:a8:41:
a9:81:e0:25:a1:80:51:d9:1a:bf:46:43:5c:84:3e:1f:ee:78:
36:ea:09:38:d6:05:2f:3d:09:10:32:3e:70:c6:7c:c4:d1:b2:
da:ea:31:0d:2c:27:3c:87:67:19:c3:e3:f2:76:0a:9d:09:d8:
4e:1b:70:20:66:da:c0:fa:e4:58:71:5d:2b:d9:38:bf:99:bd:
8e:85:03:d3:db:77:9a:1e:bb:39:5d:67:65:26:ab:ce:bc:d5:
60:59:00:f8:97:8e:3f:48:0b:2f:99:2d:ae:0a:d3:4a:c7:9c:
95:84:82:b8:7b:83:fe:80:65:c1:e5:42:f2:3a:64:ef:61:f4:
af:45:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:34:39 2025 by rpki-client