Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NrKyI2oP2XqtqCdZI2yxfQpw92Y.roa
File: NrKyI2oP2XqtqCdZI2yxfQpw92Y.roa (raw, json)
Hash identifier: BlNWV/kxBABVbDc5VtMtdhjGKbB73ciwxNqzLUINirY=
Subject key identifier: 36:B2:B2:23:6A:0F:D9:7A:AD:A8:27:59:23:6C:B1:7D:0A:70:F7:66
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 041A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NrKyI2oP2XqtqCdZI2yxfQpw92Y.roa
Signing time: Wed 18 Dec 2024 02:18:59 +0000
ROA not before: Wed 18 Dec 2024 02:18:59 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 222.3.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:59 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=36B2B2236A0FD97AADA82759236CB17D0A70F766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:10:3f:5e:71:61:64:8b:a5:ad:7f:36:be:
87:4a:c8:4b:56:fc:53:23:80:11:4a:36:d0:bc:a5:
f0:98:39:15:c9:24:c0:f5:0f:4e:b6:9b:84:68:a2:
5f:e3:d1:89:ef:ef:26:20:7f:95:1a:dc:23:ea:c2:
c3:32:f5:43:99:e5:58:38:5e:1a:9a:28:6e:bb:84:
02:33:ba:3e:d5:16:e3:4f:cb:6e:c9:db:28:03:a8:
c1:87:52:d9:74:d8:d6:75:f1:c8:4a:b4:93:75:10:
29:48:d7:b3:8d:4d:f3:32:0c:c8:62:2b:fe:1d:95:
68:19:5a:9f:0e:9e:33:99:f9:71:8c:d5:6d:85:58:
88:ea:eb:9a:91:cc:b4:fa:ae:79:04:20:49:20:b2:
6e:92:7b:67:69:34:cf:5d:bd:1a:ad:bf:99:04:7a:
1e:b3:03:3d:b0:62:fe:6f:91:b1:d6:f3:ca:4e:95:
be:7b:af:02:78:9b:95:dc:ac:46:ee:22:c9:c5:33:
8d:c1:b8:56:b3:36:d7:57:ec:34:4c:52:88:ab:90:
31:7e:5b:ee:2f:79:5f:6d:36:09:95:28:cf:51:33:
32:e2:f5:2f:db:5d:1d:5a:64:5a:da:31:8f:1b:32:
2c:c7:00:0d:be:67:2b:33:4f:6c:bb:f0:18:4c:2b:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B2:B2:23:6A:0F:D9:7A:AD:A8:27:59:23:6C:B1:7D:0A:70:F7:66
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NrKyI2oP2XqtqCdZI2yxfQpw92Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
222.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:c0:8d:79:61:f4:89:88:02:ce:24:a9:aa:4c:3d:bc:bb:86:
5c:87:7b:1b:53:69:ae:79:5d:8c:24:ca:56:9b:f9:30:54:75:
d3:fd:bc:70:5d:56:7f:11:be:de:cb:43:ae:f1:0c:54:00:ee:
b6:56:28:a9:67:ac:55:96:0a:38:f4:ce:a3:49:f0:b5:8a:d7:
cb:50:42:cb:0e:3c:3a:49:ae:20:23:75:79:24:72:5c:84:52:
a6:93:23:b9:06:59:c8:c0:b1:a3:7f:47:65:27:04:b4:c7:72:
0a:10:d5:32:33:79:b4:a6:6e:2a:21:52:a4:61:7a:6c:db:35:
57:d3:55:8c:c3:56:ce:1d:ee:a3:0f:12:f7:96:bb:da:24:cb:
37:ef:77:5e:cb:40:ad:6f:7e:4f:69:b4:76:70:88:97:92:a0:
85:cf:71:e3:6e:6b:c1:f3:9f:f5:7e:67:f1:d0:ce:c7:60:93:
4f:70:1a:8d:03:80:72:c8:bb:97:58:1b:86:35:c8:1c:a0:f7:
bd:f3:5a:91:81:24:be:b8:dd:09:cb:fb:a0:99:49:93:e1:6f:
12:43:4c:46:42:b1:06:46:39:69:f5:e9:9d:8e:33:15:9c:a8:
f9:87:07:92:ba:50:58:b9:d3:7b:89:75:34:9b:ac:61:c2:8a:
3e:1f:db:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:35:40 2025 by rpki-client