Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/BgJP1i3yHikhsaH2VTK9n9IOV70.roa
File: BgJP1i3yHikhsaH2VTK9n9IOV70.roa (raw, json)
Hash identifier: jtOTamzCjjHLqRUdUFdH5ub97dnumckbnk/w9Bj9/O0=
Subject key identifier: 06:02:4F:D6:2D:F2:1E:29:21:B1:A1:F6:55:32:BD:9F:D2:0E:57:BD
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 0152
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BgJP1i3yHikhsaH2VTK9n9IOV70.roa
Signing time: Thu 31 Oct 2024 01:30:49 +0000
ROA not before: Thu 31 Oct 2024 01:30:49 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 2527
IP address blocks: 210.156.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Oct 31 01:30:49 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=06024FD62DF21E2921B1A1F65532BD9FD20E57BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cd:fa:e3:dc:b7:26:0c:51:78:74:6f:99:5e:
ef:17:95:e0:f6:30:93:6b:c7:c4:c9:c8:45:77:74:
07:81:22:a9:73:05:af:4b:37:a4:2b:10:08:9b:d3:
83:e8:ca:ac:b8:7a:f8:05:95:60:31:bc:95:99:9d:
23:4e:c6:12:55:33:3b:36:07:cb:22:bd:21:42:b4:
21:9e:f1:79:2e:53:c9:c7:44:50:2f:0c:85:22:da:
8f:07:5c:dc:53:03:d8:a3:76:3f:05:b2:db:86:6a:
1c:ad:5e:9b:a5:2e:96:1e:78:84:ed:85:d1:75:24:
82:b9:e8:2f:90:c8:ae:d8:8a:bd:c3:2f:fd:4c:69:
55:94:d8:e2:a6:e7:36:0b:73:2a:49:f5:85:eb:63:
c0:50:52:a8:63:a9:dd:05:ee:ca:84:97:c0:39:89:
37:5f:a8:12:8a:63:7f:64:55:3e:91:72:01:c3:3a:
50:6c:02:b8:2b:de:08:94:56:f7:6d:b8:ea:17:7a:
ec:bf:06:49:d1:32:b6:fb:99:36:3b:6a:17:a6:9e:
bc:93:ca:a5:e6:ad:a2:16:43:fa:c5:cc:65:c1:55:
ed:6b:99:76:c7:00:28:ef:27:e2:77:20:5c:00:61:
34:9d:73:f6:89:66:49:13:48:cc:15:de:27:44:15:
fc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:02:4F:D6:2D:F2:1E:29:21:B1:A1:F6:55:32:BD:9F:D2:0E:57:BD
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BgJP1i3yHikhsaH2VTK9n9IOV70.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.156.160.0/20
Signature Algorithm: sha256WithRSAEncryption
05:39:91:96:76:c6:d4:49:71:83:90:fb:36:21:4d:5e:30:da:
c6:c7:43:2f:4c:e3:a2:ad:1b:45:6e:05:ca:03:ef:65:e6:3e:
1b:e1:00:9c:10:a7:d0:97:97:f2:e9:f6:63:e1:a8:76:3a:45:
91:72:9c:98:42:9f:8c:66:2e:ab:6e:ee:48:a1:cf:ff:44:09:
d6:d4:22:c5:50:2d:4c:4e:cc:66:1d:cf:af:44:e5:bd:b5:1b:
5c:71:ce:52:fe:70:9f:80:17:dd:22:fb:66:a5:1e:25:f2:1e:
ff:9a:e1:7f:51:9a:e6:48:ee:f5:e4:34:c1:74:c1:5e:8e:c4:
1b:d9:cf:16:d3:37:35:d9:99:11:0e:26:71:2c:bc:9c:e0:07:
be:58:92:92:28:7b:44:83:09:e6:d3:32:fa:08:74:97:80:8e:
b3:7e:70:61:8d:20:2d:38:ef:cd:54:97:27:40:6e:f5:1c:3c:
a8:25:8e:c2:c6:77:43:0a:09:3a:d2:e8:df:6c:b2:44:1b:25:
9d:9c:68:e9:3b:a4:3a:82:c4:8c:b9:cb:bd:77:43:dd:98:1e:
12:03:25:ec:fc:10:db:39:9e:37:23:7f:07:b9:6a:2b:6e:65:
05:4e:91:e9:41:1f:a4:d1:3d:a9:5f:71:bd:80:3b:55:46:64:
4c:ab:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:37:16 2025 by rpki-client