Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/G6LBSx-QZb1yFmxsv8awKmd7pKw.roa
File: G6LBSx-QZb1yFmxsv8awKmd7pKw.roa (raw, json)
Hash identifier: kw/IqeKsZJchdRq76UxUKxAEtYOX6Cr6rTdei9tIaGI=
Subject key identifier: 1B:A2:C1:4B:1F:90:65:BD:72:16:6C:6C:BF:C6:B0:2A:67:7B:A4:AC
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 89
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/G6LBSx-QZb1yFmxsv8awKmd7pKw.roa
Signing time: Thu 31 Oct 2024 01:30:42 +0000
ROA not before: Thu 31 Oct 2024 01:30:42 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 2527
IP address blocks: 131.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Oct 31 01:30:42 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=1BA2C14B1F9065BD72166C6CBFC6B02A677BA4AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:f9:bf:1c:cf:6a:13:7c:83:8f:6a:41:43:
80:37:9e:17:5f:ce:cb:bd:e5:1a:99:ba:d8:54:06:
18:29:14:fe:1e:da:94:29:3a:34:43:6d:83:0a:d2:
39:7e:78:42:ee:fc:2e:34:ca:2f:cb:28:aa:eb:be:
c0:55:7f:f3:43:83:84:8f:f9:97:b5:30:ca:ab:8d:
ea:e6:83:14:0c:df:8e:a3:e3:08:38:11:77:c5:b8:
f1:25:f7:02:d3:73:e7:eb:26:89:95:d2:b4:3e:97:
bd:6f:8f:87:53:57:9c:32:c5:b5:02:0b:f0:d3:e3:
92:e5:fa:95:fd:9b:10:bc:54:be:19:54:c6:e4:79:
09:2a:7c:2d:70:ff:0f:b5:a7:92:c1:40:62:9f:d6:
19:a1:17:58:73:f6:78:e6:5d:f1:4f:18:63:a9:95:
44:74:99:87:d8:87:c6:3a:b0:dc:08:9f:f8:45:83:
0e:0f:52:bc:d9:cf:9d:6c:31:f1:cf:27:4f:92:54:
13:76:4f:8b:aa:bc:7b:64:58:2c:93:45:20:96:2c:
6e:dd:f5:ed:04:ba:8c:49:3f:b0:b1:84:36:b1:7f:
86:a6:38:df:c1:b7:15:c4:12:d2:55:9f:f9:1b:1d:
c8:bb:99:98:f9:98:0c:fe:62:1c:d0:e3:67:39:91:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A2:C1:4B:1F:90:65:BD:72:16:6C:6C:BF:C6:B0:2A:67:7B:A4:AC
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/G6LBSx-QZb1yFmxsv8awKmd7pKw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cd:fc:ea:47:a0:e5:17:1a:5a:94:cb:a8:70:ed:21:2a:66:7f:
17:63:07:8d:e6:5b:4e:54:7b:49:39:ac:b9:92:7a:05:04:48:
76:90:d5:3e:69:e5:a0:c3:4a:04:2d:27:b8:44:8c:e6:f2:b7:
61:8d:be:1a:dd:44:b2:54:0c:e1:50:5c:cd:f1:5e:5e:40:75:
af:e7:90:d8:a0:dc:ab:a8:e3:9d:31:6b:52:4c:89:14:c0:13:
f7:02:7f:53:18:d4:2a:93:0f:f8:6f:49:b2:02:59:d8:d5:06:
ce:9a:2b:fd:34:2f:59:b3:3f:e1:42:78:8c:02:22:e1:c0:cf:
b0:d5:a6:63:47:37:76:d8:b3:77:b6:16:f4:d6:5d:f8:bf:6a:
fd:14:68:3f:92:9b:05:dc:db:84:5e:69:4b:18:b5:91:f9:69:
90:53:12:25:01:f4:7e:3a:bc:b2:aa:48:d4:10:d5:52:1d:29:
57:29:c5:cb:92:e9:e3:e4:57:a8:4e:50:9f:c7:1c:a1:9d:01:
4b:4c:ed:b0:c9:a0:15:42:8f:dc:c8:56:c5:99:f6:4f:a2:3e:
dc:e4:dc:48:24:fc:51:f8:47:3c:62:7d:ed:c3:ac:37:ab:1b:
40:e9:8a:cc:b5:f3:1f:cc:d6:ed:99:24:da:f1:e5:f0:b2:e3:
9f:ff:a9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:02:25 2025 by rpki-client