Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3Yr2RfC054DcvIwMg-iJ69zJ-dc.roa
File: 3Yr2RfC054DcvIwMg-iJ69zJ-dc.roa (raw, json)
Hash identifier: cOzqvb1sW8ZKgBT9U9rYRPToHZizf3p/XSAGDVW6xao=
Subject key identifier: DD:8A:F6:45:F0:B4:E7:80:DC:BC:8C:0C:83:E8:89:EB:DC:C9:F9:D7
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 016D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3Yr2RfC054DcvIwMg-iJ69zJ-dc.roa
Signing time: Sun 01 Oct 2023 01:35:52 +0000
ROA not before: Sun 01 Oct 2023 01:35:52 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 218.225.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:35:52 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=DD8AF645F0B4E780DCBC8C0C83E889EBDCC9F9D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:2b:a1:3c:a1:db:d2:68:3b:3f:0f:55:07:
9a:aa:d2:4f:9e:7f:00:a6:eb:5c:bd:b6:cb:2c:ae:
84:4c:cc:ca:7c:1d:a1:a5:34:99:81:20:55:79:0d:
aa:60:40:c5:11:1d:46:5a:c9:d0:19:6d:93:7a:2b:
4e:4b:33:56:dc:ef:87:4b:08:0f:e7:26:fc:77:65:
d8:a6:d3:83:0f:bd:53:f8:c7:f9:0b:11:6b:5d:e9:
c5:6d:df:83:fc:1b:ae:10:ee:04:61:15:20:3d:35:
67:9e:25:8a:e5:ce:74:2a:78:df:e8:7e:09:aa:28:
83:db:b9:38:29:3b:65:91:e0:0b:8d:05:f5:29:57:
ad:b7:0a:ac:c4:f4:97:15:e0:18:cf:8c:f7:dc:1e:
1d:22:01:04:2a:de:3f:df:df:9d:cd:48:a4:6e:1d:
94:d8:44:99:1f:96:be:06:97:02:9c:7e:08:29:16:
a3:73:5f:47:a1:b5:88:58:6d:32:83:46:da:69:50:
a1:1c:76:05:71:4e:9f:65:0e:38:3c:d8:b5:a1:94:
72:9d:ef:70:87:67:35:25:fc:31:71:78:5b:63:45:
db:57:20:64:dc:f0:f8:a5:ad:10:b3:76:bb:27:ef:
49:e4:38:2a:28:54:27:29:41:fc:57:ee:3c:a5:0e:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8A:F6:45:F0:B4:E7:80:DC:BC:8C:0C:83:E8:89:EB:DC:C9:F9:D7
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3Yr2RfC054DcvIwMg-iJ69zJ-dc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.225.0.0/17
Signature Algorithm: sha256WithRSAEncryption
96:eb:ea:f7:8d:14:36:b1:a3:a8:62:fe:d1:13:d3:68:3f:69:
83:51:19:7d:fd:7d:d1:93:dd:32:60:d2:aa:3f:23:fb:bf:bf:
a1:e5:d3:a9:ad:7a:0f:64:f1:8e:41:f1:a0:8c:ea:31:53:46:
1f:56:68:cd:3e:97:2d:e6:91:74:51:41:82:ff:0b:e7:30:2c:
f4:01:34:84:8b:26:73:de:ff:7e:c7:21:3e:f0:31:1f:cd:ae:
14:d4:3e:34:0a:c2:09:b3:8c:4f:b0:94:b6:e3:56:ab:89:e1:
3b:86:1a:ec:f3:6d:1b:97:86:3b:4b:db:44:8d:4a:94:d5:03:
af:56:5c:5e:16:d6:e7:65:46:81:e7:0f:2c:46:b8:a5:85:95:
8b:69:e3:71:70:c7:09:a1:ae:6e:6d:56:8d:46:67:25:e0:af:
49:11:22:eb:64:1f:ef:cc:cd:8a:03:83:2e:e9:22:9c:64:99:
fa:c4:86:ff:d3:ef:f7:f6:1f:3a:39:0a:6e:41:5d:6f:0d:29:
77:6f:d5:27:ea:ba:6a:35:ac:97:07:d7:2e:53:bb:63:c2:15:
b7:b1:2e:35:81:25:d3:a7:a5:d1:54:f3:a4:a2:1c:3a:29:90:
ae:10:28:8a:87:57:63:f8:ac:10:c0:5b:41:1a:11:8d:66:1f:
b7:82:03:ea
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTM1NTJaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEREOEFGNjQ1RjBCNEU3
ODBEQ0JDOEMwQzgzRTg4OUVCRENDOUY5RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrxCuhPKHb0mg7Pw9VB5qq0k+efwCm61y9tsssroRMzMp8HaGl
NJmBIFV5DapgQMURHUZaydAZbZN6K05LM1bc74dLCA/nJvx3Zdim04MPvVP4x/kL
EWtd6cVt34P8G64Q7gRhFSA9NWeeJYrlznQqeN/ofgmqKIPbuTgpO2WR4AuNBfUp
V623CqzE9JcV4BjPjPfcHh0iAQQq3j/f353NSKRuHZTYRJkflr4GlwKcfggpFqNz
X0ehtYhYbTKDRtppUKEcdgVxTp9lDjg82LWhlHKd73CHZzUl/DFxeFtjRdtXIGTc
8PilrRCzdrsn70nkOCooVCcpQfxX7jylDvRLAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU3Yr2RfC054DcvIwMg+iJ69zJ+dcwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny8zWXIyUmZDMDU0RGN2SXdNZy1pSjY5ekotZGMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQH2uEAMA0GCSqGSIb3DQEBCwUAA4IBAQCW6+r3jRQ2saOoYv7RE9No
P2mDURl9/X3Rk90yYNKqPyP7v7+h5dOprXoPZPGOQfGgjOoxU0YfVmjNPpct5pF0
UUGC/wvnMCz0ATSEiyZz3v9+xyE+8DEfza4U1D40CsIJs4xPsJS241arieE7hhrs
820bl4Y7S9tEjUqU1QOvVlxeFtbnZUaB5w8sRrilhZWLaeNxcMcJoa5ubVaNRmcl
4K9JESLrZB/vzM2KA4Mu6SKcZJn6xIb/0+/39h86OQpuQV1vDSl3b9Un6rpqNayX
B9cuU7tjwhW3sS41gSXTp6XRVPOkohw6KZCuECiKh1dj+KwQwFtBGhGNZh+3ggPq
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:06 2025 by rpki-client