Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/DlKmYh92Cv4CvjS-cSN6g_Tuv-Q.roa
File: DlKmYh92Cv4CvjS-cSN6g_Tuv-Q.roa (raw, json)
Hash identifier: qm5qd+TcLCW75nBwjRBapc9vwVycfHd87S19DOZ1m0c=
Subject key identifier: 0E:52:A6:62:1F:76:0A:FE:02:BE:34:BE:71:23:7A:83:F4:EE:BF:E4
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0524
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DlKmYh92Cv4CvjS-cSN6g_Tuv-Q.roa
Signing time: Wed 18 Dec 2024 02:42:23 +0000
ROA not before: Wed 18 Dec 2024 02:42:23 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.10.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:42:23 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=0E52A6621F760AFE02BE34BE71237A83F4EEBFE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:10:84:c0:7c:e2:17:52:ea:6e:1f:50:59:36:
1b:1e:3f:b5:8e:26:24:1b:65:9f:60:2b:33:5a:e4:
05:69:ff:da:61:d2:83:53:c5:d8:45:07:23:34:bf:
e6:1e:d5:d2:3f:71:4a:6c:52:ea:04:7f:66:f5:d4:
69:55:8a:98:ab:87:57:d2:26:4c:d1:80:39:dd:83:
0d:71:56:d5:5b:57:9e:80:62:23:5f:d0:9b:f5:c7:
c5:7e:4e:3b:fc:58:8a:93:c7:8a:98:f0:43:c1:26:
85:e0:8f:73:51:35:ac:7f:02:2e:0f:7c:40:14:48:
e4:83:c4:c6:4c:cc:cb:09:a1:88:a7:d2:1b:d9:e1:
dd:ad:10:8e:bd:99:31:6f:37:c1:69:c4:b4:fe:c7:
7f:35:0d:61:1e:77:e3:d4:20:e0:3d:84:24:bd:d9:
99:74:46:60:10:80:13:5b:0a:d2:9a:f5:a0:e1:dc:
52:04:5d:06:0a:48:6d:98:9d:72:14:16:d5:66:e7:
b3:3e:6d:e7:93:a8:25:50:d1:eb:16:e6:a9:65:e6:
a5:1e:6e:11:7a:9d:bc:f4:fe:fc:40:7f:7e:c9:4e:
b2:97:e9:af:6d:52:f5:2f:7a:4c:bc:26:b8:bc:49:
52:8d:cb:67:a0:f0:be:54:a5:d6:f6:5f:fc:fa:45:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:52:A6:62:1F:76:0A:FE:02:BE:34:BE:71:23:7A:83:F4:EE:BF:E4
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DlKmYh92Cv4CvjS-cSN6g_Tuv-Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.190.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6f:41:34:74:f6:83:40:e1:f1:74:fb:3d:5e:21:5c:19:6f:
b1:c7:5b:7b:63:7b:33:75:f5:fc:6a:97:26:ea:ac:04:37:31:
c8:c8:b9:5f:b4:b9:51:10:30:5a:d9:3c:c2:c4:8b:b1:82:41:
36:c8:53:8d:42:c7:52:55:ed:1b:b8:11:39:37:26:f0:ec:2e:
7a:da:63:c8:77:e1:78:74:00:91:10:96:54:ed:94:de:93:55:
1a:52:b4:ec:8e:17:52:4d:f9:30:dc:ec:ac:d2:8e:65:fd:b8:
20:0c:bb:9d:07:92:f3:c2:2c:a3:6b:a2:44:09:c3:68:99:73:
62:b3:e4:6c:2d:38:4b:25:7b:7f:37:a2:b4:4b:10:6e:66:a3:
ff:5b:c3:28:5d:9f:54:48:f2:0d:19:07:2a:a3:d1:ed:85:37:
b1:b6:92:1c:ca:23:b4:e2:2f:4f:25:80:45:26:b3:51:ba:61:
49:92:ac:e6:5d:95:99:2a:7e:61:e7:2c:d5:f2:0a:78:5a:8c:
0b:ce:83:b5:86:4a:51:e8:1f:50:23:88:28:7b:cc:f6:80:40:
ea:4c:28:37:94:2a:6f:7a:aa:1b:fd:54:09:f8:a5:fd:0d:c1:
01:d4:fd:f9:fc:a1:ab:3e:e9:16:cc:3a:e2:7a:3a:f5:42:2f:
c2:85:1c:7f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQyMjNaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBFNTJBNjYyMUY3NjBB
RkUwMkJFMzRCRTcxMjM3QTgzRjRFRUJGRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuEITAfOIXUupuH1BZNhseP7WOJiQbZZ9gKzNa5AVp/9ph0oNT
xdhFByM0v+Ye1dI/cUpsUuoEf2b11GlVipirh1fSJkzRgDndgw1xVtVbV56AYiNf
0Jv1x8V+Tjv8WIqTx4qY8EPBJoXgj3NRNax/Ai4PfEAUSOSDxMZMzMsJoYin0hvZ
4d2tEI69mTFvN8FpxLT+x381DWEed+PUIOA9hCS92Zl0RmAQgBNbCtKa9aDh3FIE
XQYKSG2YnXIUFtVm57M+beeTqCVQ0esW5qll5qUebhF6nbz0/vxAf37JTrKX6a9t
UvUveky8Jri8SVKNy2eg8L5Updb2X/z6RZTXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUDlKmYh92Cv4CvjS+cSN6g/Tuv+QwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0RsS21ZaDkyQ3Y0Q3ZqUy1jU042Z19UdXYtUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADTCr4wDQYJKoZIhvcNAQELBQADggEBADlvQTR09oNA4fF0+z1eIVwZb7HH
W3tjezN19fxqlybqrAQ3McjIuV+0uVEQMFrZPMLEi7GCQTbIU41Cx1JV7Ru4ETk3
JvDsLnraY8h34Xh0AJEQllTtlN6TVRpStOyOF1JN+TDc7KzSjmX9uCAMu50HkvPC
LKNrokQJw2iZc2Kz5GwtOEsle383orRLEG5mo/9bwyhdn1RI8g0ZByqj0e2FN7G2
khzKI7TiL08lgEUms1G6YUmSrOZdlZkqfmHnLNXyCnhajAvOg7WGSlHoH1AjiCh7
zPaAQOpMKDeUKm96qhv9VAn4pf0NwQHU/fn8oas+6RbMOuJ6OvVCL8KFHH8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:29 2025 by rpki-client