Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/IQ_rQM0aDpqCWuftnu1HKkpVLrQ.roa
File: IQ_rQM0aDpqCWuftnu1HKkpVLrQ.roa (raw, json)
Hash identifier: /tDtDJ4TlYFncSoKsGrpKXROLaxt/K6e2wBe2QZ8kFw=
Subject key identifier: 21:0F:EB:40:CD:1A:0E:9A:82:5A:E7:ED:9E:ED:47:2A:4A:55:2E:B4
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 033A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IQ_rQM0aDpqCWuftnu1HKkpVLrQ.roa
Signing time: Sun 31 Mar 2024 01:40:47 +0000
ROA not before: Sun 31 Mar 2024 01:40:47 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 202.239.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826 (0x33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:40:47 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=210FEB40CD1A0E9A825AE7ED9EED472A4A552EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:4c:10:42:46:f8:2a:5b:19:d5:4a:ea:e3:
9f:7c:ac:2d:b4:d7:df:ff:56:af:c5:38:fe:c2:ae:
90:52:da:8a:f9:a5:c8:ed:63:51:ea:4b:8d:f1:1c:
55:9e:57:5a:13:47:1b:55:37:ab:63:35:cf:54:b6:
7a:e9:79:8c:b7:2f:34:70:f1:56:8b:2a:55:ac:da:
17:d1:ee:b8:c3:b0:78:98:a4:2d:f6:a9:f8:c3:78:
bc:5b:b4:95:97:af:ab:d4:3d:8e:34:c0:b6:77:df:
35:07:37:99:b1:22:ea:48:8b:09:53:ba:7d:cf:cf:
b7:49:50:75:18:eb:fa:b2:00:65:df:7b:4b:48:cb:
df:be:2a:e6:8b:31:78:38:2c:2f:72:35:f5:c0:7f:
51:f5:be:23:31:ac:bb:c0:ad:6a:4e:96:99:f3:7a:
eb:72:e8:2d:3e:f5:23:68:66:5e:7c:68:c7:d4:49:
ce:e2:3c:2b:10:47:dc:e5:af:20:97:42:e4:17:d0:
ef:0a:8a:88:90:23:89:9c:af:49:75:33:c3:22:63:
36:b9:23:61:86:ae:c9:73:ea:3f:19:02:00:f9:99:
1c:1b:9c:f0:b1:a5:6b:b3:58:83:e5:17:4a:bd:96:
a6:41:ba:70:1b:d3:59:df:4d:d1:71:c3:5f:ac:07:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:EB:40:CD:1A:0E:9A:82:5A:E7:ED:9E:ED:47:2A:4A:55:2E:B4
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IQ_rQM0aDpqCWuftnu1HKkpVLrQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.239.128.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:a2:a1:b8:7a:f4:a4:e8:5d:04:6e:f6:ed:cd:6f:12:fb:6c:
17:42:21:2e:ea:2d:99:81:eb:d3:ca:69:82:bf:31:00:ad:65:
66:40:cf:bc:e8:07:98:43:a4:a0:7a:56:13:8a:72:61:64:4d:
61:26:ca:33:ca:db:4d:bf:33:d5:a5:1a:8a:bf:df:83:40:9d:
db:0e:7a:9b:6c:4f:b8:84:2e:fc:29:49:c7:fa:8b:8d:36:26:
63:ab:3d:7e:c4:c5:b3:98:3d:dc:74:85:d1:e3:0a:c1:72:9f:
f4:6c:9a:ee:ed:92:9e:1b:f4:e2:67:c1:7c:4e:0f:fd:0f:cd:
fb:75:f5:52:c9:ff:03:47:fa:44:5c:02:d1:09:a8:87:0d:32:
85:08:43:12:41:74:d4:fb:8a:25:b1:63:5a:e7:fd:28:82:b2:
0a:89:9f:92:c7:13:0f:fd:50:59:f4:28:13:48:f2:2f:3a:ec:
0e:3d:91:36:6b:f4:62:5b:c4:77:6f:ab:d4:79:b9:e8:60:87:
0c:a5:11:21:67:5b:21:5e:2f:68:fa:a5:2e:c4:fc:b2:27:4e:
a4:94:14:45:5a:a6:a5:8e:23:19:9d:ad:ce:06:98:cf:c4:73:
3d:ee:da:b7:92:d4:f4:75:95:1e:61:ff:16:48:24:cc:25:1c:
cc:d4:6a:82
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTQwNDdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIxMEZFQjQwQ0QxQTBF
OUE4MjVBRTdFRDlFRUQ0NzJBNEE1NTJFQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXZ0wQQkb4KlsZ1Urq4598rC2019//Vq/FOP7CrpBS2or5pcjt
Y1HqS43xHFWeV1oTRxtVN6tjNc9UtnrpeYy3LzRw8VaLKlWs2hfR7rjDsHiYpC32
qfjDeLxbtJWXr6vUPY40wLZ33zUHN5mxIupIiwlTun3Pz7dJUHUY6/qyAGXfe0tI
y9++KuaLMXg4LC9yNfXAf1H1viMxrLvArWpOlpnzeuty6C0+9SNoZl58aMfUSc7i
PCsQR9zlryCXQuQX0O8KioiQI4mcr0l1M8MiYza5I2GGrslz6j8ZAgD5mRwbnPCx
pWuzWIPlF0q9lqZBunAb01nfTdFxw1+sB9mlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIQ/rQM0aDpqCWuftnu1HKkpVLrQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0lRX3JRTTBhRHBxQ1d1ZnRudTFIS2twVkxyUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbK74AwDQYJKoZIhvcNAQELBQADggEBAKqiobh69KToXQRu9u3NbxL7bBdC
IS7qLZmB69PKaYK/MQCtZWZAz7zoB5hDpKB6VhOKcmFkTWEmyjPK202/M9WlGoq/
34NAndsOeptsT7iELvwpScf6i402JmOrPX7ExbOYPdx0hdHjCsFyn/Rsmu7tkp4b
9OJnwXxOD/0Pzft19VLJ/wNH+kRcAtEJqIcNMoUIQxJBdNT7iiWxY1rn/SiCsgqJ
n5LHEw/9UFn0KBNI8i867A49kTZr9GJbxHdvq9R5uehghwylESFnWyFeL2j6pS7E
/LInTqSUFEVapqWOIxmdrc4GmM/Ecz3u2reS1PR1lR5h/xZIJMwlHMzUaoI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:14 2025 by rpki-client