Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bJpgKH5pW9r0unxva-JdkYyXjUM.roa
File: bJpgKH5pW9r0unxva-JdkYyXjUM.roa (raw, json)
Hash identifier: x8x5SZ9TRN+nqnmizt83lczMaC2w5yfek4hsPIxDdUI=
Subject key identifier: 6C:9A:60:28:7E:69:5B:DA:F4:BA:7C:6F:6B:E2:5D:91:8C:97:8D:43
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0516
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bJpgKH5pW9r0unxva-JdkYyXjUM.roa
Signing time: Wed 18 Dec 2024 02:42:17 +0000
ROA not before: Wed 18 Dec 2024 02:42:17 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.7.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1302 (0x516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:42:17 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=6C9A60287E695BDAF4BA7C6F6BE25D918C978D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:26:04:d4:85:3d:3f:8c:2f:3b:53:0d:56:
bd:81:0a:c6:e5:50:5a:a8:79:0d:68:42:17:d9:87:
60:3e:5e:49:ec:a7:a8:b5:4f:58:02:ba:14:31:90:
70:f7:7d:4c:70:d5:16:4f:50:d4:35:37:13:e9:60:
d8:49:07:76:56:54:c3:cf:7b:8d:33:33:e1:c6:18:
a1:c7:eb:ba:7c:18:db:34:80:b0:13:45:a1:32:f4:
2d:3c:b2:d5:aa:8e:77:47:ea:ca:71:4b:e7:6d:89:
9c:ad:f7:e5:41:c5:da:1a:80:f7:0b:de:fd:8a:2d:
32:ff:1e:ff:a8:2b:e8:e5:aa:b8:3e:be:9c:8f:55:
8e:1b:40:4b:bf:45:19:cb:3c:f2:62:ae:91:b9:45:
cf:0d:2b:7c:76:ee:2e:2d:54:d8:b0:5d:6a:04:25:
5d:0d:7b:30:0a:fc:3c:a9:e2:01:b9:b1:de:3f:d0:
98:ea:7b:9a:68:32:46:eb:72:73:75:f8:83:a7:dc:
e0:50:59:06:64:d6:84:40:cd:2b:db:2e:de:6d:50:
f0:4b:ae:f7:d6:6e:44:b1:de:f6:d3:d1:a8:88:98:
cd:23:ab:6f:27:28:cb:2d:e5:cb:09:60:ca:8c:9a:
71:f8:78:cb:fb:80:be:d7:ad:44:b6:c8:31:ea:2a:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:60:28:7E:69:5B:DA:F4:BA:7C:6F:6B:E2:5D:91:8C:97:8D:43
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bJpgKH5pW9r0unxva-JdkYyXjUM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.7.189.0/24
Signature Algorithm: sha256WithRSAEncryption
04:67:93:11:58:d8:cb:67:69:75:9f:b0:de:0e:7e:02:77:fc:
c6:0c:fc:14:fa:ac:9a:ed:e9:f5:f5:fb:81:52:f4:b7:bc:00:
d2:0e:38:b6:e9:49:66:9d:74:8d:8d:73:0b:ec:b4:f9:ea:2d:
a5:64:eb:b9:c2:ac:c3:1a:0c:a2:08:47:91:76:46:f7:5a:2e:
4a:d3:0d:67:ff:da:6d:4a:bb:85:3b:eb:54:ff:d4:f4:c8:44:
b8:1b:f3:1d:4b:8e:da:ae:e2:e7:ca:7d:ae:80:17:04:ae:66:
85:e2:5f:1b:1e:06:43:f1:f0:dc:5a:15:02:af:b1:16:0e:75:
fd:a3:0f:5b:ed:03:b5:16:be:23:03:91:8f:a5:2d:ad:06:67:
f1:c6:ba:0b:25:74:c7:0e:de:86:b6:46:28:11:27:aa:9c:be:
82:7e:a8:99:f3:6a:f3:5b:30:a0:d1:da:6e:01:13:ae:be:7f:
d9:cf:a5:8e:6e:3b:00:b9:3d:06:4d:e8:8b:a0:31:11:96:13:
51:c4:70:60:1c:57:9d:57:f0:55:a0:8f:a0:3b:bb:71:92:9a:
0d:12:1e:4d:36:a1:02:f4:a5:d5:d7:90:56:16:43:b6:aa:ea:
67:5d:ed:95:67:12:04:2b:39:73:0e:16:bd:4a:55:d9:70:63:
cf:76:56:be
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQyMTdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDOUE2MDI4N0U2OTVC
REFGNEJBN0M2RjZCRTI1RDkxOEM5NzhENDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGBiYE1IU9P4wvO1MNVr2BCsblUFqoeQ1oQhfZh2A+Xknsp6i1
T1gCuhQxkHD3fUxw1RZPUNQ1NxPpYNhJB3ZWVMPPe40zM+HGGKHH67p8GNs0gLAT
RaEy9C08stWqjndH6spxS+dtiZyt9+VBxdoagPcL3v2KLTL/Hv+oK+jlqrg+vpyP
VY4bQEu/RRnLPPJirpG5Rc8NK3x27i4tVNiwXWoEJV0NezAK/Dyp4gG5sd4/0Jjq
e5poMkbrcnN1+IOn3OBQWQZk1oRAzSvbLt5tUPBLrvfWbkSx3vbT0aiImM0jq28n
KMst5csJYMqMmnH4eMv7gL7XrUS2yDHqKnxzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUbJpgKH5pW9r0unxva+JdkYyXjUMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2JKcGdLSDVwVzlyMHVueHZhLUpka1l5WGpVTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADTB70wDQYJKoZIhvcNAQELBQADggEBAARnkxFY2MtnaXWfsN4OfgJ3/MYM
/BT6rJrt6fX1+4FS9Le8ANIOOLbpSWaddI2NcwvstPnqLaVk67nCrMMaDKIIR5F2
RvdaLkrTDWf/2m1Ku4U761T/1PTIRLgb8x1Ljtqu4ufKfa6AFwSuZoXiXxseBkPx
8NxaFQKvsRYOdf2jD1vtA7UWviMDkY+lLa0GZ/HGugsldMcO3oa2RigRJ6qcvoJ+
qJnzavNbMKDR2m4BE66+f9nPpY5uOwC5PQZN6IugMRGWE1HEcGAcV51X8FWgj6A7
u3GSmg0SHk02oQL0pdXXkFYWQ7aq6mdd7ZVnEgQrOXMOFr1KVdlwY892Vr4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:01 2025 by rpki-client