Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/d22Bp2Y07w_Oqm9R9KPvS2AzDJ8.roa
File: d22Bp2Y07w_Oqm9R9KPvS2AzDJ8.roa (raw, json)
Hash identifier: VKZtHFt7KEvV/HEAI+gHFYu/2BxqwRwM3C8tcVIsxk4=
Subject key identifier: 77:6D:81:A7:66:34:EF:0F:CE:AA:6F:51:F4:A3:EF:4B:60:33:0C:9F
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04FD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/d22Bp2Y07w_Oqm9R9KPvS2AzDJ8.roa
Signing time: Wed 18 Dec 2024 02:40:08 +0000
ROA not before: Wed 18 Dec 2024 02:40:08 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.141.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1277 (0x4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:40:08 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=776D81A76634EF0FCEAA6F51F4A3EF4B60330C9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:20:bf:1d:51:ca:93:56:6b:ac:a8:7d:af:
9a:54:c5:3a:4f:fd:96:f4:43:84:15:c2:87:1c:d2:
7f:7f:32:bf:be:f9:9e:0f:63:cf:aa:0c:bf:3b:1e:
df:a5:16:a2:56:20:3d:cf:a4:d9:3e:9a:5c:04:e8:
8b:e1:02:4a:e2:39:54:87:31:53:51:34:54:2f:79:
93:1d:48:d7:34:3d:b9:f7:08:45:0e:92:ec:f9:0a:
fb:dd:4f:45:97:db:37:51:c7:f2:68:6f:5a:69:2e:
07:4c:04:48:df:0b:42:92:37:09:05:66:f6:c3:a7:
bd:c8:f4:34:68:3d:68:0c:3b:b9:89:f9:3e:da:01:
15:b5:c7:dd:a7:3b:81:03:f7:24:af:ca:3b:0d:76:
ad:22:a9:19:74:1e:84:35:c7:8e:d4:2b:56:de:c2:
21:e5:39:16:39:7e:85:de:0b:42:aa:be:a9:c8:ce:
43:71:ef:11:ed:9e:68:72:90:72:55:bd:41:55:c8:
1e:ec:41:16:aa:02:40:ce:cc:58:3a:d6:be:c0:87:
df:02:c8:8d:ea:f7:b1:24:7a:9b:94:c5:e5:cd:1d:
ef:ce:c0:70:39:b9:e1:0f:46:72:69:81:99:85:07:
64:90:9f:bc:82:24:65:04:38:4d:fb:7a:b5:61:8d:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6D:81:A7:66:34:EF:0F:CE:AA:6F:51:F4:A3:EF:4B:60:33:0C:9F
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/d22Bp2Y07w_Oqm9R9KPvS2AzDJ8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.141.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:fa:d6:e9:cb:e3:3f:c9:a6:50:33:78:39:79:33:6f:31:87:
92:f9:7d:9c:4a:34:f4:57:60:0c:6e:94:7b:53:14:b3:0e:97:
0a:1b:2f:48:14:32:58:b5:6f:07:6b:55:1a:fa:3a:b7:92:30:
17:3d:b6:e7:c4:d9:98:04:5c:3e:12:dd:8d:f9:75:e2:49:5c:
b5:66:a3:d4:b1:cd:0f:cc:bb:72:1c:91:a0:3e:5b:09:06:b1:
ef:22:ac:f2:aa:1d:74:d5:f1:71:4f:56:4b:f5:84:0b:9b:17:
dc:cc:9a:0f:c0:98:ad:30:54:5c:38:5c:64:56:db:eb:c6:dc:
a7:2f:55:97:ea:69:c1:55:9f:70:f5:79:f3:f6:de:79:27:da:
d2:2a:bf:fc:b1:74:22:33:e9:fa:b1:ee:58:fb:63:ad:16:94:
0a:ae:e5:18:1a:6d:07:a3:43:70:4b:88:b9:c3:c9:3d:c1:86:
aa:b0:7a:80:c5:59:aa:5a:19:83:3b:d9:82:85:93:46:2b:3d:
cf:0e:0b:0a:41:4f:4d:64:61:1a:64:1b:e7:de:72:1c:5f:08:
cf:6c:14:aa:84:5b:0a:73:1f:f4:4b:9c:71:0a:3a:1e:eb:95:
47:28:1c:0a:f8:4e:88:96:a6:1a:7d:48:1b:4f:3c:2c:a1:ca:
47:d9:07:45
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQwMDhaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc3NkQ4MUE3NjYzNEVG
MEZDRUFBNkY1MUY0QTNFRjRCNjAzMzBDOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0MyC/HVHKk1ZrrKh9r5pUxTpP/Zb0Q4QVwocc0n9/Mr+++Z4P
Y8+qDL87Ht+lFqJWID3PpNk+mlwE6IvhAkriOVSHMVNRNFQveZMdSNc0Pbn3CEUO
kuz5CvvdT0WX2zdRx/Job1ppLgdMBEjfC0KSNwkFZvbDp73I9DRoPWgMO7mJ+T7a
ARW1x92nO4ED9ySvyjsNdq0iqRl0HoQ1x47UK1bewiHlORY5foXeC0KqvqnIzkNx
7xHtnmhykHJVvUFVyB7sQRaqAkDOzFg61r7Ah98CyI3q97EkepuUxeXNHe/OwHA5
ueEPRnJpgZmFB2SQn7yCJGUEOE37erVhjZo5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUd22Bp2Y07w/Oqm9R9KPvS2AzDJ8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2QyMkJwMlkwN3dfT3FtOVI5S1B2UzJBekRKOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADSjegwDQYJKoZIhvcNAQELBQADggEBALX61unL4z/JplAzeDl5M28xh5L5
fZxKNPRXYAxulHtTFLMOlwobL0gUMli1bwdrVRr6OreSMBc9tufE2ZgEXD4S3Y35
deJJXLVmo9SxzQ/Mu3IckaA+WwkGse8irPKqHXTV8XFPVkv1hAubF9zMmg/AmK0w
VFw4XGRW2+vG3KcvVZfqacFVn3D1efP23nkn2tIqv/yxdCIz6fqx7lj7Y60WlAqu
5RgabQejQ3BLiLnDyT3BhqqweoDFWapaGYM72YKFk0YrPc8OCwpBT01kYRpkG+fe
chxfCM9sFKqEWwpzH/RLnHEKOh7rlUcoHAr4ToiWphp9SBtPPCyhykfZB0U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:12 2025 by rpki-client