Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/d7vzU8SkMQ8pml7aEoIsvl9TmeQ.roa
File: d7vzU8SkMQ8pml7aEoIsvl9TmeQ.roa (raw, json)
Hash identifier: XTHHCXL3YRqBTGxAa0kUIhUBZs30PIAp6QQEWlPGVZE=
Subject key identifier: 77:BB:F3:53:C4:A4:31:0F:29:9A:5E:DA:12:82:2C:BE:5F:53:99:E4
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04CC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/d7vzU8SkMQ8pml7aEoIsvl9TmeQ.roa
Signing time: Wed 18 Dec 2024 02:36:57 +0000
ROA not before: Wed 18 Dec 2024 02:36:57 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.233.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:36:57 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=77BBF353C4A4310F299A5EDA12822CBE5F5399E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:95:82:4a:2d:e4:5c:7e:1d:3a:91:e5:54:
41:c9:25:f6:93:7a:b4:25:e3:bd:e0:0b:e9:5d:31:
83:66:91:d6:77:e3:a1:b6:0d:d1:35:0e:6b:58:63:
f3:ae:03:e9:a8:08:bb:df:66:8e:2d:3c:3e:61:7d:
a6:13:fa:f4:88:69:88:e4:ff:fa:80:98:56:4d:fa:
66:78:10:1b:84:27:c2:55:65:02:3d:89:3c:9f:d6:
0a:47:0d:97:9d:66:8d:b7:2f:a5:08:9f:c3:05:4e:
30:ba:08:91:5c:32:63:86:43:27:13:1f:09:1e:87:
32:9b:71:d0:b9:89:db:40:37:7c:a9:48:0d:fc:bd:
60:37:95:80:cf:50:ac:7f:80:89:2f:10:ad:3e:ad:
f6:e4:23:c2:5e:45:bf:06:3b:9b:d9:d6:c6:58:b5:
3d:d2:18:0f:cb:a1:f2:6d:3a:1d:f1:3e:99:a1:4f:
b9:c4:5f:e1:ab:63:8d:59:19:7b:c5:58:7f:75:e5:
23:0c:31:62:2d:58:dc:af:44:c3:b6:e1:ad:cd:65:
6e:61:db:5a:a4:18:35:0f:ed:2f:8f:63:2e:e4:90:
a0:26:34:d4:53:e0:55:13:00:85:ea:2e:bb:00:e5:
29:b6:d0:ab:d2:43:0e:fd:d1:70:52:41:6f:88:88:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BB:F3:53:C4:A4:31:0F:29:9A:5E:DA:12:82:2C:BE:5F:53:99:E4
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/d7vzU8SkMQ8pml7aEoIsvl9TmeQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.233.114.0/23
Signature Algorithm: sha256WithRSAEncryption
60:f6:67:72:23:e0:69:86:81:f0:22:b4:f5:9c:9f:54:04:0e:
99:d1:20:2f:4f:f0:89:52:7b:84:a5:38:58:f7:2e:4e:6e:1b:
80:db:0e:2b:9a:ed:50:fd:03:1e:c3:27:f8:df:e6:19:b5:07:
81:e7:99:38:f9:92:44:57:04:f0:04:29:f7:6a:cd:44:51:3e:
cd:6f:d7:20:ba:fd:86:8d:6b:a0:5f:3f:ea:55:61:9f:88:ef:
81:47:83:19:6c:a3:50:46:2d:94:71:bd:e1:43:83:19:2a:f1:
c1:37:a7:77:e2:2a:90:1a:c4:f1:a3:b9:73:99:1d:dc:be:4b:
e0:49:77:ce:d1:0e:86:5a:c2:cb:ce:8f:8a:ad:1f:3f:5a:d9:
f3:b4:c8:21:af:75:7c:5c:02:ba:4f:27:55:7b:7a:37:1d:c0:
2c:7b:bb:f2:cd:b0:1c:d4:ee:82:12:5d:32:27:b7:f2:87:98:
3d:fa:d5:8d:fa:4c:0c:04:24:ae:bb:b5:22:63:dc:6b:ad:de:
b0:82:a5:d1:58:81:3c:e5:02:7a:e5:07:bc:d8:17:84:5c:e3:
be:19:c5:15:cc:61:e9:71:39:e7:dd:c1:aa:f7:0b:28:37:aa:
45:51:14:2d:c2:62:21:61:0e:72:c8:7e:98:05:cd:36:8f:b3:
01:20:dd:db
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjM2NTdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc3QkJGMzUzQzRBNDMx
MEYyOTlBNUVEQTEyODIyQ0JFNUY1Mzk5RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVa5WCSi3kXH4dOpHlVEHJJfaTerQl473gC+ldMYNmkdZ346G2
DdE1DmtYY/OuA+moCLvfZo4tPD5hfaYT+vSIaYjk//qAmFZN+mZ4EBuEJ8JVZQI9
iTyf1gpHDZedZo23L6UIn8MFTjC6CJFcMmOGQycTHwkehzKbcdC5idtAN3ypSA38
vWA3lYDPUKx/gIkvEK0+rfbkI8JeRb8GO5vZ1sZYtT3SGA/LofJtOh3xPpmhT7nE
X+GrY41ZGXvFWH915SMMMWItWNyvRMO24a3NZW5h21qkGDUP7S+PYy7kkKAmNNRT
4FUTAIXqLrsA5Sm20KvSQw790XBSQW+IiBhZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUd7vzU8SkMQ8pml7aEoIsvl9TmeQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2Q3dnpVOFNrTVE4cG1sN2FFb0lzdmw5VG1lUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHS6XIwDQYJKoZIhvcNAQELBQADggEBAGD2Z3Ij4GmGgfAitPWcn1QEDpnR
IC9P8IlSe4SlOFj3Lk5uG4DbDiua7VD9Ax7DJ/jf5hm1B4HnmTj5kkRXBPAEKfdq
zURRPs1v1yC6/YaNa6BfP+pVYZ+I74FHgxlso1BGLZRxveFDgxkq8cE3p3fiKpAa
xPGjuXOZHdy+S+BJd87RDoZawsvOj4qtHz9a2fO0yCGvdXxcArpPJ1V7ejcdwCx7
u/LNsBzU7oISXTInt/KHmD361Y36TAwEJK67tSJj3Gut3rCCpdFYgTzlAnrlB7zY
F4Rc474ZxRXMYelxOefdwar3Cyg3qkVRFC3CYiFhDnLIfpgFzTaPswEg3ds=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:23 2025 by rpki-client