Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/kwQ0gV7k1vwspQDcKfgzle1ATd8.roa
File: kwQ0gV7k1vwspQDcKfgzle1ATd8.roa (raw, json)
Hash identifier: 3UF1QJoE4UdjW54mz4jIV8ropeICZjUaC+EeaHbtRrE=
Subject key identifier: 93:04:34:81:5E:E4:D6:FC:2C:A5:00:DC:29:F8:33:95:ED:40:4D:DF
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0573
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kwQ0gV7k1vwspQDcKfgzle1ATd8.roa
Signing time: Wed 18 Dec 2024 03:00:58 +0000
ROA not before: Wed 18 Dec 2024 03:00:58 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.10.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 03:00:58 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=930434815EE4D6FC2CA500DC29F83395ED404DDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:0e:6b:c9:7d:87:99:ad:d9:a5:45:15:b8:
9f:bb:15:56:3c:46:53:a9:4d:04:3b:43:d9:15:eb:
58:d1:53:7d:3a:bd:c8:a0:c2:ae:8f:d4:a8:33:5e:
7d:14:3c:7b:bc:88:8f:4c:52:fc:0a:52:9d:45:31:
22:a7:7f:00:17:43:40:37:2d:8a:ad:27:22:ce:b0:
81:5c:86:83:34:e7:7b:23:7d:6b:82:e2:a5:cd:1d:
67:56:2a:b0:ba:2c:e1:ac:46:e1:b1:39:5b:2b:49:
bd:4c:87:ec:48:35:94:c2:33:77:d3:c0:8e:71:44:
2f:f9:39:96:8c:5c:28:61:24:68:b1:96:2a:66:c2:
3a:9c:e8:c4:10:c3:f7:d6:1f:d0:78:df:74:8d:94:
c4:da:94:c1:a3:bb:e7:a1:9d:c4:5c:4c:84:a2:08:
ad:95:16:f3:68:72:04:db:e0:a2:06:29:5a:7f:59:
55:af:10:1a:0a:b0:94:07:f9:54:3a:e2:2e:db:78:
1f:1e:47:a9:83:76:22:ee:45:e0:39:f6:11:cb:b9:
5c:d0:7c:fb:01:8a:95:7a:9f:ce:cc:39:d8:62:72:
92:58:58:41:28:7f:ec:82:5a:9c:a1:1c:57:6d:72:
3a:b3:e7:49:82:8a:0c:4b:3f:60:dd:9b:9e:6d:89:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:04:34:81:5E:E4:D6:FC:2C:A5:00:DC:29:F8:33:95:ED:40:4D:DF
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kwQ0gV7k1vwspQDcKfgzle1ATd8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.128.0/17
Signature Algorithm: sha256WithRSAEncryption
74:c3:8d:69:17:c3:1b:a9:32:97:fe:c4:b9:63:44:63:6f:1e:
d3:be:7c:ca:23:32:86:75:02:06:b6:23:82:f7:34:25:d8:96:
dd:fd:01:ea:7e:ba:f6:1b:f0:e3:9c:76:2a:cb:e6:f8:19:16:
a2:90:be:50:78:03:04:45:9c:f5:9a:5c:4f:16:d6:a1:da:e4:
8c:d3:10:42:46:92:c4:5d:be:f5:08:b8:12:92:16:ae:c3:1e:
77:0c:0d:d9:8e:3e:4c:33:c4:87:8d:fe:ae:3a:55:5f:20:07:
88:38:43:09:82:33:1f:95:8d:b9:15:22:0f:61:51:73:51:04:
c7:3f:32:68:64:38:ed:c7:48:fe:db:56:f9:91:b6:1e:aa:45:
4a:78:b9:05:f4:6e:14:6e:2b:3c:54:d0:18:d8:5b:f0:f0:c6:
73:04:c3:87:30:81:f1:b1:70:27:7a:e2:0c:f7:51:6b:e4:17:
a4:2d:43:66:10:e8:57:85:b5:58:c9:43:eb:21:c8:39:c9:ed:
71:82:81:d0:ad:d3:6f:37:89:17:eb:91:9f:0a:f4:b1:e8:d0:
dc:bd:0e:c5:6e:b5:77:4e:be:04:d1:99:03:fe:0e:47:c8:a4:
81:51:1f:63:15:30:b9:e0:64:1d:67:11:c1:46:49:db:c0:6b:
5e:01:31:49
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MzAwNThaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkzMDQzNDgxNUVFNEQ2
RkMyQ0E1MDBEQzI5RjgzMzk1RUQ0MDREREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcdg5ryX2Hma3ZpUUVuJ+7FVY8RlOpTQQ7Q9kV61jRU306vcig
wq6P1KgzXn0UPHu8iI9MUvwKUp1FMSKnfwAXQ0A3LYqtJyLOsIFchoM053sjfWuC
4qXNHWdWKrC6LOGsRuGxOVsrSb1Mh+xINZTCM3fTwI5xRC/5OZaMXChhJGixlipm
wjqc6MQQw/fWH9B433SNlMTalMGju+ehncRcTISiCK2VFvNocgTb4KIGKVp/WVWv
EBoKsJQH+VQ64i7beB8eR6mDdiLuReA59hHLuVzQfPsBipV6n87MOdhicpJYWEEo
f+yCWpyhHFdtcjqz50mCigxLP2Ddm55tiahBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUkwQ0gV7k1vwspQDcKfgzle1ATd8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2t3UTBnVjdrMXZ3c3BRRGNLZmd6bGUxQVRkOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfTCoAwDQYJKoZIhvcNAQELBQADggEBAHTDjWkXwxupMpf+xLljRGNvHtO+
fMojMoZ1Aga2I4L3NCXYlt39Aep+uvYb8OOcdirL5vgZFqKQvlB4AwRFnPWaXE8W
1qHa5IzTEEJGksRdvvUIuBKSFq7DHncMDdmOPkwzxIeN/q46VV8gB4g4QwmCMx+V
jbkVIg9hUXNRBMc/MmhkOO3HSP7bVvmRth6qRUp4uQX0bhRuKzxU0BjYW/DwxnME
w4cwgfGxcCd64gz3UWvkF6QtQ2YQ6FeFtVjJQ+shyDnJ7XGCgdCt0283iRfrkZ8K
9LHo0Ny9DsVutXdOvgTRmQP+DkfIpIFRH2MVMLngZB1nEcFGSdvAa14BMUk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:05 2025 by rpki-client