Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/x87AO5f5UyLQC79DqqOaiVX1Hsk.roa
File: x87AO5f5UyLQC79DqqOaiVX1Hsk.roa (raw, json)
Hash identifier: DO+qYiQhRzMQh0RDgVnW0t99JzOjcOMZZ+B/70yVMtQ=
Subject key identifier: C7:CE:C0:3B:97:F9:53:22:D0:0B:BF:43:AA:A3:9A:89:55:F5:1E:C9
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 045E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/x87AO5f5UyLQC79DqqOaiVX1Hsk.roa
Signing time: Wed 18 Dec 2024 02:24:12 +0000
ROA not before: Wed 18 Dec 2024 02:24:12 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 203.140.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118 (0x45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:24:12 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=C7CEC03B97F95322D00BBF43AAA39A8955F51EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:30:d8:40:3c:e8:81:c6:cc:07:7d:18:fc:
16:bc:4c:14:3a:13:d1:e1:d1:38:46:47:5b:3e:36:
7b:69:7d:db:96:0c:0a:dc:c9:2d:1d:a8:85:3b:46:
7b:7c:f6:31:79:fd:09:dc:6f:45:d8:d4:f4:ae:81:
a4:97:c2:69:5b:c5:d7:90:ec:66:20:b6:a0:b3:e6:
be:53:1b:3a:f5:02:2d:c1:69:d8:41:64:86:53:fa:
7d:39:c1:40:36:01:a9:80:1f:61:43:35:e0:29:ce:
32:d8:bb:17:0d:17:56:91:b1:5f:c0:ac:17:0b:47:
49:19:40:46:55:e6:d8:c6:27:60:40:8f:a4:fc:98:
f2:85:cb:a1:77:62:c2:19:ad:57:bb:a1:fe:17:2d:
de:ae:72:6e:ce:bf:9a:ae:23:6c:73:96:76:1a:8e:
aa:bd:31:ba:ac:40:3f:f6:68:6c:26:94:8b:d9:9f:
25:56:4f:99:71:26:dd:23:2f:c6:c1:a5:02:31:9f:
41:4a:a2:e9:2b:14:fd:d4:96:c2:b4:49:76:04:e5:
37:fc:75:af:72:b8:07:52:0e:2d:2d:5a:b7:d4:73:
0f:70:0c:58:9d:a7:ed:4a:89:c9:dc:37:4d:e1:2e:
8d:dd:4e:01:ea:3b:5b:fc:68:05:32:c7:e8:a6:5c:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CE:C0:3B:97:F9:53:22:D0:0B:BF:43:AA:A3:9A:89:55:F5:1E:C9
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/x87AO5f5UyLQC79DqqOaiVX1Hsk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.140.128.0/19
Signature Algorithm: sha256WithRSAEncryption
69:54:cc:46:de:c0:2d:a9:5d:9c:eb:9e:a0:fa:b2:dd:9e:54:
cb:73:dc:6c:86:ae:74:2b:4f:53:c9:72:5f:99:51:c9:62:d1:
7b:2d:43:61:bd:df:85:89:12:6d:f0:dc:47:4f:21:a0:b9:8f:
36:4b:8f:dd:be:c9:2f:b5:26:3f:70:d8:40:72:ba:6c:f2:50:
b0:b2:a5:72:ca:21:16:e5:ee:f3:89:b0:78:70:79:b2:88:15:
41:54:a1:56:a4:f6:67:83:7d:bc:5a:a4:7e:8d:18:70:e8:b5:
35:1a:68:c3:92:16:4d:db:5a:34:92:60:cb:f6:4b:52:1c:92:
65:63:7e:ca:98:30:97:bf:e7:a9:0d:5e:37:19:bc:f4:64:5c:
4d:db:8e:f1:34:3f:94:50:51:5a:15:93:5d:7c:5d:3d:59:ed:
2c:c7:82:b6:93:61:49:3d:d3:46:ac:1a:7a:55:7f:f2:47:af:
51:f6:56:10:98:12:4a:ab:17:45:e4:9f:30:ea:e6:4c:74:75:
5a:d0:68:54:bd:5c:c8:94:7d:19:c0:63:de:ff:91:eb:41:f7:
32:19:f4:a8:43:27:dc:1f:d8:2e:7e:35:fc:39:fe:e9:fd:e6:
fa:69:d5:d9:4c:e1:9a:28:fc:41:75:50:59:cd:c2:e0:53:06:
a5:7b:e8:57
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjI0MTJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM3Q0VDMDNCOTdGOTUz
MjJEMDBCQkY0M0FBQTM5QTg5NTVGNTFFQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0zjDYQDzogcbMB30Y/Ba8TBQ6E9Hh0ThGR1s+NntpfduWDArc
yS0dqIU7Rnt89jF5/Qncb0XY1PSugaSXwmlbxdeQ7GYgtqCz5r5TGzr1Ai3BadhB
ZIZT+n05wUA2AamAH2FDNeApzjLYuxcNF1aRsV/ArBcLR0kZQEZV5tjGJ2BAj6T8
mPKFy6F3YsIZrVe7of4XLd6ucm7Ov5quI2xzlnYajqq9MbqsQD/2aGwmlIvZnyVW
T5lxJt0jL8bBpQIxn0FKoukrFP3UlsK0SXYE5Tf8da9yuAdSDi0tWrfUcw9wDFid
p+1KicncN03hLo3dTgHqO1v8aAUyx+imXPgHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUx87AO5f5UyLQC79DqqOaiVX1HskwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3g4N0FPNWY1VXlMUUM3OURxcU9haVZYMUhzay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXLjIAwDQYJKoZIhvcNAQELBQADggEBAGlUzEbewC2pXZzrnqD6st2eVMtz
3GyGrnQrT1PJcl+ZUcli0XstQ2G934WJEm3w3EdPIaC5jzZLj92+yS+1Jj9w2EBy
umzyULCypXLKIRbl7vOJsHhwebKIFUFUoVak9meDfbxapH6NGHDotTUaaMOSFk3b
WjSSYMv2S1IckmVjfsqYMJe/56kNXjcZvPRkXE3bjvE0P5RQUVoVk118XT1Z7SzH
graTYUk900asGnpVf/JHr1H2VhCYEkqrF0XknzDq5kx0dVrQaFS9XMiUfRnAY97/
ketB9zIZ9KhDJ9wf2C5+Nfw5/un95vpp1dlM4Zoo/EF1UFnNwuBTBqV76Fc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:03 2025 by rpki-client