Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20216/2x63rnkcsFrODsY1Lj-l5eoal8A.roa
File: 2x63rnkcsFrODsY1Lj-l5eoal8A.roa (raw, json)
Hash identifier: hwbtAe8Bl562Pf3FjxFlgmdOVtPmfaR2XgYpxk/ozVY=
Subject key identifier: DB:1E:B7:AE:79:1C:B0:5A:CE:0E:C6:35:2E:3F:A5:E5:EA:1A:97:C0
Certificate issuer: /CN=893257BC156B52DA8B94A21420D8D35DAE6FF4AD
Certificate serial: 14
Authority key identifier: 89:32:57:BC:15:6B:52:DA:8B:94:A2:14:20:D8:D3:5D:AE:6F:F4:AD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/2x63rnkcsFrODsY1Lj-l5eoal8A.roa
Signing time: Tue 07 Jan 2025 08:38:16 +0000
ROA not before: Tue 07 Jan 2025 08:38:16 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 150366
IP address blocks: 103.134.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893257BC156B52DA8B94A21420D8D35DAE6FF4AD
Validity
Not Before: Jan 7 08:38:16 2025 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=DB1EB7AE791CB05ACE0EC6352E3FA5E5EA1A97C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ed:74:1e:a5:63:84:24:6c:da:07:fa:cf:09:
79:f3:89:27:ee:07:34:5c:c8:11:f3:56:f9:c3:ae:
7d:6a:78:2b:4e:8b:73:8d:18:8e:b6:6b:31:71:34:
15:df:b3:f8:6b:79:02:6e:c6:6f:d6:ea:8b:f0:7b:
a1:1b:d7:40:9b:28:3c:58:eb:e3:e9:ac:00:61:64:
3c:6c:ca:16:0c:8b:4d:29:49:9b:05:60:1e:f1:07:
61:ae:7a:1a:a3:60:35:cf:a0:01:a9:94:53:9e:b1:
88:62:7b:1f:c7:d6:ad:17:53:7f:d4:b6:8d:c7:42:
4c:53:89:01:cf:ef:95:75:1d:88:fa:8e:14:6f:5d:
6b:3c:b9:97:16:5c:d0:1e:7f:e0:5c:c2:4a:d9:7d:
97:93:b6:ea:1e:2d:da:5d:50:ff:29:c2:2c:e6:2b:
b9:ae:17:d4:6b:14:b8:84:6d:69:23:50:aa:61:74:
96:a2:5c:e8:f9:95:3d:1e:3d:50:fc:11:5c:c2:b9:
92:01:05:32:b6:a1:d8:d4:55:13:65:00:34:91:9c:
82:88:9b:36:0c:14:08:3d:bf:20:8e:66:29:44:17:
7e:9c:44:b4:7c:8c:1e:7c:ea:93:17:79:56:98:2c:
eb:fe:db:dd:14:b0:10:43:95:57:24:5c:4c:7f:15:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:B7:AE:79:1C:B0:5A:CE:0E:C6:35:2E:3F:A5:E5:EA:1A:97:C0
X509v3 Authority Key Identifier:
keyid:89:32:57:BC:15:6B:52:DA:8B:94:A2:14:20:D8:D3:5D:AE:6F:F4:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/2x63rnkcsFrODsY1Lj-l5eoal8A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.235.0/24
Signature Algorithm: sha256WithRSAEncryption
84:34:cf:95:72:b6:44:4d:fa:3d:06:7e:cd:ac:d1:3f:f0:67:
75:1e:6b:f4:cd:57:83:8f:4b:26:6e:26:66:67:fc:6d:d0:99:
68:93:cf:ba:c2:d9:46:ed:43:60:f3:81:26:80:19:cb:92:70:
94:e3:55:97:4f:e0:50:c4:a3:a2:f7:7a:8b:0b:2c:c8:ac:b4:
c0:b9:dd:c4:85:5d:55:03:4d:24:8e:ae:a5:60:5d:fe:c1:5e:
01:1e:74:ad:0a:2f:0c:cd:0d:a6:c1:4e:b6:80:1e:27:69:5e:
54:74:ac:b4:29:21:bf:b8:fc:32:c8:97:13:60:31:2e:0f:b4:
fc:7b:0b:b5:7e:18:bc:48:93:6d:33:71:7f:d6:c4:7b:8e:85:
4d:87:b0:59:5e:c0:df:4f:e2:c5:dc:95:03:6c:6b:2f:b5:f4:
a1:1a:64:47:b1:7b:08:8c:a5:af:eb:1c:b1:58:63:2f:a4:a5:
ce:70:38:91:4a:5f:6f:85:c8:e6:d4:35:0f:a8:03:b2:f4:c6:
9a:13:96:63:18:ee:e3:fb:1a:57:7c:54:8d:24:e7:71:70:0a:
56:ce:97:ed:c7:b3:0e:7c:ca:94:ab:e8:dd:c8:87:35:20:3c:
ec:bc:89:99:86:5a:23:53:f9:76:c2:8f:9f:12:3d:83:9e:8f:
da:5a:2e:f8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTMy
NTdCQzE1NkI1MkRBOEI5NEEyMTQyMEQ4RDM1REFFNkZGNEFEMB4XDTI1MDEwNzA4
MzgxNloXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoREIxRUI3QUU3OTFDQjA1
QUNFMEVDNjM1MkUzRkE1RTVFQTFBOTdDMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPftdB6lY4QkbNoH+s8JefOJJ+4HNFzIEfNW+cOufWp4K06Lc40Y
jrZrMXE0Fd+z+Gt5Am7Gb9bqi/B7oRvXQJsoPFjr4+msAGFkPGzKFgyLTSlJmwVg
HvEHYa56GqNgNc+gAamUU56xiGJ7H8fWrRdTf9S2jcdCTFOJAc/vlXUdiPqOFG9d
azy5lxZc0B5/4FzCStl9l5O26h4t2l1Q/ynCLOYrua4X1GsUuIRtaSNQqmF0lqJc
6PmVPR49UPwRXMK5kgEFMrah2NRVE2UANJGcgoibNgwUCD2/II5mKUQXfpxEtHyM
Hnzqkxd5Vpgs6/7b3RSwEEOVVyRcTH8VT/0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTbHreueRywWs4OxjUuP6Xl6hqXwDAfBgNVHSMEGDAWgBSJMle8FWtS2ouUohQg
2NNdrm/0rTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTYvaVRKWHZCVnJVdHFMbEtJVUlOalRYYTV2OUswLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVRKWHZCVnJVdHFMbEtJVUlOalRY
YTV2OUswLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjE2LzJ4NjNybmtjc0ZyT0RzWTFMai1sNWVvYWw4QS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnhuswDQYJKoZIhvcNAQELBQADggEBAIQ0z5VytkRN+j0Gfs2s0T/w
Z3Uea/TNV4OPSyZuJmZn/G3QmWiTz7rC2UbtQ2DzgSaAGcuScJTjVZdP4FDEo6L3
eosLLMistMC53cSFXVUDTSSOrqVgXf7BXgEedK0KLwzNDabBTraAHidpXlR0rLQp
Ib+4/DLIlxNgMS4PtPx7C7V+GLxIk20zcX/WxHuOhU2HsFlewN9P4sXclQNsay+1
9KEaZEexewiMpa/rHLFYYy+kpc5wOJFKX2+FyObUNQ+oA7L0xpoTlmMY7uP7Gld8
VI0k53FwClbOl+3Hsw58ypSr6N3IhzUgPOy8iZmGWiNT+XbCj58SPYOej9paLvg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:48 2025 by rpki-client