Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/o-whKfTf67tEuy29uAIU1PEwzRk.roa
File: o-whKfTf67tEuy29uAIU1PEwzRk.roa (raw, json)
Hash identifier: BXN8KQ4Frh6LniaSQOptayy+OfCCrDd24Ta2l8GPns0=
Subject key identifier: A3:EC:21:29:F4:DF:EB:BB:44:BB:2D:BD:B8:02:14:D4:F1:30:CD:19
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: 4F
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/o-whKfTf67tEuy29uAIU1PEwzRk.roa
Signing time: Thu 31 Oct 2024 01:28:39 +0000
ROA not before: Thu 31 Oct 2024 01:28:39 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 2514
IP address blocks: 103.2.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Oct 31 01:28:39 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=A3EC2129F4DFEBBB44BB2DBDB80214D4F130CD19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:b0:66:8c:06:37:30:71:a4:c3:14:2f:d4:
2a:df:44:cc:15:91:4a:39:79:66:5e:32:a5:27:c4:
47:fd:a0:d5:be:6e:fb:60:67:b9:cb:b3:34:41:f9:
69:6d:9b:fc:ce:96:8a:af:fa:7a:c0:c9:50:7e:59:
8c:3d:54:56:5b:66:ad:ed:31:41:44:b3:d9:ed:23:
e8:c7:02:ca:c3:84:c5:ef:72:01:2a:0d:ac:5f:06:
83:8e:4f:f6:9a:5b:b6:a4:25:bb:cd:49:fb:b1:5d:
86:3a:53:01:22:50:73:d9:13:be:3a:9e:19:e9:39:
54:25:c1:7f:aa:95:ae:cc:fe:e3:c0:48:ec:8e:e3:
30:fa:ad:3f:2e:86:53:b1:ab:30:73:cf:94:2f:f0:
04:9e:2f:dc:e2:0a:ff:0c:c3:32:e2:af:e9:d2:a4:
05:79:86:6e:17:e0:8b:c5:6e:bb:86:b1:a1:c0:1c:
8c:13:6f:dc:c9:5e:6e:8d:9c:10:c5:bc:8e:29:d1:
ca:ee:c9:10:ec:a5:1d:94:f3:27:92:75:4d:11:fd:
ea:d2:c4:59:52:91:f8:79:0d:3c:4c:b8:da:7b:43:
42:94:9d:a7:8e:d7:bf:b7:5a:55:e6:1c:b5:de:10:
12:dd:fe:7b:77:44:8a:12:e1:dd:d6:08:b2:8e:ed:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EC:21:29:F4:DF:EB:BB:44:BB:2D:BD:B8:02:14:D4:F1:30:CD:19
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/o-whKfTf67tEuy29uAIU1PEwzRk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.100.0/22
Signature Algorithm: sha256WithRSAEncryption
06:29:1b:fd:89:c4:2a:3f:cc:9a:40:02:bf:24:19:3c:0e:67:
fd:d9:dd:39:f1:16:ec:77:09:9b:a5:76:b4:9e:1b:9c:5b:c4:
9b:9f:8a:ae:3b:4a:e2:89:4a:68:82:15:76:98:24:60:f6:bc:
48:b1:31:9f:4a:fe:73:33:65:8c:a3:81:15:c9:d6:d7:e4:5f:
78:27:a1:00:6c:7b:f8:2a:cc:0d:72:ce:1e:a1:4a:91:b2:c6:
0b:99:27:ec:4a:b2:dc:9f:9d:5a:3b:96:76:8c:01:7d:55:10:
5f:a1:94:fd:89:3c:02:fc:da:62:f8:d1:34:88:38:4f:18:2f:
40:8a:48:99:70:bc:c6:14:82:29:9f:d1:2f:0e:42:33:a8:98:
01:e1:2c:60:88:fa:e3:dd:a9:b8:fb:3d:c5:14:0e:bd:d4:52:
e5:24:2d:00:1b:3b:ac:0b:be:7f:5a:7f:6b:47:c0:f5:63:fa:
78:0d:99:f8:07:fb:ef:82:85:cb:dc:64:ba:d2:20:36:40:8b:
a2:c7:c9:01:4f:d8:2d:ba:81:fe:78:08:80:e7:e7:d7:ba:2c:
d7:d0:08:5f:ef:f4:df:65:be:1f:0a:85:71:a7:30:1d:7c:ed:
7c:a9:fb:27:77:f4:09:4b:d8:0a:41:d5:f7:cd:32:e5:8c:5e:
69:08:80:ce
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB
NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI0MTAzMTAx
MjgzOVoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQTNFQzIxMjlGNERGRUJC
QjQ0QkIyREJEQjgwMjE0RDRGMTMwQ0QxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJrDsGaMBjcwcaTDFC/UKt9EzBWRSjl5Zl4ypSfER/2g1b5u+2Bn
ucuzNEH5aW2b/M6Wiq/6esDJUH5ZjD1UVltmre0xQUSz2e0j6McCysOExe9yASoN
rF8Gg45P9ppbtqQlu81J+7FdhjpTASJQc9kTvjqeGek5VCXBf6qVrsz+48BI7I7j
MPqtPy6GU7GrMHPPlC/wBJ4v3OIK/wzDMuKv6dKkBXmGbhfgi8Vuu4axocAcjBNv
3Mlebo2cEMW8jinRyu7JEOylHZTzJ5J1TRH96tLEWVKR+HkNPEy42ntDQpSdp47X
v7daVeYctd4QEt3+e3dEihLh3dYIso7tcBECAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBSj7CEp9N/ru0S7Lb24AhTU8TDNGTAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ
EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz
RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L28td2hLZlRmNjd0RXV5Mjl1QUlVMVBFd3pSay5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnAmQwDQYJKoZIhvcNAQELBQADggEBAAYpG/2JxCo/zJpAAr8kGTwOZ/3Z3Tnx
Fux3CZuldrSeG5xbxJufiq47SuKJSmiCFXaYJGD2vEixMZ9K/nMzZYyjgRXJ1tfk
X3gnoQBse/gqzA1yzh6hSpGyxguZJ+xKstyfnVo7lnaMAX1VEF+hlP2JPAL82mL4
0TSIOE8YL0CKSJlwvMYUgimf0S8OQjOomAHhLGCI+uPdqbj7PcUUDr3UUuUkLQAb
O6wLvn9af2tHwPVj+ngNmfgH+++ChcvcZLrSIDZAi6LHyQFP2C26gf54CIDn59e6
LNfQCF/v9N9lvh8KhXGnMB187Xyp+yd39AlL2ApB1ffNMuWMXmkIgM4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:44:06 2025 by rpki-client