Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/iID3qatTo4RCMNP4kQPlqiUs9U8.roa
File: iID3qatTo4RCMNP4kQPlqiUs9U8.roa (raw, json)
Hash identifier: MKZiqxJEJ9e/oZGk4afoe3vViXVoqR3AQEAceqoGw1Q=
Subject key identifier: 88:80:F7:A9:AB:53:A3:84:42:30:D3:F8:91:03:E5:AA:25:2C:F5:4F
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 26
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/iID3qatTo4RCMNP4kQPlqiUs9U8.roa
Signing time: Fri 02 Feb 2024 07:37:02 +0000
ROA not before: Fri 02 Feb 2024 07:37:02 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 9619
IP address blocks: 211.125.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Feb 2 07:37:02 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=8880F7A9AB53A3844230D3F89103E5AA252CF54F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:a8:6b:bc:d3:1f:15:0d:34:db:53:3d:28:
c4:d7:19:0f:14:ae:45:84:d7:6f:2d:9f:3c:87:d5:
97:01:22:94:12:f4:4a:d8:13:fe:21:44:95:82:73:
2a:e5:72:b2:d8:f1:73:0b:56:57:af:b2:c9:68:30:
81:a4:b8:d5:25:48:a9:43:2e:c7:9f:19:46:d8:cd:
c2:ca:3b:32:3a:e5:4e:ed:2d:ff:da:32:aa:f1:ed:
16:a0:14:e9:d6:80:6c:e2:7a:00:2e:f7:36:2b:e2:
8a:ff:4f:09:4c:2b:a0:7f:57:6f:bd:b4:d9:2d:a7:
59:f3:c0:1e:cb:92:bf:98:eb:4a:f2:fc:e2:db:c6:
0a:90:f9:5d:60:bc:13:02:f7:19:d1:52:12:3f:10:
ef:25:6e:55:ed:78:a5:45:a0:36:6f:30:b0:f0:fb:
34:52:b3:9f:16:00:0d:45:ce:6a:b7:ae:06:30:d4:
6e:c9:6d:48:59:f3:bd:24:29:e2:7f:f8:d2:ed:9d:
21:6a:65:94:bc:1b:21:9c:24:ec:55:69:e0:cb:c6:
5a:ef:4a:75:21:eb:1b:a3:41:9d:ef:1b:35:cf:f3:
68:3a:b3:06:8a:46:86:af:15:79:4a:75:b6:7a:63:
8e:14:7b:34:72:b1:95:26:b5:e4:f0:21:a1:59:4c:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:80:F7:A9:AB:53:A3:84:42:30:D3:F8:91:03:E5:AA:25:2C:F5:4F
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/iID3qatTo4RCMNP4kQPlqiUs9U8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.125.133.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:90:9f:e2:50:7f:c1:53:2a:9c:6a:c8:e2:e9:ad:4d:21:59:
72:70:a4:2e:c3:60:f9:cc:a6:55:6d:c5:34:8f:05:d0:78:2c:
e2:c7:3a:ad:d9:39:9f:c9:6f:a6:ac:8f:13:8d:12:e6:61:14:
a4:64:a7:00:06:4e:62:e2:fa:b2:d9:81:d2:88:e6:63:a7:ec:
4a:5f:1d:fb:13:cf:7b:2a:17:1e:a9:a7:05:dd:82:a2:c8:76:
39:e7:66:e4:1f:14:df:ba:bc:06:9c:13:5d:13:66:8b:3a:56:
80:95:fc:b8:7d:f5:2a:b3:40:3f:5a:32:2e:ec:cf:a2:5c:6b:
61:e8:23:dd:c1:3e:fa:a0:30:bf:54:c1:d4:fd:a7:6d:e5:9b:
62:4e:fa:76:f4:26:56:59:64:ed:2f:a1:12:52:1c:13:be:5a:
f8:f2:df:7c:d4:e9:5b:08:b1:4e:de:c7:da:df:ed:7e:8a:09:
e0:e5:15:52:87:17:e4:29:93:74:fc:60:c1:00:91:c4:4c:8e:
23:64:a0:23:2a:b8:2c:c3:21:e5:3d:df:de:63:63:b8:b7:f4:
f5:32:bd:18:2c:66:4e:77:ef:55:1f:b8:12:81:ae:21:26:41:
d0:6a:9f:12:87:c1:89:07:ad:2f:54:4d:0c:4e:21:e7:7c:f6:
0c:b5:5b:b2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz
QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI0MDIwMjA3
MzcwMloXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoODg4MEY3QTlBQjUzQTM4
NDQyMzBEM0Y4OTEwM0U1QUEyNTJDRjU0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANopqGu80x8VDTTbUz0oxNcZDxSuRYTXby2fPIfVlwEilBL0StgT
/iFElYJzKuVystjxcwtWV6+yyWgwgaS41SVIqUMux58ZRtjNwso7MjrlTu0t/9oy
qvHtFqAU6daAbOJ6AC73Niviiv9PCUwroH9Xb7202S2nWfPAHsuSv5jrSvL84tvG
CpD5XWC8EwL3GdFSEj8Q7yVuVe14pUWgNm8wsPD7NFKznxYADUXOareuBjDUbslt
SFnzvSQp4n/40u2dIWpllLwbIZwk7FVp4MvGWu9KdSHrG6NBne8bNc/zaDqzBopG
hq8VeUp1tnpjjhR7NHKxlSa15PAhoVlMQz0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSIgPepq1OjhEIw0/iRA+WqJSz1TzAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm
j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o
N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTUvaUlEM3FhdFRvNFJDTU5QNGtRUGxxaVVzOVU4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANN9hTANBgkqhkiG9w0BAQsFAAOCAQEAxpCf4lB/wVMqnGrI4umtTSFZcnCk
LsNg+cymVW3FNI8F0Hgs4sc6rdk5n8lvpqyPE40S5mEUpGSnAAZOYuL6stmB0ojm
Y6fsSl8d+xPPeyoXHqmnBd2Cosh2Oedm5B8U37q8BpwTXRNmizpWgJX8uH31KrNA
P1oyLuzPolxrYegj3cE++qAwv1TB1P2nbeWbYk76dvQmVllk7S+hElIcE75a+PLf
fNTpWwixTt7H2t/tfooJ4OUVUocX5CmTdPxgwQCRxEyOI2SgIyq4LMMh5T3f3mNj
uLf09TK9GCxmTnfvVR+4EoGuISZB0GqfEofBiQetL1RNDE4h53z2DLVbsg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:22 2025 by rpki-client