Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5263/JJyHDuj6_YIoQ3K3i1Bg9xCdP3I.roa
File: JJyHDuj6_YIoQ3K3i1Bg9xCdP3I.roa (raw, json)
Hash identifier: 8AlIi0jbf84NphtPpxw4wDpzxw5XWx1l3rKs8tRfOG0=
Subject key identifier: 24:9C:87:0E:E8:FA:FD:82:28:43:72:B7:8B:50:60:F7:10:9D:3F:72
Certificate issuer: /CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
Certificate serial: 13
Authority key identifier: 3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/JJyHDuj6_YIoQ3K3i1Bg9xCdP3I.roa
Signing time: Sat 29 Mar 2025 06:52:55 +0000
ROA not before: Sat 29 Mar 2025 06:52:55 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 24229
IP address blocks: 218.100.15.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
Validity
Not Before: Mar 29 06:52:55 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=249C870EE8FAFD82284372B78B5060F7109D3F72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:c5:fe:a7:0c:27:62:a4:20:39:27:5e:52:
0d:d5:d8:80:92:45:8f:b4:d4:5b:7f:c3:11:7e:9a:
d1:c4:1d:07:02:59:7a:76:f9:db:62:e4:c6:3b:7b:
5a:8f:f6:89:94:10:c8:21:23:d4:9c:03:96:f5:ad:
c9:79:31:03:b0:25:eb:24:95:be:b3:af:b2:05:a7:
4b:d5:5e:f4:ed:dc:a1:e3:bf:32:98:05:1a:fb:bc:
c4:df:f0:c4:0d:bf:97:be:5b:35:7e:e9:13:5f:46:
51:1b:bb:8d:ac:3d:cd:1c:c8:6a:c3:40:5f:56:02:
30:d3:85:63:ea:fa:1c:21:90:a1:a9:ce:a9:3f:04:
6e:09:14:76:c8:e5:b4:9a:95:a2:a0:a8:dc:27:53:
5a:00:2c:0f:77:e7:79:e9:4d:74:f2:01:d2:65:65:
4a:14:7f:5a:c2:5b:4c:26:91:b7:a1:b8:9f:3c:68:
c9:b5:86:c9:98:76:07:a7:2f:33:dd:3b:2f:18:14:
11:3b:da:62:89:62:8e:06:0f:6d:f3:b0:ac:d1:d4:
44:3c:dc:79:d7:7a:7e:51:bd:2e:45:d3:da:88:9a:
33:09:77:90:2d:d9:4a:a9:cc:f9:2c:00:af:1f:7c:
06:53:e8:9d:5e:7b:b7:c1:db:2f:a6:e8:83:36:3e:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9C:87:0E:E8:FA:FD:82:28:43:72:B7:8B:50:60:F7:10:9D:3F:72
X509v3 Authority Key Identifier:
keyid:3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/JJyHDuj6_YIoQ3K3i1Bg9xCdP3I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.100.15.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bb:33:60:5f:13:bb:b6:1c:fb:fe:cd:4d:d2:be:59:d0:12:
c4:3f:d2:08:e0:22:e1:fb:52:41:e3:f0:ed:98:49:e0:9b:81:
b1:e9:9d:cb:c3:f6:3e:84:8a:c6:85:e5:9d:4b:12:c9:10:ea:
41:70:ba:d3:56:93:0c:8b:b9:24:8a:c2:35:a6:c3:35:7f:b3:
af:30:91:2e:7f:5b:dc:a2:9e:5f:59:63:96:66:15:23:ec:c5:
46:e9:bc:59:3b:f5:5d:ce:9e:f4:80:63:f9:3b:bd:3d:e5:c2:
7b:e2:f3:ba:bd:d9:a3:e1:37:8c:b7:fc:11:2a:ca:4c:10:4c:
08:98:cb:6c:1d:3c:f6:bd:4b:50:dd:6e:0b:bc:54:42:13:05:
40:32:a4:7c:c7:d0:cc:49:ae:21:64:bb:ef:cf:a8:f9:9f:7b:
bf:6a:8d:07:7c:c9:94:49:0e:ae:2e:b7:35:a2:87:05:e1:7d:
30:47:5d:39:f7:af:1c:72:ed:cc:c4:c9:86:19:44:4a:f4:b0:
88:e3:53:4e:87:46:19:a4:a3:4d:e6:31:14:f2:da:f5:b6:c3:
8f:01:a3:97:72:5e:65:71:05:4f:ee:d3:76:53:77:a0:56:b3:
9d:53:52:64:39:c4:aa:48:8a:a3:21:40:23:34:5c:36:6c:77:
62:d2:b7:51
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzhF
MENDOTdGNTgzNjQxRTZDMkVGMDc3RUJDMTY2OEM0RUU2OTk5MB4XDTI1MDMyOTA2
NTI1NVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMjQ5Qzg3MEVFOEZBRkQ4
MjI4NDM3MkI3OEI1MDYwRjcxMDlEM0Y3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKqPxf6nDCdipCA5J15SDdXYgJJFj7TUW3/DEX6a0cQdBwJZenb5
22Lkxjt7Wo/2iZQQyCEj1JwDlvWtyXkxA7Al6ySVvrOvsgWnS9Ve9O3coeO/MpgF
Gvu8xN/wxA2/l75bNX7pE19GURu7jaw9zRzIasNAX1YCMNOFY+r6HCGQoanOqT8E
bgkUdsjltJqVoqCo3CdTWgAsD3fneelNdPIB0mVlShR/WsJbTCaRt6G4nzxoybWG
yZh2B6cvM907LxgUETvaYolijgYPbfOwrNHURDzcedd6flG9LkXT2oiaMwl3kC3Z
SqnM+SwArx98BlPonV57t8HbL6bogzY+hFMCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBQknIcO6Pr9gihDcreLUGD3EJ0/cjAfBgNVHSMEGDAWgBQ8jgzJf1g2QebC7wd+
vBZoxO5pmTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI2My9QSTRNeVg5WU5rSG13dThIZnJ3V2FNVHVhWmsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9QSTRNeVg5WU5rSG13dThIZnJ3V2FN
VHVhWmsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTI2My9KSnlIRHVqNl9ZSW9RM0szaTFCZzl4Q2RQM0kucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQA2mQPMA0GCSqGSIb3DQEBCwUAA4IBAQCUuzNgXxO7thz7/s1N0r5Z0BLE
P9II4CLh+1JB4/DtmEngm4Gx6Z3Lw/Y+hIrGheWdSxLJEOpBcLrTVpMMi7kkisI1
psM1f7OvMJEuf1vcop5fWWOWZhUj7MVG6bxZO/Vdzp70gGP5O7095cJ74vO6vdmj
4TeMt/wRKspMEEwImMtsHTz2vUtQ3W4LvFRCEwVAMqR8x9DMSa4hZLvvz6j5n3u/
ao0HfMmUSQ6uLrc1oocF4X0wR105968ccu3MxMmGGURK9LCI41NOh0YZpKNN5jEU
8tr1tsOPAaOXcl5lcQVP7tN2U3egVrOdU1JkOcSqSIqjIUAjNFw2bHdi0rdR
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:40 2025 by rpki-client