Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3I3cIiqCFhbDq6aklKJ1cusFh2Y.roa
File: 3I3cIiqCFhbDq6aklKJ1cusFh2Y.roa (raw, json)
Hash identifier: Np3hcyG9mvh1O8ebgEMbIfdTzRf0/hrq7sOs4MgFeG8=
Subject key identifier: DC:8D:DC:22:2A:82:16:16:C3:AB:A6:A4:94:A2:75:72:EB:05:87:66
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0538
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3I3cIiqCFhbDq6aklKJ1cusFh2Y.roa
Signing time: Fri 31 Jan 2025 01:30:23 +0000
ROA not before: Fri 31 Jan 2025 01:30:23 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 42.125.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:30:23 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=DC8DDC222A821616C3ABA6A494A27572EB058766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:a2:6d:41:e4:5e:ea:3a:70:75:39:ed:f9:
5b:1d:77:db:8f:f9:2e:68:03:50:0d:60:83:a8:f0:
6b:60:81:8f:4b:98:46:1f:4e:01:51:ae:9a:94:27:
d1:27:e2:eb:45:ba:b1:a7:98:3d:a6:df:00:c7:83:
25:dd:c4:5e:68:57:70:9e:c4:20:88:1d:6e:92:7d:
6e:b9:3e:96:27:1a:58:65:0b:c3:20:39:6e:d6:8e:
dc:a2:7e:62:d1:20:55:eb:3f:25:7a:92:d0:76:70:
45:40:4b:3d:2c:9f:6d:0a:80:bb:b0:9a:6e:82:c7:
f1:53:d1:3b:b3:d3:97:86:5b:b0:32:a8:85:6b:b7:
e8:73:db:e4:bc:20:b9:3f:73:d3:25:45:65:aa:ed:
a2:fe:d3:99:a7:50:34:74:2d:73:6c:17:a1:92:10:
52:d2:44:c9:9e:c1:cd:79:47:c1:9d:5b:ce:51:4b:
1a:e9:b1:13:f7:36:25:53:3c:0b:95:fe:0c:d9:32:
21:69:13:42:f4:56:76:9c:e1:5f:5f:45:06:e9:8c:
6b:b1:89:b8:8c:75:fe:82:cb:32:3d:aa:59:a1:38:
bb:f8:28:57:a0:af:26:cb:14:4c:d2:00:99:69:9e:
4d:1f:0c:bf:5b:e7:77:8e:7a:1f:91:8d:df:0a:b3:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8D:DC:22:2A:82:16:16:C3:AB:A6:A4:94:A2:75:72:EB:05:87:66
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3I3cIiqCFhbDq6aklKJ1cusFh2Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.226.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:d8:06:0e:59:53:c0:8d:76:96:6c:a5:31:21:90:2e:c3:2c:
af:30:50:17:ad:06:47:0e:41:6f:32:cf:7f:48:76:14:de:a9:
88:a6:19:40:f6:c4:2d:7a:db:ad:f5:46:4f:4c:48:21:1f:13:
13:47:4f:c6:ab:9f:94:03:6f:42:5d:6f:12:cc:87:21:6c:ad:
b3:bd:67:ce:db:1c:1c:34:00:8b:4d:96:3c:c5:88:21:c2:97:
6e:85:db:57:23:5b:5c:54:fd:9a:b0:87:99:be:e6:7d:13:64:
dd:32:fa:49:65:c0:41:04:aa:41:3c:5a:ec:9d:14:2c:4a:b9:
42:e7:5c:b6:9a:ff:0d:d5:44:dc:e7:2d:7c:93:d3:b3:f9:13:
b0:9b:74:06:43:07:20:45:bf:ca:4e:24:1c:30:7b:f1:7d:e8:
8f:ae:47:67:92:91:5a:15:33:fc:31:0d:c6:82:10:dc:d9:5d:
11:e8:78:1c:52:25:74:13:b4:ee:ed:67:f3:6e:61:97:d1:08:
d2:d2:e8:c9:93:67:33:e7:aa:01:c6:0e:4e:e7:25:34:f8:55:
4a:28:dc:43:80:df:3e:6c:4c:f5:16:d3:c2:a0:28:89:31:64:
b3:3e:cf:e8:a6:16:30:2b:0b:b5:7a:1d:73:8e:6a:fe:c4:b7:
3c:b9:47:9f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw
MTMwMjNaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERDOEREQzIyMkE4MjE2
MTZDM0FCQTZBNDk0QTI3NTcyRUIwNTg3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCv36JtQeRe6jpwdTnt+Vsdd9uP+S5oA1ANYIOo8GtggY9LmEYf
TgFRrpqUJ9En4utFurGnmD2m3wDHgyXdxF5oV3CexCCIHW6SfW65PpYnGlhlC8Mg
OW7WjtyifmLRIFXrPyV6ktB2cEVASz0sn20KgLuwmm6Cx/FT0Tuz05eGW7AyqIVr
t+hz2+S8ILk/c9MlRWWq7aL+05mnUDR0LXNsF6GSEFLSRMmewc15R8GdW85RSxrp
sRP3NiVTPAuV/gzZMiFpE0L0Vnac4V9fRQbpjGuxibiMdf6CyzI9qlmhOLv4KFeg
rybLFEzSAJlpnk0fDL9b53eOeh+Rjd8KszNXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU3I3cIiqCFhbDq6aklKJ1cusFh2YwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzNJM2NJaXFDRmhiRHE2YWtsS0oxY3VzRmgyWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEqfeIwDQYJKoZIhvcNAQELBQADggEBAJ7YBg5ZU8CNdpZspTEhkC7DLK8w
UBetBkcOQW8yz39IdhTeqYimGUD2xC162631Rk9MSCEfExNHT8arn5QDb0JdbxLM
hyFsrbO9Z87bHBw0AItNljzFiCHCl26F21cjW1xU/Zqwh5m+5n0TZN0y+kllwEEE
qkE8WuydFCxKuULnXLaa/w3VRNznLXyT07P5E7CbdAZDByBFv8pOJBwwe/F96I+u
R2eSkVoVM/wxDcaCENzZXRHoeBxSJXQTtO7tZ/NuYZfRCNLS6MmTZzPnqgHGDk7n
JTT4VUoo3EOA3z5sTPUW08KgKIkxZLM+z+imFjArC7V6HXOOav7Etzy5R58=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:22 2025 by rpki-client