Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/rOWaUSjLwyBGmEUknjz9LGYBIv0.roa
File: rOWaUSjLwyBGmEUknjz9LGYBIv0.roa (raw, json)
Hash identifier: VW4ItKg+/dPIhPRpCMMymEvK+tXhMKpUirDx1wK811E=
Subject key identifier: AC:E5:9A:51:28:CB:C3:20:46:98:45:24:9E:3C:FD:2C:66:01:22:FD
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0579
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rOWaUSjLwyBGmEUknjz9LGYBIv0.roa
Signing time: Fri 31 Jan 2025 01:39:49 +0000
ROA not before: Fri 31 Jan 2025 01:39:49 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 42.125.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1401 (0x579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:39:49 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=ACE59A5128CBC320469845249E3CFD2C660122FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:db:29:58:0c:d0:b2:43:f7:17:af:8c:9e:
09:33:9a:5b:6f:8e:da:46:11:3d:75:ad:43:d4:26:
e8:02:81:2a:5b:48:33:61:7b:dc:14:00:3e:d1:87:
e7:a6:9b:03:25:93:04:13:ae:57:8d:48:dd:52:ab:
4f:84:e6:22:50:40:88:cf:aa:1e:f2:5c:9c:7d:9a:
2a:2b:46:91:4a:0f:ba:69:34:9a:6e:cd:56:ab:be:
93:83:18:10:60:60:ad:b0:54:8b:85:28:31:22:be:
29:96:44:cb:22:53:ef:8b:09:a0:f8:c2:35:79:14:
3d:7c:24:94:ed:d2:a2:00:3e:f0:7f:69:dc:9c:2c:
fb:88:a1:0c:0b:c8:d8:fa:5c:9b:a7:75:c3:c1:be:
4f:ef:66:71:cd:fe:9b:7d:21:6f:7c:9a:be:e1:6b:
1f:f5:65:c1:08:9a:0a:bf:40:4b:c9:92:a5:7a:f9:
0e:49:e8:11:50:04:fa:b9:6d:40:c5:11:b9:14:8a:
d0:e4:3a:78:9a:b3:9e:a1:28:ec:7d:a5:06:2b:61:
2d:b7:ed:5d:6e:44:ac:4f:ff:12:b4:7b:3a:0e:f2:
b7:a8:fd:82:8f:22:49:0e:97:cc:f4:e2:ff:a0:d7:
54:ad:c9:c9:f1:d9:a0:1d:c5:0e:ba:ec:7c:27:d0:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E5:9A:51:28:CB:C3:20:46:98:45:24:9E:3C:FD:2C:66:01:22:FD
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rOWaUSjLwyBGmEUknjz9LGYBIv0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.225.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b0:47:05:69:b8:1a:d8:2f:d3:4b:54:17:76:81:89:59:12:
99:b3:da:8b:57:61:95:81:17:e3:96:ba:68:b0:3c:72:43:7e:
dd:cc:84:24:ed:7b:01:83:c8:85:1b:76:a3:d6:d1:38:94:71:
43:58:5c:6e:f7:12:21:19:23:58:67:3f:0d:bb:60:04:2d:f5:
46:6d:7f:2d:71:40:29:63:5f:2a:3d:96:e9:da:05:b7:c8:92:
4d:cf:78:b5:96:92:ab:ef:1e:c3:8f:5f:cf:b9:c3:22:c1:9f:
3d:dc:7e:de:d3:b3:dc:bc:99:a9:18:b8:46:ac:43:34:12:ef:
63:a4:db:6d:c7:3c:76:98:45:79:a0:ba:bd:fa:81:c6:8f:46:
09:f3:a7:fa:fa:97:8a:d5:66:2b:bc:ab:60:6b:d6:c5:6f:5d:
26:35:fb:d7:ed:5e:49:e0:42:a1:a0:99:e2:2a:af:e1:a7:bd:
25:9b:e1:74:36:16:ce:1c:5b:37:69:20:e5:22:6e:c4:b8:f9:
cc:7e:07:3c:23:17:89:6c:f6:5e:55:d0:86:69:32:f7:49:54:
66:19:9b:af:87:bb:b3:5d:c6:9c:a7:73:6d:cf:17:28:f1:7a:
ea:37:be:d6:80:d2:09:96:fd:f8:50:55:1e:32:fe:34:e1:dd:
48:44:ca:35
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw
MTM5NDlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFDRTU5QTUxMjhDQkMz
MjA0Njk4NDUyNDlFM0NGRDJDNjYwMTIyRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGPNspWAzQskP3F6+MngkzmltvjtpGET11rUPUJugCgSpbSDNh
e9wUAD7Rh+emmwMlkwQTrleNSN1Sq0+E5iJQQIjPqh7yXJx9miorRpFKD7ppNJpu
zVarvpODGBBgYK2wVIuFKDEivimWRMsiU++LCaD4wjV5FD18JJTt0qIAPvB/adyc
LPuIoQwLyNj6XJundcPBvk/vZnHN/pt9IW98mr7hax/1ZcEImgq/QEvJkqV6+Q5J
6BFQBPq5bUDFEbkUitDkOnias56hKOx9pQYrYS237V1uRKxP/xK0ezoO8reo/YKP
IkkOl8z04v+g11Stycnx2aAdxQ667Hwn0HrRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUrOWaUSjLwyBGmEUknjz9LGYBIv0wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L3JPV2FVU2pMd3lCR21FVWtuano5TEdZQkl2MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAqfeEwDQYJKoZIhvcNAQELBQADggEBABqwRwVpuBrYL9NLVBd2gYlZEpmz
2otXYZWBF+OWumiwPHJDft3MhCTtewGDyIUbdqPW0TiUcUNYXG73EiEZI1hnPw27
YAQt9UZtfy1xQCljXyo9lunaBbfIkk3PeLWWkqvvHsOPX8+5wyLBnz3cft7Ts9y8
makYuEasQzQS72Ok223HPHaYRXmgur36gcaPRgnzp/r6l4rVZiu8q2Br1sVvXSY1
+9ftXkngQqGgmeIqr+GnvSWb4XQ2Fs4cWzdpIOUibsS4+cx+BzwjF4ls9l5V0IZp
MvdJVGYZm6+Hu7Ndxpync23PFyjxeuo3vtaA0gmW/fhQVR4y/jTh3UhEyjU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:21 2025 by rpki-client