Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/IyQ-sP3fmX-UFNmQHu98kO6Fvc4.roa
File: IyQ-sP3fmX-UFNmQHu98kO6Fvc4.roa (raw, json)
Hash identifier: ynlM85jj85xE7fmLWBOLggevGWgaptwuVZgVdK8Srz4=
Subject key identifier: 23:24:3E:B0:FD:DF:99:7F:94:14:D9:90:1E:EF:7C:90:EE:85:BD:CE
Certificate issuer: /CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Certificate serial: 03
Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/IyQ-sP3fmX-UFNmQHu98kO6Fvc4.roa
Signing time: Mon 02 Dec 2024 01:26:48 +0000
ROA not before: Mon 02 Dec 2024 01:26:48 +0000
ROA not after: Thu 20 Nov 2025 01:37:29 +0000
asID: 17936
IP address blocks: 203.104.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Validity
Not Before: Dec 2 01:26:48 2024 GMT
Not After : Nov 20 01:37:29 2025 GMT
Subject: CN=23243EB0FDDF997F9414D9901EEF7C90EE85BDCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:cb:ed:b7:cd:14:93:5e:71:9c:c4:a6:5e:
7d:ac:d6:74:cc:9f:44:39:7b:c9:65:10:50:c9:35:
78:cb:8d:a1:cb:c2:b3:96:5c:ac:34:21:ef:3f:4d:
d6:0a:0f:c7:c3:be:a5:0e:03:05:8a:29:66:45:e3:
98:58:17:1b:1b:84:62:81:43:39:4a:c1:fc:ed:34:
ed:7d:10:5a:1d:24:24:a3:e4:3f:a0:06:40:a3:da:
c4:de:44:3f:23:3b:66:eb:1c:42:a2:f5:89:de:67:
40:49:04:5f:3b:c6:56:d1:a3:a4:c7:eb:12:88:36:
65:d1:64:3b:3c:c4:72:bb:5d:88:29:25:9b:a6:20:
e7:d6:b0:dd:a5:f8:02:9f:b1:4f:b7:e5:2b:0b:5f:
c2:9b:ad:54:4f:22:23:1c:cc:88:0d:07:cd:8c:ab:
b0:6f:ee:e3:a8:b4:78:26:58:7b:f1:98:43:ac:22:
0a:38:f2:ee:54:61:8d:47:d3:f9:cd:b0:2c:c3:03:
87:b2:31:95:6c:a0:1b:c9:b0:33:91:c1:c0:f2:d7:
28:08:24:f4:f2:4a:d0:d8:a5:ca:b7:ee:66:6f:1e:
94:d1:3c:ca:08:b5:d0:f7:b4:22:28:af:a5:58:31:
aa:ff:1d:33:89:8c:16:95:f8:f1:4b:0b:30:ac:e7:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:24:3E:B0:FD:DF:99:7F:94:14:D9:90:1E:EF:7C:90:EE:85:BD:CE
X509v3 Authority Key Identifier:
keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/IyQ-sP3fmX-UFNmQHu98kO6Fvc4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.104.112.0/20
Signature Algorithm: sha256WithRSAEncryption
03:d3:09:e2:0d:ce:8b:5d:7e:c4:c2:7b:19:9b:11:a2:27:a8:
8b:fb:a4:66:64:31:fd:eb:52:72:7f:bd:dd:e9:c3:d1:99:83:
d4:40:38:05:3e:f3:93:10:63:c1:39:82:45:12:ad:f4:32:27:
a1:73:c5:a9:59:df:f3:25:75:36:45:79:3f:66:d7:ed:0b:36:
eb:de:f0:b1:17:12:fd:78:fd:05:f8:03:ea:75:c2:c1:c2:a3:
69:5f:10:05:a2:38:ec:e5:33:a8:79:d5:cc:6d:04:46:9d:44:
e3:1f:e3:99:f3:e3:f7:b0:38:b7:2a:2c:4d:df:a6:68:b5:26:
fe:d9:f2:61:b8:bc:19:74:46:68:f0:27:95:c1:23:81:82:19:
b8:25:49:0f:a7:83:bc:5b:97:a2:db:2c:aa:b5:18:ca:00:27:
23:2c:2c:76:aa:d3:ae:9b:69:df:92:80:7b:2c:b8:3a:12:c0:
d6:ca:81:17:92:36:59:ba:fc:46:5d:76:9b:b1:bc:0f:69:08:
fe:69:47:7a:92:1c:11:da:a2:12:7c:24:eb:48:35:b7:07:ac:
87:07:db:06:27:85:43:50:83:78:86:6e:e2:62:28:2c:3f:6f:
c7:c8:69:b1:5f:9d:4e:1c:72:9e:9a:cc:fd:96:32:d4:e7:41:
86:31:72:4c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRTRF
MzIyMjdFMTMxMjJGRTgwMzQwQkYzQUVEM0Q3OTNEMjZCNDU3MB4XDTI0MTIwMjAx
MjY0OFoXDTI1MTEyMDAxMzcyOVowMzExMC8GA1UEAxMoMjMyNDNFQjBGRERGOTk3
Rjk0MTREOTkwMUVFRjdDOTBFRTg1QkRDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMroy+23zRSTXnGcxKZefazWdMyfRDl7yWUQUMk1eMuNocvCs5Zc
rDQh7z9N1goPx8O+pQ4DBYopZkXjmFgXGxuEYoFDOUrB/O007X0QWh0kJKPkP6AG
QKPaxN5EPyM7ZuscQqL1id5nQEkEXzvGVtGjpMfrEog2ZdFkOzzEcrtdiCklm6Yg
59aw3aX4Ap+xT7flKwtfwputVE8iIxzMiA0HzYyrsG/u46i0eCZYe/GYQ6wiCjjy
7lRhjUfT+c2wLMMDh7IxlWygG8mwM5HBwPLXKAgk9PJK0NilyrfuZm8elNE8ygi1
0Pe0IiivpVgxqv8dM4mMFpX48UsLMKzncvkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQjJD6w/d+Zf5QU2ZAe73yQ7oW9zjAfBgNVHSMEGDAWgBQOTjIifhMSL+gDQL86
7T15PSa0VzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjUwL0RrNHlJbjRURWlfb0EwQ19PdTA5ZVQwbXRGYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RrNHlJbjRURWlfb0EwQ19PdTA5ZVQw
bXRGYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NTAvSXlRLXNQM2ZtWC1VRk5tUUh1OThrTzZGdmM0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMtocDANBgkqhkiG9w0BAQsFAAOCAQEAA9MJ4g3Oi11+xMJ7GZsRoieoi/uk
ZmQx/etScn+93enD0ZmD1EA4BT7zkxBjwTmCRRKt9DInoXPFqVnf8yV1NkV5P2bX
7Qs2697wsRcS/Xj9BfgD6nXCwcKjaV8QBaI47OUzqHnVzG0ERp1E4x/jmfPj97A4
tyosTd+maLUm/tnyYbi8GXRGaPAnlcEjgYIZuCVJD6eDvFuXotssqrUYygAnIyws
dqrTrptp35KAeyy4OhLA1sqBF5I2Wbr8Rl12m7G8D2kI/mlHepIcEdqiEnwk60g1
tweshwfbBieFQ1CDeIZu4mIoLD9vx8hpsV+dThxynprM/ZYy1OdBhjFyTA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:23 2025 by rpki-client