Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/JLNqIMDP7NK8VDvRfxsurruSk00.roa
File: JLNqIMDP7NK8VDvRfxsurruSk00.roa (raw, json)
Hash identifier: +RznV8jGmcr3KqPgdh+tp5DMf0mTETRZLEXIvl4XA18=
Subject key identifier: 24:B3:6A:20:C0:CF:EC:D2:BC:54:3B:D1:7F:1B:2E:AE:BB:92:93:4D
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 3244
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/JLNqIMDP7NK8VDvRfxsurruSk00.roa
Signing time: Fri 31 Jan 2025 01:31:18 +0000
ROA not before: Fri 31 Jan 2025 01:31:18 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 7671
IP address blocks: 125.252.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12868 (0x3244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: Jan 31 01:31:18 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=24B36A20C0CFECD2BC543BD17F1B2EAEBB92934D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:86:fb:13:3b:cd:46:a8:db:ac:ec:73:20:b1:
9e:b2:3e:34:cf:f4:83:f8:4f:eb:45:2a:2b:b0:73:
5a:b6:ce:b0:4e:ab:d4:1d:6f:82:3a:61:20:ec:d5:
36:fe:87:98:05:7b:34:a1:b7:86:19:dc:55:fb:63:
f1:0b:ab:49:f7:7f:83:94:7a:b5:c0:fc:d3:23:eb:
20:25:8c:82:2f:01:6f:79:24:11:1f:5b:7f:04:31:
a9:2f:7a:1d:60:79:18:e4:85:99:93:41:c8:9d:aa:
88:3c:2f:07:23:82:88:4d:5f:46:93:c5:a6:89:f4:
12:e2:d4:b0:d1:3e:e8:9a:2b:a1:f1:b2:a5:4e:68:
4a:8a:46:f0:24:d8:c7:ab:b1:4a:90:70:ed:af:9f:
6c:11:b2:52:c6:15:de:97:bb:01:1c:ab:d9:75:23:
a9:32:04:f2:a5:75:75:30:14:ac:b6:22:22:ab:ce:
93:fe:93:3e:23:e1:a8:84:78:38:2a:4f:fe:66:73:
8b:76:d6:a5:fe:ce:0f:ec:92:37:94:30:25:1d:69:
c1:e0:7f:9f:23:89:f4:f2:47:77:50:c4:98:dd:e4:
34:2d:aa:59:a1:9d:b1:91:ed:62:80:a6:c6:89:94:
9c:4e:b5:0d:8b:b0:a7:e7:03:72:b1:9e:87:53:d6:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B3:6A:20:C0:CF:EC:D2:BC:54:3B:D1:7F:1B:2E:AE:BB:92:93:4D
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/JLNqIMDP7NK8VDvRfxsurruSk00.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.252.128.0/18
Signature Algorithm: sha256WithRSAEncryption
33:4b:9a:06:48:c9:37:fd:ef:f1:a2:3b:1a:45:f8:6d:29:f6:
b0:54:12:c7:cf:e5:d3:ea:f9:61:13:7e:2d:7c:52:52:ab:71:
50:f4:b7:eb:f4:64:a6:a2:d4:c5:88:62:d6:19:1b:d7:65:f1:
c3:47:82:69:8e:16:c6:fe:3a:63:51:9b:55:24:7f:ca:a5:32:
b0:04:9f:79:b3:d8:70:44:1e:8c:1d:24:76:e8:12:44:c3:df:
ac:58:25:e7:5a:99:64:4f:88:a5:83:4d:b4:9f:78:7b:95:70:
c7:4b:dd:a5:a0:6c:2f:8d:47:e1:a0:b5:9b:59:03:81:20:9c:
69:72:8b:0c:3c:fc:76:3f:d7:8f:5c:5b:83:f8:8c:2e:a5:17:
34:b9:66:3a:30:90:e1:2d:1b:6d:0c:a5:a2:d4:a2:8b:63:3c:
07:14:2f:cb:19:08:d5:ba:93:50:50:30:16:cd:6b:2d:d4:2a:
13:46:2e:30:24:1b:c8:55:1f:45:e5:a9:7d:c1:6e:ff:a7:a3:
ac:44:7f:2f:a6:19:55:66:42:b9:af:82:98:98:62:74:bb:4a:
55:ee:ee:22:a4:2e:34:9b:78:16:6d:93:4b:df:a6:74:62:12:
54:f6:45:45:3a:b1:ca:66:3f:cb:67:a9:37:67:35:5e:b3:fb:
d8:c1:d4:f5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICMkQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy
MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNTAxMzEw
MTMxMThaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI0QjM2QTIwQzBDRkVD
RDJCQzU0M0JEMTdGMUIyRUFFQkI5MjkzNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlhvsTO81GqNus7HMgsZ6yPjTP9IP4T+tFKiuwc1q2zrBOq9Qd
b4I6YSDs1Tb+h5gFezSht4YZ3FX7Y/ELq0n3f4OUerXA/NMj6yAljIIvAW95JBEf
W38EMakveh1geRjkhZmTQcidqog8LwcjgohNX0aTxaaJ9BLi1LDRPuiaK6HxsqVO
aEqKRvAk2MersUqQcO2vn2wRslLGFd6XuwEcq9l1I6kyBPKldXUwFKy2IiKrzpP+
kz4j4aiEeDgqT/5mc4t21qX+zg/skjeUMCUdacHgf58jifTyR3dQxJjd5DQtqlmh
nbGR7WKApsaJlJxOtQ2LsKfnA3KxnodT1gqVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJLNqIMDP7NK8VDvRfxsurruSk00wHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA
ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi
LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjk5L0pMTnFJTURQN05LOFZEdlJmeHN1cnJ1U2swMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZ9/IAwDQYJKoZIhvcNAQELBQADggEBADNLmgZIyTf97/GiOxpF+G0p9rBU
EsfP5dPq+WETfi18UlKrcVD0t+v0ZKai1MWIYtYZG9dl8cNHgmmOFsb+OmNRm1Uk
f8qlMrAEn3mz2HBEHowdJHboEkTD36xYJedamWRPiKWDTbSfeHuVcMdL3aWgbC+N
R+GgtZtZA4EgnGlyiww8/HY/149cW4P4jC6lFzS5ZjowkOEtG20MpaLUootjPAcU
L8sZCNW6k1BQMBbNay3UKhNGLjAkG8hVH0XlqX3Bbv+no6xEfy+mGVVmQrmvgpiY
YnS7SlXu7iKkLjSbeBZtk0vfpnRiElT2RUU6scpmP8tnqTdnNV6z+9jB1PU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:50 2025 by rpki-client