Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/XiPKeCusl_MuXNzs6Mc2jnDN07s.roa
File: XiPKeCusl_MuXNzs6Mc2jnDN07s.roa (raw, json)
Hash identifier: 3LBcWqFuWfFpb6sJq0NC48yBSGSdmbyS7LwgsGVTbdI=
Subject key identifier: 5E:23:CA:78:2B:AC:97:F3:2E:5C:DC:EC:E8:C7:36:8E:70:CD:D3:BB
Certificate issuer: /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial: 49
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/XiPKeCusl_MuXNzs6Mc2jnDN07s.roa
Signing time: Sat 01 Mar 2025 01:31:30 +0000
ROA not before: Sat 01 Mar 2025 01:31:30 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 24284
IP address blocks: 27.133.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Validity
Not Before: Mar 1 01:31:30 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=5E23CA782BAC97F32E5CDCECE8C7368E70CDD3BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:f8:16:05:36:22:fa:25:ff:2c:65:09:67:
b7:db:01:13:9f:0a:90:1d:a9:6b:8c:7f:98:7b:25:
c8:7d:ba:6b:21:d2:0a:b0:3d:51:bf:c7:8d:1c:ce:
a9:30:ba:df:69:6d:a7:fb:5b:5d:e8:7b:f8:a2:59:
92:af:17:4f:8c:2b:d6:5f:14:a0:26:08:a9:9b:ec:
52:0b:e0:e1:c9:f4:54:68:e4:83:1d:f1:81:62:0d:
aa:e5:b3:37:ce:47:1b:34:d9:f8:70:df:b1:61:2e:
f7:35:a8:2f:31:18:8b:ea:85:8d:c3:1f:fe:92:09:
f9:e6:ab:98:66:d8:66:81:58:59:05:00:46:b5:30:
2a:dc:3b:37:9d:71:9d:fb:36:f2:85:10:c0:b6:18:
0c:8b:54:0b:cf:6f:25:94:e6:34:fb:af:f5:22:3a:
0a:3b:62:16:04:38:7c:79:4c:07:12:ca:0e:70:71:
28:9e:36:4e:1e:1d:b4:3f:02:f6:02:22:10:46:8c:
63:00:02:53:61:00:1f:85:76:28:dc:41:39:0e:98:
ff:59:20:00:ff:c9:9a:c0:68:02:22:25:b8:75:57:
6f:ff:9d:f7:75:f4:45:08:7a:68:3d:b1:3a:58:33:
2a:f9:1c:90:cd:e3:f2:d1:1f:e5:2e:e6:af:58:9f:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:23:CA:78:2B:AC:97:F3:2E:5C:DC:EC:E8:C7:36:8E:70:CD:D3:BB
X509v3 Authority Key Identifier:
keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/XiPKeCusl_MuXNzs6Mc2jnDN07s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.133.208.0/20
Signature Algorithm: sha256WithRSAEncryption
66:46:7b:79:63:13:9b:34:f4:04:3b:18:91:b1:9a:0f:2a:c4:
58:79:1b:1e:c8:a9:f9:be:db:fe:cd:72:e7:60:14:59:b2:94:
be:19:c4:c6:ab:83:1f:70:9f:5a:55:22:e9:2f:b4:82:d6:57:
cf:9e:3c:49:cb:ed:ef:b3:2f:d4:23:73:bd:2b:47:63:7b:2b:
05:50:3d:d6:da:6e:e8:49:48:c9:1d:0d:55:55:dd:11:23:db:
9d:46:d1:31:21:2d:98:18:1d:db:c0:03:a3:84:23:43:6f:07:
23:82:ba:71:af:6b:f6:d2:c4:14:0e:d0:68:7f:71:a3:fd:73:
b3:aa:81:27:87:45:1f:d3:47:0b:2f:e8:dc:78:3e:22:2f:32:
78:d9:d0:94:b2:3d:66:70:9f:e0:9e:0a:53:f5:dc:29:f9:9c:
cc:ba:91:34:af:44:79:58:ea:d2:6c:66:e4:8d:f7:35:98:b4:
30:c5:3c:ef:d1:51:dc:68:a4:2c:d4:fd:73:63:b8:71:f9:fc:
14:72:a0:6d:87:96:a5:51:bf:66:1a:c1:12:b6:d4:04:92:b7:
d0:1b:b9:4d:c5:14:43:11:ca:d1:cc:1b:26:b4:53:4e:40:b6:
9d:4d:f3:ca:d5:c6:f7:66:9f:45:1c:14:b5:f1:2a:b9:76:1c:
09:e8:bc:01
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkE4
NDg0REY0RkJBRkU1QzQ4RDk4OEEwNDZCNkFCNkE4MUIyREYzMB4XDTI1MDMwMTAx
MzEzMFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoNUUyM0NBNzgyQkFDOTdG
MzJFNUNEQ0VDRThDNzM2OEU3MENERDNCQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOav+BYFNiL6Jf8sZQlnt9sBE58KkB2pa4x/mHslyH26ayHSCrA9
Ub/HjRzOqTC632ltp/tbXeh7+KJZkq8XT4wr1l8UoCYIqZvsUgvg4cn0VGjkgx3x
gWINquWzN85HGzTZ+HDfsWEu9zWoLzEYi+qFjcMf/pIJ+earmGbYZoFYWQUARrUw
Ktw7N51xnfs28oUQwLYYDItUC89vJZTmNPuv9SI6CjtiFgQ4fHlMBxLKDnBxKJ42
Th4dtD8C9gIiEEaMYwACU2EAH4V2KNxBOQ6Y/1kgAP/JmsBoAiIluHVXb/+d93X0
RQh6aD2xOlgzKvkckM3j8tEf5S7mr1ifsvcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBReI8p4K6yX8y5c3OzoxzaOcM3TuzAfBgNVHSMEGDAWgBQGqEhN9Puv5cSNmIoE
a2q2qBst8zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTI0L0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFnYkxmTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFn
YkxmTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MjQvWGlQS2VDdXNsX011WE56czZNYzJqbkROMDdzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBBuF0DANBgkqhkiG9w0BAQsFAAOCAQEAZkZ7eWMTmzT0BDsYkbGaDyrEWHkb
Hsip+b7b/s1y52AUWbKUvhnExquDH3CfWlUi6S+0gtZXz548Scvt77Mv1CNzvStH
Y3srBVA91tpu6ElIyR0NVVXdESPbnUbRMSEtmBgd28ADo4QjQ28HI4K6ca9r9tLE
FA7QaH9xo/1zs6qBJ4dFH9NHCy/o3Hg+Ii8yeNnQlLI9ZnCf4J4KU/XcKfmczLqR
NK9EeVjq0mxm5I33NZi0MMU879FR3GikLNT9c2O4cfn8FHKgbYeWpVG/ZhrBErbU
BJK30Bu5TcUUQxHK0cwbJrRTTkC2nU3zytXG92afRRwUtfEquXYcCei8AQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:58 2025 by rpki-client