Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/952/8-8iMMqxjsFmdue59Q1_sXAUWh0.roa
File: 8-8iMMqxjsFmdue59Q1_sXAUWh0.roa (raw, json)
Hash identifier: PSleRFUHiCvJDCr9sGWo1hZOSpiSjMnG5ivnRRwg7C8=
Subject key identifier: F3:EF:22:30:CA:B1:8E:C1:66:76:E7:B9:F5:0D:7F:B1:70:14:5A:1D
Certificate issuer: /CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D
Certificate serial: 02
Authority key identifier: 9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/8-8iMMqxjsFmdue59Q1_sXAUWh0.roa
Signing time: Wed 01 May 2024 02:42:30 +0000
ROA not before: Wed 01 May 2024 02:42:30 +0000
ROA not after: Thu 01 May 2025 02:34:07 +0000
asID: 37922
IP address blocks: 103.239.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D
Validity
Not Before: May 1 02:42:30 2024 GMT
Not After : May 1 02:34:07 2025 GMT
Subject: CN=F3EF2230CAB18EC16676E7B9F50D7FB170145A1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:40:a3:55:92:11:83:02:ff:16:04:40:de:
c2:0e:7a:96:c2:a0:91:32:60:0b:19:78:bf:7f:18:
bf:74:fe:94:30:c7:ee:ef:f1:34:91:84:f1:18:47:
c8:d2:eb:7f:bd:d9:b8:4d:1f:20:a9:dc:5f:2d:0c:
43:a3:53:bd:dd:f7:d6:ce:bd:29:92:02:c3:92:03:
92:c7:8b:9e:14:f2:e6:8d:45:6d:b7:1c:ab:31:9c:
bf:c9:2f:5f:03:41:b4:0b:ba:e0:f1:9d:1a:35:17:
6a:da:37:5a:15:24:c0:22:93:57:ac:3b:09:da:ca:
51:85:2a:ed:0b:9c:71:43:44:d4:f1:4e:b7:d5:d0:
32:83:57:d4:40:7d:2d:d5:6a:ab:9c:af:0b:d0:52:
96:9b:29:ef:8a:b8:51:f5:1f:8b:b5:5a:dc:b1:54:
ad:fb:f5:ff:0c:c9:a8:1d:a9:7b:06:46:1f:0f:c3:
44:2f:8a:9b:ae:95:6f:e9:49:eb:98:89:22:14:52:
ca:1b:5a:13:f1:8f:82:ed:13:06:54:73:f5:7f:44:
14:62:9b:db:6b:a5:91:ba:6d:71:4c:ba:7a:3e:ee:
8f:17:fb:05:02:11:3f:2c:8a:28:b1:5c:30:a8:6a:
f0:34:ed:57:21:87:5c:5a:bc:89:b6:70:26:dd:1f:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:22:30:CA:B1:8E:C1:66:76:E7:B9:F5:0D:7F:B1:70:14:5A:1D
X509v3 Authority Key Identifier:
keyid:9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/8-8iMMqxjsFmdue59Q1_sXAUWh0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:d2:0c:90:c9:6e:4c:49:b2:7c:2d:ea:b5:c2:be:be:19:35:
cf:10:f4:5f:4d:1c:8a:7b:ad:dc:00:cf:c4:38:02:d0:7a:a6:
89:52:52:53:b1:8a:d4:2f:94:86:0d:93:1a:3b:de:52:42:be:
cb:3e:c9:b9:da:ae:b4:20:55:29:8d:1d:dc:73:77:59:d8:92:
6a:16:9f:c4:f2:53:a8:fe:90:84:a5:a6:03:01:e7:9e:e3:bd:
d7:82:2b:28:64:d1:07:1f:d1:13:3b:57:2a:53:5c:70:2a:d3:
98:a0:6e:32:9d:1b:f2:9f:39:12:3d:14:3c:9c:c5:69:5f:18:
49:ee:55:45:6d:8d:47:cb:00:c9:41:06:78:dd:35:9a:50:b5:
21:be:a2:80:ae:9c:07:6f:4e:20:5f:41:76:9d:b1:0a:60:bb:
ec:56:6a:20:17:62:39:e9:20:6c:c6:3a:a2:21:d7:24:6e:51:
0d:af:e3:82:af:0c:88:60:5f:d5:8a:a9:50:24:0d:59:d4:04:
ba:1c:aa:4c:b1:38:43:58:28:80:e6:5c:e3:f7:69:20:43:5e:
e6:52:34:c2:5a:b2:57:bc:fc:f3:c4:cf:1f:87:7f:dd:80:9b:
56:82:c7:3c:bd:9d:81:35:f8:c3:b4:6f:63:98:a5:5c:50:4e:
ee:6a:06:3d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTZB
RkFCMDRFMTBFOTlDMzIyQjU2QzYwM0NCM0M5NTQ3RjIyQjREMB4XDTI0MDUwMTAy
NDIzMFoXDTI1MDUwMTAyMzQwN1owMzExMC8GA1UEAxMoRjNFRjIyMzBDQUIxOEVD
MTY2NzZFN0I5RjUwRDdGQjE3MDE0NUExRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMKwQKNVkhGDAv8WBEDewg56lsKgkTJgCxl4v38Yv3T+lDDH7u/x
NJGE8RhHyNLrf73ZuE0fIKncXy0MQ6NTvd331s69KZICw5IDkseLnhTy5o1Fbbcc
qzGcv8kvXwNBtAu64PGdGjUXato3WhUkwCKTV6w7CdrKUYUq7QuccUNE1PFOt9XQ
MoNX1EB9LdVqq5yvC9BSlpsp74q4UfUfi7Va3LFUrfv1/wzJqB2pewZGHw/DRC+K
m66Vb+lJ65iJIhRSyhtaE/GPgu0TBlRz9X9EFGKb22ulkbptcUy6ej7ujxf7BQIR
PyyKKLFcMKhq8DTtVyGHXFq8ibZwJt0fF3ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTz7yIwyrGOwWZ257n1DX+xcBRaHTAfBgNVHSMEGDAWgBSeavqwThDpnDIrVsYD
yzyVR/IrTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTUyL25tcjZzRTRRNlp3eUsxYkdBOHM4bFVmeUswMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25tcjZzRTRRNlp3eUsxYkdBOHM4bFVm
eUswMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTIvOC04aU1NcXhqc0ZtZHVlNTlRMV9zWEFVV2gwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfvbDANBgkqhkiG9w0BAQsFAAOCAQEAbNIMkMluTEmyfC3qtcK+vhk1zxD0
X00cinut3ADPxDgC0HqmiVJSU7GK1C+Uhg2TGjveUkK+yz7JudqutCBVKY0d3HN3
WdiSahafxPJTqP6QhKWmAwHnnuO914IrKGTRBx/REztXKlNccCrTmKBuMp0b8p85
Ej0UPJzFaV8YSe5VRW2NR8sAyUEGeN01mlC1Ib6igK6cB29OIF9Bdp2xCmC77FZq
IBdiOekgbMY6oiHXJG5RDa/jgq8MiGBf1YqpUCQNWdQEuhyqTLE4Q1gogOZc4/dp
IENe5lI0wlqyV7z888TPH4d/3YCbVoLHPL2dgTX4w7RvY5ilXFBO7moGPQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:38 2025 by rpki-client