Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JFxLYu34bg1tcbtwcnInWeU50w8.roa
File: JFxLYu34bg1tcbtwcnInWeU50w8.roa (raw, json)
Hash identifier: tpXfVmTcoeNzxHU132o8zHbWYt81d12fFlgBWZI4wa8=
Subject key identifier: 24:5C:4B:62:ED:F8:6E:0D:6D:71:BB:70:72:72:27:59:E5:39:D3:0F
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 040E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JFxLYu34bg1tcbtwcnInWeU50w8.roa
Signing time: Wed 18 Dec 2024 02:18:56 +0000
ROA not before: Wed 18 Dec 2024 02:18:56 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 222.1.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:56 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=245C4B62EDF86E0D6D71BB7072722759E539D30F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:90:ea:ef:dd:92:7e:67:ad:d2:9f:19:5e:
cd:57:18:c1:93:13:53:43:30:6f:4b:57:cc:86:6b:
74:ae:00:64:bf:cf:30:23:ef:36:a4:8a:a7:81:80:
b1:61:9d:14:80:93:7c:6f:1c:ce:91:1b:59:68:d8:
8e:86:b3:1d:4a:f4:d7:c2:7d:7c:de:b3:38:48:2c:
1a:94:b8:03:45:ba:18:80:a7:7a:f0:e6:dc:54:12:
9e:93:f3:58:61:d7:37:cd:30:dd:6a:d3:15:e8:0b:
88:7f:49:17:30:33:66:ee:23:b9:2e:0d:81:e2:35:
32:f2:c9:b3:92:3a:98:bc:07:c2:09:68:1c:61:57:
32:ea:13:e9:5d:6e:46:34:13:51:74:ed:db:45:18:
b7:9e:e1:87:91:30:4b:57:f6:e8:59:d8:9b:0c:20:
30:13:3a:30:5f:da:70:fe:86:d8:cd:aa:30:c3:92:
30:36:5f:65:16:2e:6a:d8:a5:7f:9b:1f:0d:71:c0:
83:8e:e6:fa:fb:64:f9:67:ea:24:76:40:c7:42:72:
a2:b0:5e:de:47:c5:20:12:5c:be:7c:bc:51:d1:c4:
28:ac:bc:86:73:dd:76:56:75:86:30:35:aa:d2:d4:
12:5f:41:f9:c0:bb:b6:ac:07:95:2a:0b:16:57:2d:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:4B:62:ED:F8:6E:0D:6D:71:BB:70:72:72:27:59:E5:39:D3:0F
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JFxLYu34bg1tcbtwcnInWeU50w8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
222.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:68:1d:22:19:c9:f8:17:81:76:65:cb:8f:44:8a:ac:3c:68:
a7:6f:ea:b7:5a:26:9d:20:8f:76:cb:03:2a:2b:aa:bc:92:67:
2c:07:98:9d:84:8e:c5:0f:44:0c:9d:55:fc:57:b5:16:33:15:
75:59:93:71:12:9f:6e:9b:7e:81:d8:c4:aa:85:da:3c:9a:81:
dd:56:71:fb:89:15:17:b8:c5:71:df:89:7e:db:54:ca:88:f3:
ef:44:ef:4b:95:c5:59:2f:e4:46:c6:d4:a2:66:f9:5e:20:12:
3a:37:12:8b:7c:50:fb:3e:34:66:14:f2:ba:82:8a:51:33:74:
e0:78:5a:db:f7:52:9e:f3:d6:ee:16:75:4c:8a:13:9e:2a:0e:
68:35:fa:07:4f:1c:75:f9:13:73:d7:2a:18:82:a2:36:da:0a:
b6:86:91:42:eb:a2:42:67:47:6c:03:5d:e8:02:c1:4b:e7:fa:
49:3c:18:b2:e8:a6:48:59:27:b9:04:08:0c:e7:31:ed:45:ae:
97:bc:34:29:e1:59:f9:7c:16:be:a8:d1:5f:fe:f4:f4:32:34:
82:79:da:ba:61:2f:13:b3:5d:ad:b3:99:ec:0f:c7:b4:bc:7a:
2b:f2:dd:47:ea:a6:85:6e:f0:b0:70:f4:fc:58:c4:fa:d7:69:
b4:9f:88:86
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjE4NTZaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI0NUM0QjYyRURGODZF
MEQ2RDcxQkI3MDcyNzIyNzU5RTUzOUQzMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH/5Dq792Sfmet0p8ZXs1XGMGTE1NDMG9LV8yGa3SuAGS/zzAj
7zakiqeBgLFhnRSAk3xvHM6RG1lo2I6Gsx1K9NfCfXzeszhILBqUuANFuhiAp3rw
5txUEp6T81hh1zfNMN1q0xXoC4h/SRcwM2buI7kuDYHiNTLyybOSOpi8B8IJaBxh
VzLqE+ldbkY0E1F07dtFGLee4YeRMEtX9uhZ2JsMIDATOjBf2nD+htjNqjDDkjA2
X2UWLmrYpX+bHw1xwIOO5vr7ZPln6iR2QMdCcqKwXt5HxSASXL58vFHRxCisvIZz
3XZWdYYwNarS1BJfQfnAu7asB5UqCxZXLVsbAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUJFxLYu34bg1tcbtwcnInWeU50w8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0pGeExZdTM0YmcxdGNidHdjbkluV2VVNTB3OC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDeATANBgkqhkiG9w0BAQsFAAOCAQEAY2gdIhnJ+BeBdmXLj0SKrDxop2/q
t1omnSCPdssDKiuqvJJnLAeYnYSOxQ9EDJ1V/Fe1FjMVdVmTcRKfbpt+gdjEqoXa
PJqB3VZx+4kVF7jFcd+JfttUyojz70TvS5XFWS/kRsbUomb5XiASOjcSi3xQ+z40
ZhTyuoKKUTN04Hha2/dSnvPW7hZ1TIoTnioOaDX6B08cdfkTc9cqGIKiNtoKtoaR
QuuiQmdHbANd6ALBS+f6STwYsuimSFknuQQIDOcx7UWul7w0KeFZ+XwWvqjRX/70
9DI0gnnaumEvE7NdrbOZ7A/HtLx6K/LdR+qmhW7wsHD0/FjE+tdptJ+Ihg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:59:35 2025 by rpki-client