Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/oiwawvL7X3ScShAYfH-xkFiQRZQ.roa
File: oiwawvL7X3ScShAYfH-xkFiQRZQ.roa (raw, json)
Hash identifier: hKRb+bu3Q1UuzYCHymjXdRBhAO2Qtuiiox8/2pvD+tI=
Subject key identifier: A2:2C:1A:C2:F2:FB:5F:74:9C:4A:10:18:7C:7F:B1:90:58:90:45:94
Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial: 1B
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/oiwawvL7X3ScShAYfH-xkFiQRZQ.roa
Signing time: Wed 18 Sep 2024 07:50:59 +0000
ROA not before: Wed 18 Sep 2024 07:50:59 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 0
IP address blocks: 133.88.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Validity
Not Before: Sep 18 07:50:59 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=A22C1AC2F2FB5F749C4A10187C7FB19058904594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:42:97:4f:cb:75:14:39:5b:e6:2b:14:7a:
27:bf:36:20:f4:8e:fe:58:18:4f:a5:45:41:a7:a5:
c2:7c:0c:2b:5a:99:d7:08:2a:49:7b:eb:14:ff:23:
6d:df:6d:a5:47:0a:0e:7c:d2:bd:9e:79:cd:4a:d0:
e2:92:37:3c:77:78:85:97:0e:b1:85:aa:f5:e9:41:
b1:d2:f3:9d:42:bd:4c:fb:cf:7b:be:41:69:36:f8:
8d:11:b5:bc:32:81:db:54:c1:5d:13:47:22:51:62:
4f:02:a1:0e:11:b6:49:6c:36:74:d8:6f:5e:c6:22:
b3:67:07:38:5c:9b:88:23:14:5e:4d:1f:dd:a2:b8:
a8:94:50:76:fc:99:8d:fd:95:27:4b:a5:ef:74:02:
67:55:0c:19:37:41:3f:2b:de:7f:52:3b:30:c8:89:
79:47:f1:02:01:7e:95:17:56:ba:5b:d4:51:ec:da:
5d:84:a5:86:74:b5:60:4c:1e:04:b1:3b:4f:c0:8a:
8c:c0:36:38:cf:f5:2b:f5:6c:dd:a5:a5:07:82:22:
a2:ca:51:a8:fb:30:91:f7:4a:a3:e2:71:68:7d:56:
a6:14:4b:67:96:38:e1:e5:3b:bd:8e:8f:42:37:d9:
67:c9:19:8a:1f:be:16:1d:53:93:96:b8:7d:3b:49:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:1A:C2:F2:FB:5F:74:9C:4A:10:18:7C:7F:B1:90:58:90:45:94
X509v3 Authority Key Identifier:
keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/oiwawvL7X3ScShAYfH-xkFiQRZQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.88.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:31:0d:f7:5a:74:1c:11:a3:0e:53:b1:90:e2:27:d5:93:23:
11:61:eb:2f:dc:ba:6e:34:2a:d9:46:0a:da:ca:e2:6f:80:98:
ef:f0:26:f3:b2:6a:62:92:01:c2:fa:b3:90:7b:61:83:ec:b2:
68:1b:61:e6:36:55:3c:2c:a8:50:4a:f9:9c:50:b2:be:5a:ff:
45:49:d8:44:a5:5d:55:0d:49:1e:93:80:29:51:b7:c2:38:ed:
4e:56:3a:10:8e:b2:22:4d:19:c8:3c:93:fa:8c:6a:16:8d:50:
b4:bd:e4:02:0e:f7:6d:dc:8f:81:13:59:77:61:2f:b5:65:97:
5a:f9:bb:22:c3:3d:0c:17:25:bc:73:03:f0:df:52:cc:89:42:
55:30:dc:cd:c3:bf:87:13:cf:52:4b:08:bf:13:2f:eb:bb:6c:
96:4d:17:ca:77:f2:3c:f8:f7:35:16:c9:41:23:9d:2a:4e:33:
90:ce:db:c0:78:33:e3:64:62:cf:59:2f:4a:60:74:32:82:94:
f2:7d:af:c1:24:e1:c7:f7:c5:9b:34:95:d6:04:92:02:94:fb:
45:66:e0:66:85:d7:de:38:a2:d5:1a:a2:32:2a:cb:fe:05:9b:
a9:10:12:6a:22:00:95:d3:66:dd:4e:1e:b0:3c:d1:91:8f:6a:
be:61:64:e2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw
N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI0MDkxODA3
NTA1OVoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoQTIyQzFBQzJGMkZCNUY3
NDlDNEExMDE4N0M3RkIxOTA1ODkwNDU5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN4BQpdPy3UUOVvmKxR6J782IPSO/lgYT6VFQaelwnwMK1qZ1wgq
SXvrFP8jbd9tpUcKDnzSvZ55zUrQ4pI3PHd4hZcOsYWq9elBsdLznUK9TPvPe75B
aTb4jRG1vDKB21TBXRNHIlFiTwKhDhG2SWw2dNhvXsYis2cHOFybiCMUXk0f3aK4
qJRQdvyZjf2VJ0ul73QCZ1UMGTdBPyvef1I7MMiJeUfxAgF+lRdWulvUUezaXYSl
hnS1YEweBLE7T8CKjMA2OM/1K/Vs3aWlB4IiospRqPswkfdKo+JxaH1WphRLZ5Y4
4eU7vY6PQjfZZ8kZih++Fh1Tk5a4fTtJxKkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSiLBrC8vtfdJxKEBh8f7GQWJBFlDAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0
fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY
blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDc1L29pd2F3dkw3WDNTY1NoQVlmSC14a0ZpUVJaUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAKFWBAwDQYJKoZIhvcNAQELBQADggEBAKIxDfdadBwRow5TsZDiJ9WT
IxFh6y/cum40KtlGCtrK4m+AmO/wJvOyamKSAcL6s5B7YYPssmgbYeY2VTwsqFBK
+ZxQsr5a/0VJ2ESlXVUNSR6TgClRt8I47U5WOhCOsiJNGcg8k/qMahaNULS95AIO
923cj4ETWXdhL7Vll1r5uyLDPQwXJbxzA/DfUsyJQlUw3M3Dv4cTz1JLCL8TL+u7
bJZNF8p38jz49zUWyUEjnSpOM5DO28B4M+NkYs9ZL0pgdDKClPJ9r8Ek4cf3xZs0
ldYEkgKU+0Vm4GaF1944otUaojIqy/4Fm6kQEmoiAJXTZt1OHrA80ZGPar5hZOI=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:52:20 2025 by rpki-client