Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Fpk2sTKJnP2Xkfw0-3XgMLZ0I9U.roa
File: Fpk2sTKJnP2Xkfw0-3XgMLZ0I9U.roa (raw, json)
Hash identifier: 1VjTi7y6RxG0Iwcgg2fEW/r8RNin5te1ORWctn/46VE=
Subject key identifier: 16:99:36:B1:32:89:9C:FD:97:91:FC:34:FB:75:E0:30:B6:74:23:D5
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0330
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Fpk2sTKJnP2Xkfw0-3XgMLZ0I9U.roa
Signing time: Wed 15 Jan 2025 01:11:32 +0000
ROA not before: Wed 15 Jan 2025 01:11:32 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 10013
IP address blocks: 61.192.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jan 15 01:11:32 2025 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=169936B132899CFD9791FC34FB75E030B67423D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:69:e1:a2:e0:62:ff:d9:b1:ab:18:f4:09:
7d:9f:7d:43:1f:63:96:c5:8e:bc:f1:2a:4d:0c:16:
fa:c0:87:c2:d8:f2:89:f1:c9:2e:1c:cf:dc:92:86:
21:5b:b9:ba:02:55:0b:91:72:cc:0a:08:35:25:93:
31:89:bf:1d:65:2a:a9:8a:4b:e7:8b:ed:d5:e0:5e:
d9:0c:a2:64:e8:ad:c6:91:22:0f:87:9a:72:99:53:
87:ea:30:c5:98:fb:7e:80:5e:d5:ca:61:c2:ca:3b:
ff:64:db:ad:da:b0:29:a7:ca:98:49:ad:c4:56:01:
f3:03:8a:ce:53:d8:f0:55:af:f6:66:5c:39:b0:ed:
de:bd:76:fe:7e:69:ab:ba:64:bb:40:41:a9:57:39:
1d:f4:da:f0:9a:4c:cc:99:50:72:73:2a:71:5d:bb:
fd:79:1e:9a:12:a2:56:d8:4a:d8:94:5a:f0:11:e0:
eb:e7:dd:cf:0b:19:46:fc:3c:de:aa:c1:5b:2c:24:
40:2b:0d:d2:0d:1a:be:5e:5b:66:0a:f4:ac:69:05:
c2:90:df:2f:e7:36:3f:4e:4a:ff:e0:45:90:b2:19:
a0:46:96:19:09:e0:5a:1e:9f:93:cf:fe:ba:a5:b0:
19:95:2a:ca:3f:f5:22:e5:dd:ff:b4:7a:50:8f:62:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:99:36:B1:32:89:9C:FD:97:91:FC:34:FB:75:E0:30:B6:74:23:D5
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Fpk2sTKJnP2Xkfw0-3XgMLZ0I9U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.192.162.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:d4:c9:6c:ed:bd:a6:3c:ee:60:ed:11:7f:6b:67:0c:3e:96:
99:ab:02:90:e0:49:8d:0a:87:50:61:1d:cb:cf:cf:01:a9:44:
3f:d0:6b:ea:7c:2d:bf:1a:cb:27:4a:12:a5:72:95:02:6b:24:
16:23:96:08:e6:62:d0:02:6a:0e:19:18:44:60:43:05:1a:c2:
20:e1:20:0a:bb:51:7f:82:de:d6:c1:68:03:65:62:a1:c9:dc:
74:7a:25:7d:90:91:1d:ac:19:37:71:d4:57:56:35:e3:c0:38:
8a:b7:1b:5c:13:08:3b:96:77:17:e3:40:76:5c:0a:5f:aa:43:
9e:bb:af:ec:d8:9a:a7:c9:12:43:a0:b5:b8:78:25:c0:ed:8c:
21:a9:23:2f:5d:3c:73:11:52:4a:2f:0f:dd:89:ae:c0:1f:e9:
52:c1:c1:ad:4d:0e:7f:e5:ca:e6:b9:fd:9d:47:df:3a:43:80:
a5:7d:aa:f1:8c:06:3b:fe:dc:d3:d2:b4:87:60:ec:da:f2:56:
d1:17:26:97:7f:9a:62:15:2b:6b:cc:70:ef:94:80:a3:56:0a:
72:3d:a8:89:f8:8f:9a:84:85:94:15:8b:23:1f:b2:dc:50:62:
fd:cb:07:f8:e9:0b:de:c8:77:48:d0:f1:5b:fe:ce:ba:8c:84:
3c:f9:ed:bd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTAxMTUw
MTExMzJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE2OTkzNkIxMzI4OTlD
RkQ5NzkxRkMzNEZCNzVFMDMwQjY3NDIzRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK7WnhouBi/9mxqxj0CX2ffUMfY5bFjrzxKk0MFvrAh8LY8onx
yS4cz9yShiFbuboCVQuRcswKCDUlkzGJvx1lKqmKS+eL7dXgXtkMomTorcaRIg+H
mnKZU4fqMMWY+36AXtXKYcLKO/9k263asCmnyphJrcRWAfMDis5T2PBVr/ZmXDmw
7d69dv5+aau6ZLtAQalXOR302vCaTMyZUHJzKnFdu/15HpoSolbYStiUWvAR4Ovn
3c8LGUb8PN6qwVssJEArDdINGr5eW2YK9KxpBcKQ3y/nNj9OSv/gRZCyGaBGlhkJ
4Foen5PP/rqlsBmVKso/9SLl3f+0elCPYlHNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUFpk2sTKJnP2Xkfw0+3XgMLZ0I9UwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0ZwazJzVEtKblAyWGtmdzAtM1hnTUxaMEk5VS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAE9wKIwDQYJKoZIhvcNAQELBQADggEBAD/UyWztvaY87mDtEX9rZww+lpmr
ApDgSY0Kh1BhHcvPzwGpRD/Qa+p8Lb8ayydKEqVylQJrJBYjlgjmYtACag4ZGERg
QwUawiDhIAq7UX+C3tbBaANlYqHJ3HR6JX2QkR2sGTdx1FdWNePAOIq3G1wTCDuW
dxfjQHZcCl+qQ567r+zYmqfJEkOgtbh4JcDtjCGpIy9dPHMRUkovD92JrsAf6VLB
wa1NDn/lyua5/Z1H3zpDgKV9qvGMBjv+3NPStIdg7NryVtEXJpd/mmIVK2vMcO+U
gKNWCnI9qIn4j5qEhZQViyMfstxQYv3LB/jpC97Id0jQ8Vv+zrqMhDz57b0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:35:22 2025 by rpki-client