Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/DBOyniotYkiBK4iNtMsld9xv0qs.roa
File: DBOyniotYkiBK4iNtMsld9xv0qs.roa (raw, json)
Hash identifier: JXuoKAD8dAcma1fZOW5QXLLQYpVBQ1IAFGCa2Iqh3xQ=
Subject key identifier: 0C:13:B2:9E:2A:2D:62:48:81:2B:88:8D:B4:CB:25:77:DC:6F:D2:AB
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 015D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/DBOyniotYkiBK4iNtMsld9xv0qs.roa
Signing time: Thu 31 Oct 2024 01:30:55 +0000
ROA not before: Thu 31 Oct 2024 01:30:55 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 2527
IP address blocks: 103.2.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Oct 31 01:30:55 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=0C13B29E2A2D6248812B888DB4CB2577DC6FD2AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:dd:2c:79:bc:b5:74:24:e2:64:4c:73:03:
70:ba:45:8b:56:4b:66:36:91:ea:35:a4:be:d0:ed:
f0:2e:04:b4:7b:c3:db:fb:83:d4:1b:06:2a:61:f8:
48:43:ee:2b:80:71:f8:9e:03:7f:56:37:9b:c6:35:
96:4b:0b:9a:2c:4b:16:38:fd:b8:7c:4e:b7:be:b9:
12:0f:de:f7:3a:c1:f5:60:87:ed:2e:e8:94:3e:45:
b7:33:ee:06:6e:1a:8c:94:7d:8b:26:4c:b2:f8:b3:
48:bc:8b:03:d5:61:0c:46:96:35:98:08:62:71:5d:
9c:80:fc:f9:fc:bf:16:d9:35:6f:f1:c3:a2:1a:95:
2f:b2:c3:73:24:4b:1b:30:c9:b2:d0:7d:10:eb:67:
70:0d:8c:6b:20:99:22:0b:e6:2f:5a:7c:ad:2b:6d:
2f:f5:2b:19:1b:b8:07:f7:9c:fe:32:4b:d2:04:23:
29:ac:eb:1b:e2:28:92:31:4b:66:7a:26:02:a4:37:
ba:df:99:02:81:55:73:af:1f:c8:73:b4:da:1a:a1:
7b:9d:c8:2c:35:c8:93:3e:db:8e:37:6a:4e:da:e6:
8d:33:4a:d2:6b:7c:c7:d7:75:40:6c:c5:84:e2:c7:
4b:19:57:6e:05:c1:cc:9d:bd:96:a7:79:00:9d:45:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:13:B2:9E:2A:2D:62:48:81:2B:88:8D:B4:CB:25:77:DC:6F:D2:AB
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/DBOyniotYkiBK4iNtMsld9xv0qs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:c8:cd:a2:e1:ae:b3:4e:f9:fa:bd:cc:8f:4f:35:9f:37:e9:
f7:42:da:97:b2:30:3f:0a:f4:d0:8f:40:65:13:43:04:ef:b6:
9e:e7:d0:b7:56:6f:d6:50:ce:e2:1c:5c:d1:3e:55:c0:dc:4f:
28:30:3d:4b:6c:00:8e:e7:d2:e5:2d:35:6a:8f:92:63:fe:b6:
a8:d1:9d:51:01:45:29:41:46:0b:9c:cd:33:2d:6c:0c:6e:b4:
81:06:b7:3d:96:a7:d4:1a:2c:ec:cc:d4:63:c4:5c:fa:f0:8f:
8a:73:5f:d9:3c:3f:21:59:89:c2:a3:46:a9:55:55:58:82:55:
80:d2:2b:f5:48:92:76:96:7b:b7:69:80:ee:45:1c:7f:26:bf:
e5:19:9e:62:38:3a:85:db:16:6b:62:29:92:2b:aa:3c:49:64:
b7:7d:5e:91:da:9b:1e:98:36:7c:1f:94:c1:76:e1:6c:49:75:
e3:62:53:44:94:81:19:d1:36:7d:06:d3:03:c3:04:65:a9:53:
6b:e0:cb:f1:80:64:db:03:e2:0e:ac:64:ec:f5:e3:8e:2d:5e:
ef:10:be:30:f0:75:76:7c:a2:41:48:9c:c8:0f:2b:af:00:04:
cb:e8:0f:50:e5:2c:72:54:ea:b3:df:ee:a9:aa:e1:32:ba:21:
78:e4:7e:db
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDEwMzEw
MTMwNTVaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBDMTNCMjlFMkEyRDYy
NDg4MTJCODg4REI0Q0IyNTc3REM2RkQyQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3L90seby1dCTiZExzA3C6RYtWS2Y2keo1pL7Q7fAuBLR7w9v7
g9QbBiph+EhD7iuAcfieA39WN5vGNZZLC5osSxY4/bh8Tre+uRIP3vc6wfVgh+0u
6JQ+Rbcz7gZuGoyUfYsmTLL4s0i8iwPVYQxGljWYCGJxXZyA/Pn8vxbZNW/xw6Ia
lS+yw3MkSxswybLQfRDrZ3ANjGsgmSIL5i9afK0rbS/1KxkbuAf3nP4yS9IEIyms
6xviKJIxS2Z6JgKkN7rfmQKBVXOvH8hztNoaoXudyCw1yJM+2443ak7a5o0zStJr
fMfXdUBsxYTix0sZV24FwcydvZaneQCdRWsbAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUDBOyniotYkiBK4iNtMsld9xv0qswHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9EQk95bmlvdFlraUJLNGlOdE1zbGQ5eHYwcXMucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZwIwMA0GCSqGSIb3DQEBCwUAA4IBAQBNyM2i4a6zTvn6vcyPTzWfN+n3QtqX
sjA/CvTQj0BlE0ME77ae59C3Vm/WUM7iHFzRPlXA3E8oMD1LbACO59LlLTVqj5Jj
/rao0Z1RAUUpQUYLnM0zLWwMbrSBBrc9lqfUGizszNRjxFz68I+Kc1/ZPD8hWYnC
o0apVVVYglWA0iv1SJJ2lnu3aYDuRRx/Jr/lGZ5iODqF2xZrYimSK6o8SWS3fV6R
2psemDZ8H5TBduFsSXXjYlNElIEZ0TZ9BtMDwwRlqVNr4MvxgGTbA+IOrGTs9eOO
LV7vEL4w8HV2fKJBSJzIDyuvAATL6A9Q5SxyVOqz3+6pquEyuiF45H7b
-----END CERTIFICATE-----
Generated at Thu May 1 03:26:23 2025 by rpki-client