Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/nbJhDqh0Cp0Sh3iXEAS7-TMF9_U.roa
File: nbJhDqh0Cp0Sh3iXEAS7-TMF9_U.roa (raw, json)
Hash identifier: eQcQgtf8UdsxuLrQ2Ngxm4PoA10/NI8nLPszhuZTYws=
Subject key identifier: 9D:B2:61:0E:A8:74:0A:9D:12:87:78:97:10:04:BB:F9:33:05:F7:F5
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 8E
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nbJhDqh0Cp0Sh3iXEAS7-TMF9_U.roa
Signing time: Thu 31 Oct 2024 01:30:50 +0000
ROA not before: Thu 31 Oct 2024 01:30:50 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 2527
IP address blocks: 147.192.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Oct 31 01:30:50 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=9DB2610EA8740A9D128778971004BBF93305F7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:c0:d8:4b:ef:2d:01:05:a1:d3:0a:6a:1b:
38:23:37:f3:49:c6:26:7f:d0:53:f7:d7:5d:8b:3a:
de:5b:4a:a3:2c:ec:39:59:f0:8b:37:57:f1:a9:3f:
81:bc:6c:f0:83:4e:07:04:ab:de:a4:4f:ab:da:b1:
cb:dd:e8:2b:3c:4a:01:7a:c7:4b:f3:e8:18:c3:8b:
9f:65:7c:b0:ea:79:45:ec:3b:b2:b5:b1:f9:c7:ed:
8c:ff:bd:02:82:31:f3:a0:84:a9:2b:8d:f6:79:e1:
8f:01:32:f2:2d:86:49:31:61:73:66:63:d2:b0:e4:
41:4c:22:b4:33:4d:f8:19:c1:86:c4:ee:cf:ea:a3:
7d:04:ef:99:67:52:81:35:0b:ca:7d:4e:bd:1f:5e:
2b:76:d0:34:53:1e:23:39:6a:cd:23:70:33:ae:87:
3c:85:2a:d9:90:41:54:89:89:a4:e1:7e:77:f3:2d:
c2:ff:07:74:5b:da:91:e8:d3:ba:9e:a6:9c:23:cb:
50:5e:8c:0f:7b:69:2e:bc:cd:d7:35:20:ad:7f:14:
bc:3e:4c:2e:5b:eb:e5:23:5c:89:6b:e4:ec:f3:bc:
0c:7c:f3:2e:cb:8f:4c:fd:cb:e3:5c:9f:e6:1e:55:
d3:f8:e4:75:bb:23:c3:6b:2b:d0:9c:1a:e2:77:b5:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:61:0E:A8:74:0A:9D:12:87:78:97:10:04:BB:F9:33:05:F7:F5
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nbJhDqh0Cp0Sh3iXEAS7-TMF9_U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:df:ff:45:fe:39:19:a1:10:a9:4e:38:20:23:cf:40:1e:e7:
a2:12:dd:01:90:2f:4f:bc:5f:4a:bc:7a:af:ba:92:34:2f:89:
78:e0:66:38:2b:14:bd:17:b4:d9:c1:f3:00:16:6e:f4:c7:39:
0b:24:44:6f:e2:09:26:78:7b:f3:9d:8d:1f:ee:57:1a:6c:a6:
da:08:7b:a9:c4:e1:54:b9:cb:19:d0:8f:9d:94:54:4a:2a:07:
0e:47:fa:23:8b:c7:42:57:92:30:b4:4b:ba:f0:4b:81:2e:5d:
4d:58:a9:95:c9:eb:dd:20:23:ea:22:8f:22:50:51:8e:89:96:
3f:90:38:1f:71:bb:24:0c:cc:2e:1f:56:02:d3:41:0c:44:a2:
12:c9:e1:be:9d:1c:c5:df:ed:b3:a4:c7:38:13:4b:2b:7d:73:
98:2a:fc:ae:d2:dd:8a:e6:ed:f0:a6:76:c7:50:08:c0:05:f8:
99:d5:ac:f5:eb:a4:9a:ca:45:82:aa:b8:83:69:71:86:ee:eb:
e1:82:57:e0:f6:08:da:ad:f2:95:d9:2d:c0:06:96:29:c1:b8:
ce:03:9d:f4:a6:5a:d1:6a:cd:6c:b2:e7:3d:7c:a2:c7:54:26:
24:75:ba:41:e8:12:51:aa:ea:de:80:11:17:0f:9d:44:80:70:
27:04:5f:0d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD
QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNDEwMzEw
MTMwNTBaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlEQjI2MTBFQTg3NDBB
OUQxMjg3Nzg5NzEwMDRCQkY5MzMwNUY3RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRN8DYS+8tAQWh0wpqGzgjN/NJxiZ/0FP3112LOt5bSqMs7DlZ
8Is3V/GpP4G8bPCDTgcEq96kT6vascvd6Cs8SgF6x0vz6BjDi59lfLDqeUXsO7K1
sfnH7Yz/vQKCMfOghKkrjfZ54Y8BMvIthkkxYXNmY9Kw5EFMIrQzTfgZwYbE7s/q
o30E75lnUoE1C8p9Tr0fXit20DRTHiM5as0jcDOuhzyFKtmQQVSJiaThfnfzLcL/
B3Rb2pHo07qeppwjy1BejA97aS68zdc1IK1/FLw+TC5b6+UjXIlr5OzzvAx88y7L
j0z9y+Ncn+YeVdP45HW7I8NrK9CcGuJ3tW0nAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUnbJhDqh0Cp0Sh3iXEAS7+TMF9/UwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v
/yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD
QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9uYkpoRHFoMENwMFNoM2lYRUFTNy1UTUY5X1Uucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMAk8AwDQYJKoZIhvcNAQELBQADggEBAH7f/0X+ORmhEKlOOCAjz0Ae56IS3QGQ
L0+8X0q8eq+6kjQviXjgZjgrFL0XtNnB8wAWbvTHOQskRG/iCSZ4e/OdjR/uVxps
ptoIe6nE4VS5yxnQj52UVEoqBw5H+iOLx0JXkjC0S7rwS4EuXU1YqZXJ690gI+oi
jyJQUY6Jlj+QOB9xuyQMzC4fVgLTQQxEohLJ4b6dHMXf7bOkxzgTSyt9c5gq/K7S
3Yrm7fCmdsdQCMAF+JnVrPXrpJrKRYKquINpcYbu6+GCV+D2CNqt8pXZLcAGlinB
uM4DnfSmWtFqzWyy5z18osdUJiR1ukHoElGq6t6AERcPnUSAcCcEXw0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:24:48 2025 by rpki-client