Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SHNLQCZRNzMHhRR278196vmUFV0.roa
File: SHNLQCZRNzMHhRR278196vmUFV0.roa (raw, json)
Hash identifier: KW0SeDFVWDCdjvDQDjaHrsa3jmevAmKE34Hq6UX6o08=
Subject key identifier: 48:73:4B:40:26:51:37:33:07:85:14:76:EF:CD:7D:EA:F9:94:15:5D
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0206
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SHNLQCZRNzMHhRR278196vmUFV0.roa
Signing time: Mon 30 Sep 2024 01:29:58 +0000
ROA not before: Mon 30 Sep 2024 01:29:58 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 7684
IP address blocks: 49.212.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 30 01:29:58 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=48734B402651373307851476EFCD7DEAF994155D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:10:47:77:f7:31:1b:4a:0b:e6:d7:bc:ae:
51:52:eb:8d:8d:4a:d0:b6:c2:7d:f6:46:ff:18:f1:
08:70:75:f4:7e:49:c4:c3:67:08:d0:a2:75:03:01:
31:94:98:83:30:88:15:49:8e:72:cc:61:ab:fd:6c:
2e:81:74:a8:de:d0:14:20:33:2a:cb:07:51:89:b0:
89:d5:af:86:56:39:ae:c4:20:06:cc:9c:e1:08:8f:
a1:9d:49:ae:ff:bb:a4:80:4c:5b:71:9a:76:1c:01:
9e:54:50:77:7e:52:d2:0c:55:07:39:83:b8:68:42:
a9:3c:d7:75:b9:4a:b3:c5:5c:d8:d2:c0:70:1e:ab:
36:6d:f7:de:50:d6:12:7c:5f:80:b7:d3:71:df:39:
c5:46:b6:6b:36:9c:6f:99:8b:c8:e1:5f:ae:1e:a7:
58:e4:ad:19:86:62:2f:4a:d5:94:80:22:8a:18:51:
00:60:a1:90:9d:27:97:3f:e6:c1:1a:6e:fd:c5:38:
60:96:0a:a9:e3:d9:d9:c9:35:cf:7a:fd:13:ca:ad:
dd:c2:17:35:ea:98:b3:c1:ab:49:e1:3e:d2:76:c8:
a4:ac:50:a9:c3:51:ff:ab:aa:06:39:8d:03:92:b8:
ea:87:6a:cd:45:af:7b:d6:a0:1d:a5:be:e8:3a:d9:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:73:4B:40:26:51:37:33:07:85:14:76:EF:CD:7D:EA:F9:94:15:5D
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SHNLQCZRNzMHhRR278196vmUFV0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0b:eb:fb:57:21:1a:9f:45:b8:0b:a4:c1:6f:7e:80:74:5d:
cb:bd:c9:1a:e7:ef:cf:b0:08:6e:35:b0:75:3c:c3:e0:05:78:
67:2d:4b:39:af:c1:be:48:cb:6e:a2:b0:94:3f:50:8e:9b:ca:
45:66:0c:33:5f:7c:71:14:2c:43:33:f2:b4:f2:04:f5:04:1f:
4f:c7:aa:15:86:e4:90:2f:cc:8f:04:2b:d6:33:7c:2d:f2:66:
0b:79:26:4e:98:f2:55:2f:89:1e:a4:25:e7:47:e6:ac:82:78:
2a:c8:79:62:bb:2a:12:96:d9:87:e3:80:99:90:c3:e9:c5:8a:
7c:fd:74:2b:63:18:5c:e6:84:ce:29:70:db:f9:fe:1f:3b:1e:
0b:0c:fb:30:3c:6e:d6:4d:46:78:60:17:0a:da:97:d7:e1:35:
7d:60:ea:19:7d:d6:48:22:8f:67:90:04:f2:f2:88:dd:04:d6:
5e:2f:be:e7:ff:f7:0c:0b:bc:6b:77:8a:49:24:21:c6:63:0c:
3a:d7:82:00:c7:c6:81:b4:ce:e2:42:76:77:9a:b9:6d:54:ac:
e6:67:ab:18:4f:1a:37:ec:7a:85:35:31:ae:cb:04:c3:14:4f:
c3:d0:cf:a9:8b:bf:77:9f:94:de:26:3b:a7:2d:77:ec:7f:db:
0b:ce:b6:f1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA5MzAw
MTI5NThaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ4NzM0QjQwMjY1MTM3
MzMwNzg1MTQ3NkVGQ0Q3REVBRjk5NDE1NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZcBBHd/cxG0oL5te8rlFS642NStC2wn32Rv8Y8QhwdfR+ScTD
ZwjQonUDATGUmIMwiBVJjnLMYav9bC6BdKje0BQgMyrLB1GJsInVr4ZWOa7EIAbM
nOEIj6GdSa7/u6SATFtxmnYcAZ5UUHd+UtIMVQc5g7hoQqk813W5SrPFXNjSwHAe
qzZt995Q1hJ8X4C303HfOcVGtms2nG+Zi8jhX64ep1jkrRmGYi9K1ZSAIooYUQBg
oZCdJ5c/5sEabv3FOGCWCqnj2dnJNc96/RPKrd3CFzXqmLPBq0nhPtJ2yKSsUKnD
Uf+rqgY5jQOSuOqHas1Fr3vWoB2lvug62XcvAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUSHNLQCZRNzMHhRR278196vmUFV0wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9TSE5MUUNaUk56TUhoUlIyNzgxOTZ2bVVGVjAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMdSoMA0GCSqGSIb3DQEBCwUAA4IBAQB7C+v7VyEan0W4C6TBb36A
dF3Lvcka5+/PsAhuNbB1PMPgBXhnLUs5r8G+SMtuorCUP1COm8pFZgwzX3xxFCxD
M/K08gT1BB9Px6oVhuSQL8yPBCvWM3wt8mYLeSZOmPJVL4kepCXnR+asgngqyHli
uyoSltmH44CZkMPpxYp8/XQrYxhc5oTOKXDb+f4fOx4LDPswPG7WTUZ4YBcK2pfX
4TV9YOoZfdZIIo9nkATy8ojdBNZeL77n//cMC7xrd4pJJCHGYww614IAx8aBtM7i
QnZ3mrltVKzmZ6sYTxo37HqFNTGuywTDFE/D0M+pi793n5TeJjunLXfsf9sLzrbx
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:32:36 2025 by rpki-client