Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/kqJXiTO0AC14fOcjKE6PT-RfOSY.roa
File: kqJXiTO0AC14fOcjKE6PT-RfOSY.roa (raw, json)
Hash identifier: 0VZin01P9hIfE2R8k8W0H5cvEMAzY1Nm41tB95RMAoc=
Subject key identifier: 92:A2:57:89:33:B4:00:2D:78:7C:E7:23:28:4E:8F:4F:E4:5F:39:26
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: 3F
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/kqJXiTO0AC14fOcjKE6PT-RfOSY.roa
Signing time: Wed 31 Jul 2024 01:00:55 +0000
ROA not before: Wed 31 Jul 2024 01:00:55 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2514
IP address blocks: 133.130.128.0/17 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Jul 31 01:00:55 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=92A2578933B4002D787CE723284E8F4FE45F3926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:77:66:bf:ca:20:21:43:89:4e:2a:b5:ed:2a:
34:8f:d6:14:23:be:a1:75:b6:d4:73:18:f2:09:24:
f7:7e:5f:e0:5b:e5:2b:0e:a5:c1:0d:0b:c1:7f:7e:
fe:b4:49:a0:b3:27:cd:84:70:01:70:20:30:e6:0d:
a6:d4:ed:37:10:0c:d3:af:78:ba:62:9f:36:58:a2:
35:ae:45:23:ec:6a:2d:7b:c9:7a:f2:e3:0d:c6:c7:
97:64:30:f0:fc:df:3a:a2:70:82:38:8e:67:48:5e:
1e:9f:ed:65:96:66:f7:11:82:71:0d:6f:4c:c0:10:
8a:11:0f:9e:39:72:ee:13:4a:86:d4:3e:ea:bf:66:
5d:72:ed:29:db:2e:76:6a:21:43:b3:87:1a:fb:96:
17:e4:8f:53:67:89:68:b4:e8:67:c0:45:a7:8b:b7:
62:ac:f7:89:d3:9f:89:a6:84:3f:58:f6:0e:6f:48:
d2:f3:90:cc:99:50:75:66:c9:b8:35:01:c7:c3:a2:
29:e5:9d:e4:44:d6:95:c6:dc:4c:b5:9c:e3:6a:20:
8a:72:30:ca:53:9b:69:ff:2a:2a:96:ce:bb:fc:c9:
2b:bf:26:20:1d:9c:2a:0b:70:92:ff:ed:bc:db:38:
01:bc:10:7a:12:45:b1:49:60:aa:64:d2:69:b3:59:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:57:89:33:B4:00:2D:78:7C:E7:23:28:4E:8F:4F:E4:5F:39:26
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/kqJXiTO0AC14fOcjKE6PT-RfOSY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.130.128.0/17
Signature Algorithm: sha256WithRSAEncryption
69:15:7b:cc:34:d1:22:72:2a:17:4a:91:66:6c:44:d4:26:ce:
24:20:7b:b5:22:76:3f:5e:00:aa:a4:35:2f:ba:ef:68:9c:1b:
0d:09:3e:b0:a5:c7:20:76:c2:d7:a1:1b:0e:2d:78:b7:c6:51:
e7:eb:70:6b:b6:92:a3:d9:ae:f0:ae:81:45:17:bd:f1:bb:9c:
a4:92:8c:3d:3d:b9:e5:81:71:9c:ca:ba:69:b5:60:b3:44:86:
80:ce:df:17:8e:f0:35:64:73:c3:6d:50:2b:94:64:5a:be:70:
16:68:9e:4e:2d:75:b7:5d:f2:d0:73:b0:a9:01:15:df:69:74:
a6:00:b6:a6:c1:ad:ae:74:7e:0f:5b:c1:7c:4c:57:f5:0a:8c:
38:0b:1c:f7:1c:6d:8e:36:7d:0a:52:5f:90:9a:c5:06:24:1e:
de:be:41:33:ef:ae:76:c7:53:b7:3d:2d:ec:ed:d2:c3:d1:e5:
fb:a8:76:19:ff:77:dd:a3:1a:26:01:99:67:a0:85:36:53:39:
33:9d:9d:a2:9e:5e:f3:a8:66:5d:e4:2c:b4:f0:f2:23:1f:e7:
6a:eb:f7:26:3c:88:f5:e3:5e:ff:07:02:23:31:73:fb:ee:ec:
c6:a4:9c:aa:3b:4a:41:74:9e:10:9f:4e:73:db:41:a6:9c:8b:
dc:a1:6e:b4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB
NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI0MDczMTAx
MDA1NVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoOTJBMjU3ODkzM0I0MDAy
RDc4N0NFNzIzMjg0RThGNEZFNDVGMzkyNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPB3Zr/KICFDiU4qte0qNI/WFCO+oXW21HMY8gkk935f4FvlKw6l
wQ0LwX9+/rRJoLMnzYRwAXAgMOYNptTtNxAM0694umKfNliiNa5FI+xqLXvJevLj
DcbHl2Qw8PzfOqJwgjiOZ0heHp/tZZZm9xGCcQ1vTMAQihEPnjly7hNKhtQ+6r9m
XXLtKdsudmohQ7OHGvuWF+SPU2eJaLToZ8BFp4u3Yqz3idOfiaaEP1j2Dm9I0vOQ
zJlQdWbJuDUBx8OiKeWd5ETWlcbcTLWc42oginIwylObaf8qKpbOu/zJK78mIB2c
Kgtwkv/tvNs4AbwQehJFsUlgqmTSabNZ9JMCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBSSoleJM7QALXh85yMoTo9P5F85JjAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ
EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz
RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L2txSlhpVE8wQUMxNGZPY2pLRTZQVC1SZk9TWS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAeFgoAwDQYJKoZIhvcNAQELBQADggEBAGkVe8w00SJyKhdKkWZsRNQmziQge7Ui
dj9eAKqkNS+672icGw0JPrClxyB2wtehGw4teLfGUefrcGu2kqPZrvCugUUXvfG7
nKSSjD09ueWBcZzKumm1YLNEhoDO3xeO8DVkc8NtUCuUZFq+cBZonk4tdbdd8tBz
sKkBFd9pdKYAtqbBra50fg9bwXxMV/UKjDgLHPccbY42fQpSX5CaxQYkHt6+QTPv
rnbHU7c9Lezt0sPR5fuodhn/d92jGiYBmWeghTZTOTOdnaKeXvOoZl3kLLTw8iMf
52rr9yY8iPXjXv8HAiMxc/vu7MaknKo7SkF0nhCfTnPbQaaci9yhbrQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:35:25 2025 by rpki-client