Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30025/T3mvt5udQCkGFU1e_st9Yg4wA4I.roa
File: T3mvt5udQCkGFU1e_st9Yg4wA4I.roa (raw, json)
Hash identifier: MNfy9xLtxPXkiNCFEcdxfK9oI2R1JzFVOh9ohQwEFes=
Subject key identifier: 4F:79:AF:B7:9B:9D:40:29:06:15:4D:5E:FE:CB:7D:62:0E:30:03:82
Certificate issuer: /CN=4CCDE4740FCD576D3A8EFBF6A4A3B9CF4661D917
Certificate serial: 09
Authority key identifier: 4C:CD:E4:74:0F:CD:57:6D:3A:8E:FB:F6:A4:A3:B9:CF:46:61:D9:17
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TM3kdA_NV206jvv2pKO5z0Zh2Rc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30025/T3mvt5udQCkGFU1e_st9Yg4wA4I.roa
Signing time: Wed 31 Jul 2024 01:19:11 +0000
ROA not before: Wed 31 Jul 2024 01:19:11 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2514
IP address blocks: 2001:2c0::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CCDE4740FCD576D3A8EFBF6A4A3B9CF4661D917
Validity
Not Before: Jul 31 01:19:11 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=4F79AFB79B9D402906154D5EFECB7D620E300382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:c9:d2:44:45:21:79:41:98:80:b0:94:8a:
57:ec:a2:24:b8:ea:51:c1:2b:de:ff:67:40:00:a6:
41:6e:6f:d9:8c:60:87:eb:0b:32:1e:b5:bc:8b:21:
8d:8d:21:72:5b:a5:8b:39:90:83:40:52:b9:10:96:
7a:91:1f:75:92:b4:53:95:04:04:f6:e5:d3:87:8b:
80:9d:63:cb:0a:25:b2:a9:d5:1e:e4:67:82:50:34:
84:d2:27:ad:a1:25:f1:82:b5:c1:67:89:2a:76:15:
7b:31:ea:98:9c:61:cf:f4:ec:59:1a:ed:64:ab:ca:
55:b5:95:58:37:7f:b8:8b:39:ba:d8:5c:45:b2:2c:
6e:77:df:8f:47:8d:e6:f6:02:59:b1:d0:3c:aa:3d:
b1:52:81:7f:29:ca:32:2c:bf:4a:5e:53:fc:c0:c2:
1b:59:70:2c:e6:5b:5f:3d:89:e2:49:7c:33:f3:6c:
aa:2c:aa:51:6c:e4:83:8d:37:6f:20:26:74:8a:86:
e5:77:e3:3f:33:49:fb:19:6a:93:cd:40:42:bd:04:
6e:27:39:4c:00:5f:17:75:10:8c:2b:61:cd:29:60:
e7:ea:64:73:57:fe:0b:d8:de:52:50:a8:88:dc:80:
6c:5c:7b:4f:de:ed:b9:25:a3:da:0e:ab:41:e8:7e:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:79:AF:B7:9B:9D:40:29:06:15:4D:5E:FE:CB:7D:62:0E:30:03:82
X509v3 Authority Key Identifier:
keyid:4C:CD:E4:74:0F:CD:57:6D:3A:8E:FB:F6:A4:A3:B9:CF:46:61:D9:17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30025/TM3kdA_NV206jvv2pKO5z0Zh2Rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TM3kdA_NV206jvv2pKO5z0Zh2Rc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30025/T3mvt5udQCkGFU1e_st9Yg4wA4I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:2c0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:53:5d:21:b2:8d:bb:26:25:2b:83:fa:2b:ca:97:8d:39:d8:
ce:4a:d8:56:97:28:ca:51:70:a3:0d:a3:c5:cf:fe:01:ec:49:
10:19:c0:3c:d6:47:23:bb:a8:8d:0b:8e:53:16:ac:9c:50:56:
4d:61:cf:e1:d2:c9:61:c8:91:ea:f1:26:06:81:40:db:b8:a1:
20:8c:3a:f0:ff:63:63:90:88:99:46:9f:3d:aa:da:0f:e1:25:
ab:3d:65:33:ae:49:71:30:56:cc:83:a7:03:97:5f:24:56:a9:
97:a0:40:40:53:83:5a:e3:0f:8f:15:d6:cf:70:6e:c5:ff:4d:
9b:df:4a:bd:fd:9b:06:cd:01:83:3c:e1:e2:1b:83:e4:2b:0a:
78:cf:fd:ce:cf:51:75:74:7a:6c:9e:ff:a1:a1:ce:e3:af:23:
8e:3d:2b:e3:54:68:ee:5b:66:fc:80:f0:41:f6:c3:bb:85:56:
cf:89:85:60:1c:02:c3:07:8c:6c:d3:7d:29:99:72:71:cb:1a:
f6:51:e4:82:d7:34:5c:59:1b:0e:93:92:0a:86:a7:0a:ae:ff:
a5:35:93:ef:ec:f6:72:2d:77:27:e0:3e:a3:8f:ba:07:c9:70:
4a:ba:57:42:c3:b5:e7:39:4d:3c:37:19:34:2a:b3:78:09:0e:
8a:01:b0:84
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Q0NE
RTQ3NDBGQ0Q1NzZEM0E4RUZCRjZBNEEzQjlDRjQ2NjFEOTE3MB4XDTI0MDczMTAx
MTkxMVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoNEY3OUFGQjc5QjlENDAy
OTA2MTU0RDVFRkVDQjdENjIwRTMwMDM4MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKXXydJERSF5QZiAsJSKV+yiJLjqUcEr3v9nQACmQW5v2Yxgh+sL
Mh61vIshjY0hclulizmQg0BSuRCWepEfdZK0U5UEBPbl04eLgJ1jywolsqnVHuRn
glA0hNInraEl8YK1wWeJKnYVezHqmJxhz/TsWRrtZKvKVbWVWDd/uIs5uthcRbIs
bnffj0eN5vYCWbHQPKo9sVKBfynKMiy/Sl5T/MDCG1lwLOZbXz2J4kl8M/Nsqiyq
UWzkg403byAmdIqG5XfjPzNJ+xlqk81AQr0Ebic5TABfF3UQjCthzSlg5+pkc1f+
C9jeUlCoiNyAbFx7T97tuSWj2g6rQeh+S2kCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRPea+3m51AKQYVTV7+y31iDjADgjAfBgNVHSMEGDAWgBRMzeR0D81XbTqO+/ak
o7nPRmHZFzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMjUvVE0za2RBX05WMjA2anZ2MnBLTzV6MFpoMlJjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVE0za2RBX05WMjA2anZ2MnBLTzV6
MFpoMlJjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDI1L1QzbXZ0NXVkUUNrR0ZVMWVfc3Q5WWc0d0E0SS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQLAMA0GCSqGSIb3DQEBCwUAA4IBAQCLU10hso27JiUrg/orypeN
OdjOSthWlyjKUXCjDaPFz/4B7EkQGcA81kcju6iNC45TFqycUFZNYc/h0slhyJHq
8SYGgUDbuKEgjDrw/2NjkIiZRp89qtoP4SWrPWUzrklxMFbMg6cDl18kVqmXoEBA
U4Na4w+PFdbPcG7F/02b30q9/ZsGzQGDPOHiG4PkKwp4z/3Oz1F1dHpsnv+hoc7j
ryOOPSvjVGjuW2b8gPBB9sO7hVbPiYVgHALDB4xs030pmXJxyxr2UeSC1zRcWRsO
k5IKhqcKrv+lNZPv7PZyLXcn4D6jj7oHyXBKuldCw7XnOU08Nxk0KrN4CQ6KAbCE
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:37:57 2025 by rpki-client