Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3Z7AYpzgAI7VkIE7sWi9mgNGLjc.roa
File: 3Z7AYpzgAI7VkIE7sWi9mgNGLjc.roa (raw, json)
Hash identifier: HWNZr4s13ENrg5VWCDnWPkb/9uOPnkkPM4zreQavRYU=
Subject key identifier: DD:9E:C0:62:9C:E0:00:8E:D5:90:81:3B:B1:68:BD:9A:03:46:2E:37
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0779
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3Z7AYpzgAI7VkIE7sWi9mgNGLjc.roa
Signing time: Tue 30 Apr 2024 02:04:37 +0000
ROA not before: Tue 30 Apr 2024 02:04:37 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913 (0x779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:04:37 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=DD9EC0629CE0008ED590813BB168BD9A03462E37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:c3:97:ef:80:1e:96:9f:c4:19:31:0b:4f:
6a:74:34:ad:2b:ad:ef:0d:8c:e0:aa:c8:e9:06:68:
4e:45:91:2a:9e:87:83:95:21:ef:23:7e:6b:48:53:
91:c5:1a:b7:92:21:1c:f6:28:e8:19:f8:bb:31:45:
62:26:c7:c6:6f:28:6d:bf:4e:15:d5:49:2e:d4:bc:
94:68:b7:c6:5a:55:e1:b4:bc:a0:b3:eb:f4:57:32:
f3:fd:d1:ba:0d:8e:9e:fe:8c:3d:c6:c8:3c:48:e8:
99:fa:94:47:5f:5f:6a:51:dc:8e:95:9e:fe:dd:dd:
c0:f6:ed:0a:22:58:bc:20:b3:cc:00:ed:17:53:85:
03:1d:e1:9f:c1:a0:a3:7a:f7:a1:fd:84:72:c1:7d:
ef:a3:b9:57:7a:a1:17:87:73:c1:32:35:7b:e8:d7:
73:73:2f:c8:e1:9d:5f:5a:84:c6:ed:a9:b5:79:a0:
4c:08:4a:0c:d0:93:bf:77:62:b1:88:a2:2f:27:7d:
ef:06:8f:82:e0:cc:c5:6a:b5:93:82:81:cd:46:43:
91:9b:1a:1b:4b:63:1e:fd:b8:fd:78:e6:5f:c4:16:
49:46:6d:a9:54:cd:5a:7d:1f:60:08:44:11:84:55:
a2:db:96:ec:ab:70:ad:c3:4e:1f:fa:7f:ac:94:9f:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:C0:62:9C:E0:00:8E:D5:90:81:3B:B1:68:BD:9A:03:46:2E:37
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3Z7AYpzgAI7VkIE7sWi9mgNGLjc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.234.0/23
Signature Algorithm: sha256WithRSAEncryption
83:f2:f0:01:9e:7f:32:86:c2:29:b4:2c:ef:d5:b7:e5:ab:b0:
33:38:0b:74:bc:76:ed:f4:d5:ca:e9:0a:49:58:ff:38:8b:cc:
5e:ca:0d:90:33:08:7c:ed:0b:a9:1b:b3:67:f6:00:4e:c1:93:
7c:76:46:fe:2a:25:07:df:2b:bb:45:07:f2:8c:d7:2a:d0:80:
55:e0:7f:f6:00:fd:82:36:5f:04:51:5c:da:6d:cd:fd:f0:10:
52:d6:d7:f5:79:1e:f4:ae:48:e0:bc:2b:53:36:2f:07:a9:d7:
4f:26:64:ef:d4:57:a3:2f:7d:5b:91:fa:3e:3a:11:b8:e5:2e:
33:64:a1:e2:3a:b0:b2:11:4d:ac:46:e8:f1:c5:16:85:12:4b:
74:0e:e5:e5:da:0d:b1:7f:ae:18:51:a3:e5:19:01:ec:a2:00:
63:ea:b0:93:a4:b0:0a:26:9b:69:4b:48:3f:43:f4:ee:e9:d0:
89:e5:7b:c9:1c:29:88:0d:87:3c:11:3e:a6:37:ee:e7:7d:d5:
4f:59:21:73:71:29:7b:d3:62:d8:68:47:40:4c:a6:96:aa:86:
b4:54:fb:92:fb:47:c8:08:34:9d:b5:86:b1:26:4b:4e:b1:7c:
c8:fe:a1:f5:69:b4:0a:17:67:82:e4:61:36:76:fc:6b:db:91:
29:30:4e:28
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjA0MzdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEREOUVDMDYyOUNFMDAw
OEVENTkwODEzQkIxNjhCRDlBMDM0NjJFMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqW8OX74Aelp/EGTELT2p0NK0rre8NjOCqyOkGaE5FkSqeh4OV
Ie8jfmtIU5HFGreSIRz2KOgZ+LsxRWImx8ZvKG2/ThXVSS7UvJRot8ZaVeG0vKCz
6/RXMvP90boNjp7+jD3GyDxI6Jn6lEdfX2pR3I6Vnv7d3cD27QoiWLwgs8wA7RdT
hQMd4Z/BoKN696H9hHLBfe+juVd6oReHc8EyNXvo13NzL8jhnV9ahMbtqbV5oEwI
SgzQk793YrGIoi8nfe8Gj4LgzMVqtZOCgc1GQ5GbGhtLYx79uP145l/EFklGbalU
zVp9H2AIRBGEVaLbluyrcK3DTh/6f6yUn841AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU3Z7AYpzgAI7VkIE7sWi9mgNGLjcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzNaN0FZcHpnQUk3VmtJRTdzV2k5bWdOR0xqYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBS+owDQYJKoZIhvcNAQELBQADggEBAIPy8AGefzKGwim0LO/Vt+WrsDM4
C3S8du301crpCklY/ziLzF7KDZAzCHztC6kbs2f2AE7Bk3x2Rv4qJQffK7tFB/KM
1yrQgFXgf/YA/YI2XwRRXNptzf3wEFLW1/V5HvSuSOC8K1M2Lwep108mZO/UV6Mv
fVuR+j46EbjlLjNkoeI6sLIRTaxG6PHFFoUSS3QO5eXaDbF/rhhRo+UZAeyiAGPq
sJOksAomm2lLSD9D9O7p0Inle8kcKYgNhzwRPqY37ud91U9ZIXNxKXvTYthoR0BM
ppaqhrRU+5L7R8gINJ21hrEmS06xfMj+ofVptAoXZ4LkYTZ2/GvbkSkwTig=
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:21:06 2025 by rpki-client