Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BYBJrUVuVGDLUnw7lODgOMJlXrY.roa
File: BYBJrUVuVGDLUnw7lODgOMJlXrY.roa (raw, json)
Hash identifier: ANZBGR96EcBcbd4MsUD3vjUHVyhJoSOHms0RwRR+1Sc=
Subject key identifier: 05:80:49:AD:45:6E:54:60:CB:52:7C:3B:94:E0:E0:38:C2:65:5E:B6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A4C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BYBJrUVuVGDLUnw7lODgOMJlXrY.roa
Signing time: Sun 30 Jun 2024 01:48:29 +0000
ROA not before: Sun 30 Jun 2024 01:48:29 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 110.161.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2636 (0xa4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:48:29 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=058049AD456E5460CB527C3B94E0E038C2655EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:d5:51:43:d0:23:ef:4a:f8:34:47:54:46:
36:53:e3:87:4e:ca:a6:d7:f1:61:8a:37:ee:01:f4:
30:a9:fd:9c:9b:f8:a1:f1:f3:14:38:aa:cc:fa:1f:
7f:1a:7f:7e:87:f0:a8:7e:c4:59:40:bd:82:a4:47:
9a:76:6e:fd:f9:7c:d5:69:5e:26:aa:2a:b4:6f:b2:
f7:6b:aa:7c:1b:85:99:9d:96:13:26:85:7c:47:c6:
3a:a8:d0:9a:97:b2:3d:f3:c6:f4:e7:8a:78:8d:31:
79:a7:45:f6:71:25:1a:9e:72:a1:06:22:11:bb:ba:
19:df:c7:7d:f8:12:48:5b:19:31:fb:d9:2e:11:94:
db:03:ea:bd:e6:64:a7:e8:9f:14:60:2e:11:0e:be:
02:64:d3:73:3a:c7:51:71:6d:b1:85:b7:ac:d2:2b:
34:58:52:62:18:a7:17:b6:3d:ee:d8:40:ff:2a:89:
9e:9e:e0:b3:63:fc:07:a6:4a:67:01:65:f8:2e:45:
3b:41:80:3a:2a:15:a5:2d:8d:ba:73:4f:40:fe:a2:
2a:51:52:49:31:b5:25:20:cf:8b:7a:0d:35:dc:7b:
48:82:4f:32:da:98:c8:b7:71:ea:6a:d9:64:91:a3:
66:ad:17:25:27:b8:85:b1:f3:0d:1a:33:9f:7a:eb:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:80:49:AD:45:6E:54:60:CB:52:7C:3B:94:E0:E0:38:C2:65:5E:B6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BYBJrUVuVGDLUnw7lODgOMJlXrY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.161.204.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:9f:5a:d1:15:39:f5:49:74:5a:7b:4c:3d:d4:d2:88:42:4f:
d7:89:a9:87:d6:13:8c:03:ed:6a:6e:06:a7:f5:b9:75:8a:fa:
83:bf:06:68:23:1e:64:fd:6c:79:3c:1f:39:59:8c:33:d1:39:
fe:3b:d1:f5:db:59:d1:71:af:44:d7:1f:89:41:86:cc:20:47:
87:d7:57:4b:a6:25:e9:d2:f7:9e:52:40:e5:2a:87:9e:7c:e8:
55:f5:ac:ec:80:6e:1c:6c:de:bc:62:9f:ca:4b:99:87:fe:ee:
ba:e8:3e:b7:af:9f:50:b3:33:59:d4:ed:94:a5:c4:9c:80:9e:
6b:18:1f:31:ae:26:45:72:43:34:56:70:af:e1:3e:ea:de:9f:
77:5c:64:5b:95:dc:1f:4a:50:15:9c:a8:40:68:80:72:5d:d3:
6b:75:e1:32:b5:d3:ee:45:ab:25:f3:90:11:16:c0:ac:68:80:
bd:31:73:51:90:27:c7:65:ef:9e:c0:6d:55:09:cd:cf:cd:20:
fa:2f:89:e6:f6:d5:96:7f:62:11:1f:4d:bb:a1:23:a9:c1:f1:
ab:0e:6a:ba:2c:33:a9:9e:c4:01:60:c5:c0:98:51:a3:0b:c8:
16:f7:06:e3:19:a9:00:99:3b:ae:15:c7:85:45:3a:bd:1e:4f:
1b:1a:ea:7e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTQ4MjlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDA1ODA0OUFENDU2RTU0
NjBDQjUyN0MzQjk0RTBFMDM4QzI2NTVFQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8/dVRQ9Aj70r4NEdURjZT44dOyqbX8WGKN+4B9DCp/Zyb+KHx
8xQ4qsz6H38af36H8Kh+xFlAvYKkR5p2bv35fNVpXiaqKrRvsvdrqnwbhZmdlhMm
hXxHxjqo0JqXsj3zxvTniniNMXmnRfZxJRqecqEGIhG7uhnfx334EkhbGTH72S4R
lNsD6r3mZKfonxRgLhEOvgJk03M6x1FxbbGFt6zSKzRYUmIYpxe2Pe7YQP8qiZ6e
4LNj/AemSmcBZfguRTtBgDoqFaUtjbpzT0D+oipRUkkxtSUgz4t6DTXce0iCTzLa
mMi3cepq2WSRo2atFyUnuIWx8w0aM5966+YlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUBYBJrUVuVGDLUnw7lODgOMJlXrYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0JZQkpyVVZ1VkdETFVudzdsT0RnT01KbFhyWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFuocwwDQYJKoZIhvcNAQELBQADggEBAKyfWtEVOfVJdFp7TD3U0ohCT9eJ
qYfWE4wD7WpuBqf1uXWK+oO/BmgjHmT9bHk8HzlZjDPROf470fXbWdFxr0TXH4lB
hswgR4fXV0umJenS955SQOUqh5586FX1rOyAbhxs3rxin8pLmYf+7rroPrevn1Cz
M1nU7ZSlxJyAnmsYHzGuJkVyQzRWcK/hPuren3dcZFuV3B9KUBWcqEBogHJd02t1
4TK10+5FqyXzkBEWwKxogL0xc1GQJ8dl757AbVUJzc/NIPovieb21ZZ/YhEfTbuh
I6nB8asOarosM6mexAFgxcCYUaMLyBb3BuMZqQCZO64Vx4VFOr0eTxsa6n4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:33:56 2025 by rpki-client