Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxUS7gciZ7TOYKYgS-d5VrJIL2o.roa
File: GxUS7gciZ7TOYKYgS-d5VrJIL2o.roa (raw, json)
Hash identifier: A8NZMSpJIpuo+ACIFvHP1kLzNoG900BnDkZT923s/Q0=
Subject key identifier: 1B:15:12:EE:07:22:67:B4:CE:60:A6:20:4B:E7:79:56:B2:48:2F:6A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0ACB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxUS7gciZ7TOYKYgS-d5VrJIL2o.roa
Signing time: Fri 22 Nov 2024 06:23:53 +0000
ROA not before: Fri 22 Nov 2024 06:23:53 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 9605
IP address blocks: 49.109.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2763 (0xacb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Nov 22 06:23:53 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=1B1512EE072267B4CE60A6204BE77956B2482F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:68:23:6f:c2:bf:ce:0d:34:bd:b3:42:62:d0:
f0:0d:1b:01:b0:1a:3c:74:2a:24:0f:d6:ac:b6:03:
7f:77:01:09:6f:08:eb:35:78:c4:3f:fd:14:ad:f2:
a8:b7:ce:37:ed:7d:26:9b:81:45:c4:71:48:4f:9c:
ff:96:05:34:f9:2c:fc:3a:4c:53:a8:8a:4c:c7:b2:
f7:46:d1:12:06:46:2c:9f:40:26:8c:93:2b:26:94:
f4:af:ee:01:e5:a1:1b:3a:a2:1a:25:a9:02:04:5d:
ca:5b:07:d9:ce:88:c8:58:e4:a0:c5:3a:af:d0:19:
ff:67:20:c2:0c:ec:0e:4c:a9:88:66:66:01:66:3f:
79:d0:49:90:56:e4:bf:e8:c1:52:e9:b0:b1:f9:4c:
68:88:56:22:e4:13:fe:11:4c:63:b0:82:1c:a4:4f:
c5:71:22:26:f2:fe:7c:13:56:d6:60:d8:53:45:63:
20:7d:aa:f5:2c:39:38:f4:0e:55:fb:a9:82:de:ef:
a0:7b:09:e0:bb:db:c0:b8:f2:9c:ed:f4:a7:09:a5:
f5:24:a7:3f:77:e2:0f:ef:ce:99:9a:2c:da:1f:d4:
04:a4:26:2b:ed:04:64:74:b2:cd:05:9e:d0:3e:0b:
f7:57:15:73:63:3f:fd:42:3d:56:d9:17:2e:9b:e7:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:15:12:EE:07:22:67:B4:CE:60:A6:20:4B:E7:79:56:B2:48:2F:6A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxUS7gciZ7TOYKYgS-d5VrJIL2o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.109.224.0/20
Signature Algorithm: sha256WithRSAEncryption
93:da:9b:23:bc:ec:66:d1:fb:a3:9c:3f:c1:2a:5a:bf:d4:d4:
d7:b0:ee:b5:2c:c1:30:9d:61:86:53:53:ea:e9:1d:e1:8a:35:
84:1a:cf:ee:e0:2e:aa:ec:98:7e:7a:80:c6:60:3a:04:b8:c2:
cc:2f:c3:57:0a:55:78:65:84:8b:a6:2e:a5:1b:23:07:e3:06:
75:f1:28:7e:18:07:00:53:7c:6c:8c:80:68:c1:7e:71:d0:10:
20:f1:ca:6c:45:df:84:6f:0e:9f:8a:d4:a4:58:1a:bf:5c:af:
07:49:b4:c0:d4:f4:06:54:0e:bf:e6:55:d4:27:3b:94:6c:4f:
c5:bc:77:76:59:fb:1e:8c:0f:93:65:f3:e6:b8:65:fc:7a:8c:
4d:10:f3:45:5d:a6:0d:f3:2c:d5:32:07:fd:9f:0a:dd:2a:3b:
cd:ed:5d:e1:1f:d7:1a:5a:87:a8:ca:09:88:bc:fb:e9:22:d8:
12:9b:da:f5:d7:30:1d:8f:e5:13:13:ef:b8:70:01:ad:d9:e4:
8b:b1:ad:b7:ab:27:4c:da:a6:a5:42:9a:b5:02:fd:86:3b:34:
6b:fa:49:e8:de:e9:e5:ef:29:a6:06:d9:39:ec:d1:73:35:69:
ab:c0:46:c3:f6:f2:27:83:1e:4a:d3:31:ad:6b:2b:d1:bf:4a:
e3:91:3b:7c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDExMjIw
NjIzNTNaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFCMTUxMkVFMDcyMjY3
QjRDRTYwQTYyMDRCRTc3OTU2QjI0ODJGNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoaCNvwr/ODTS9s0Ji0PANGwGwGjx0KiQP1qy2A393AQlvCOs1
eMQ//RSt8qi3zjftfSabgUXEcUhPnP+WBTT5LPw6TFOoikzHsvdG0RIGRiyfQCaM
kysmlPSv7gHloRs6oholqQIEXcpbB9nOiMhY5KDFOq/QGf9nIMIM7A5MqYhmZgFm
P3nQSZBW5L/owVLpsLH5TGiIViLkE/4RTGOwghykT8VxIiby/nwTVtZg2FNFYyB9
qvUsOTj0DlX7qYLe76B7CeC728C48pzt9KcJpfUkpz934g/vzpmaLNof1ASkJivt
BGR0ss0FntA+C/dXFXNjP/1CPVbZFy6b59b9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGxUS7gciZ7TOYKYgS+d5VrJIL2owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0d4VVM3Z2NpWjdUT1lLWWdTLWQ1VnJKSUwyby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQxbeAwDQYJKoZIhvcNAQELBQADggEBAJPamyO87GbR+6OcP8EqWr/U1New
7rUswTCdYYZTU+rpHeGKNYQaz+7gLqrsmH56gMZgOgS4wswvw1cKVXhlhIumLqUb
IwfjBnXxKH4YBwBTfGyMgGjBfnHQECDxymxF34RvDp+K1KRYGr9crwdJtMDU9AZU
Dr/mVdQnO5RsT8W8d3ZZ+x6MD5Nl8+a4Zfx6jE0Q80Vdpg3zLNUyB/2fCt0qO83t
XeEf1xpah6jKCYi8++ki2BKb2vXXMB2P5RMT77hwAa3Z5IuxrberJ0zapqVCmrUC
/YY7NGv6Seje6eXvKaYG2Tns0XM1aavARsP28ieDHkrTMa1rK9G/SuORO3w=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:13:04 2025 by rpki-client