Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VqjFqGc2GwvQ2dDFzkIK_0IXqgE.roa
File: VqjFqGc2GwvQ2dDFzkIK_0IXqgE.roa (raw, json)
Hash identifier: 0GFY36aFMrI5MOVrpCxBCrlgcA+y1X1uqv9VjZqa/XU=
Subject key identifier: 56:A8:C5:A8:67:36:1B:0B:D0:D9:D0:C5:CE:42:0A:FF:42:17:AA:01
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0AB0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VqjFqGc2GwvQ2dDFzkIK_0IXqgE.roa
Signing time: Sun 30 Jun 2024 01:54:30 +0000
ROA not before: Sun 30 Jun 2024 01:54:30 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 183.73.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2736 (0xab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:54:30 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=56A8C5A867361B0BD0D9D0C5CE420AFF4217AA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:74:e0:6b:52:af:f0:29:98:53:ce:5f:83:
92:d5:09:00:95:34:51:dd:30:9e:d3:3f:f7:72:15:
2e:30:c3:32:cf:72:f8:ce:d5:1b:cf:ab:e7:0c:b1:
52:02:f3:f7:dc:12:d3:b6:a8:0a:37:a5:80:f9:d9:
4a:a5:c2:37:d8:26:26:26:eb:66:d0:69:d1:9c:22:
bc:0c:93:f1:9d:90:d4:1f:63:ee:4e:e5:e9:27:c4:
ab:25:56:e8:d0:70:d5:ac:83:6d:16:77:9b:75:c4:
28:34:8c:76:ab:a9:d5:59:45:ad:9e:e6:75:fc:8e:
80:c7:34:6b:61:d7:7f:12:23:19:89:e5:f6:ed:85:
d4:7b:41:85:89:e3:06:df:a9:b8:49:9a:53:9d:c0:
c6:fb:68:5d:ef:59:fb:92:e6:f3:d2:53:e2:de:1a:
f8:1f:74:66:a3:23:2a:6c:b0:51:5d:6e:77:95:77:
74:cf:1a:a0:e9:e0:28:52:fa:ab:c0:53:78:b3:33:
90:75:9c:a4:28:38:1b:1e:b6:78:13:02:12:d1:19:
27:06:89:c5:41:3b:21:78:0b:e6:05:88:c0:a1:fc:
13:87:a9:a0:2c:39:af:0c:86:0e:3a:2a:4b:02:ea:
d8:50:74:11:c5:19:d6:c1:02:49:51:bf:1a:69:97:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:C5:A8:67:36:1B:0B:D0:D9:D0:C5:CE:42:0A:FF:42:17:AA:01
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VqjFqGc2GwvQ2dDFzkIK_0IXqgE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.73.20.0/22
Signature Algorithm: sha256WithRSAEncryption
48:f0:d7:3b:7f:d4:cb:0a:c2:33:45:51:d7:30:2b:fa:e3:0d:
6a:35:4b:06:86:cf:2b:f3:80:79:ef:68:5e:3d:6e:cc:27:1e:
36:d1:58:c7:81:74:93:7d:85:2b:d5:75:f4:9d:e2:bf:3d:c8:
46:94:37:bd:0a:dc:ab:4e:b9:44:7b:9a:cd:bf:be:3e:0b:f9:
a1:21:37:55:63:10:a2:f5:86:41:c9:08:58:6d:a0:34:0d:8e:
c3:e0:42:d6:e6:1d:24:18:07:4d:a5:32:0c:f9:a7:a6:e3:6c:
ea:c8:11:8c:ef:7d:8e:b3:49:24:14:12:a3:61:e5:f6:3c:8d:
07:fb:ba:6d:39:04:6d:7b:35:69:62:b0:b8:90:b5:15:df:0a:
7d:8d:34:f5:45:4d:07:4c:df:9e:82:63:14:1a:f8:bc:b5:ff:
95:88:16:10:08:fc:0c:3c:fc:07:36:68:ce:dc:ce:59:88:2e:
a7:a3:db:16:03:f8:6e:fc:75:2e:ac:28:ce:f3:3d:b8:e3:f8:
a4:c8:58:39:c2:09:a1:fe:51:3a:de:c7:89:8a:78:1f:91:48:
a7:ab:91:ca:47:74:40:7c:a3:03:f0:fe:61:0c:dd:55:05:43:
86:8d:d0:e2:8c:10:8d:d7:7c:b7:1d:7d:4d:01:69:14:92:95:
be:d0:7a:49
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTU0MzBaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDU2QThDNUE4NjczNjFC
MEJEMEQ5RDBDNUNFNDIwQUZGNDIxN0FBMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTEXTga1Kv8CmYU85fg5LVCQCVNFHdMJ7TP/dyFS4wwzLPcvjO
1RvPq+cMsVIC8/fcEtO2qAo3pYD52UqlwjfYJiYm62bQadGcIrwMk/GdkNQfY+5O
5eknxKslVujQcNWsg20Wd5t1xCg0jHarqdVZRa2e5nX8joDHNGth138SIxmJ5fbt
hdR7QYWJ4wbfqbhJmlOdwMb7aF3vWfuS5vPSU+LeGvgfdGajIypssFFdbneVd3TP
GqDp4ChS+qvAU3izM5B1nKQoOBsetngTAhLRGScGicVBOyF4C+YFiMCh/BOHqaAs
Oa8Mhg46KksC6thQdBHFGdbBAklRvxppl7+vAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUVqjFqGc2GwvQ2dDFzkIK/0IXqgEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1ZxakZxR2MyR3d2UTJkREZ6a0lLXzBJWHFnRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK3SRQwDQYJKoZIhvcNAQELBQADggEBAEjw1zt/1MsKwjNFUdcwK/rjDWo1
SwaGzyvzgHnvaF49bswnHjbRWMeBdJN9hSvVdfSd4r89yEaUN70K3KtOuUR7ms2/
vj4L+aEhN1VjEKL1hkHJCFhtoDQNjsPgQtbmHSQYB02lMgz5p6bjbOrIEYzvfY6z
SSQUEqNh5fY8jQf7um05BG17NWlisLiQtRXfCn2NNPVFTQdM356CYxQa+Ly1/5WI
FhAI/Aw8/Ac2aM7czlmILqej2xYD+G78dS6sKM7zPbjj+KTIWDnCCaH+UTrex4mK
eB+RSKerkcpHdEB8owPw/mEM3VUFQ4aN0OKMEI3XfLcdfU0BaRSSlb7Qekk=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:23:47 2025 by rpki-client