Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vHjiHtTZLUsNJujUJpEoR2Mkwak.roa
File: vHjiHtTZLUsNJujUJpEoR2Mkwak.roa (raw, json)
Hash identifier: Wa+6ixGf+c/yHMC0SPO8pUjMuW4Y4dSaJh1GO0Njng4=
Subject key identifier: BC:78:E2:1E:D4:D9:2D:4B:0D:26:E8:D4:26:91:28:47:63:24:C1:A9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0884
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vHjiHtTZLUsNJujUJpEoR2Mkwak.roa
Signing time: Tue 30 Apr 2024 02:20:30 +0000
ROA not before: Tue 30 Apr 2024 02:20:30 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:20:30 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=BC78E21ED4D92D4B0D26E8D4269128476324C1A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:27:b7:54:69:c1:bc:b7:e4:52:60:c3:69:a7:
d5:f4:58:48:d4:e7:a5:b5:21:22:b1:c0:e8:1a:81:
47:f0:01:48:ed:25:63:a4:c0:50:5a:b4:e6:77:d3:
0b:89:c9:ae:3e:99:0b:a5:ec:53:69:c2:74:b7:48:
8f:75:b2:05:30:47:b9:62:a4:1e:f5:55:53:fa:57:
9a:af:2d:4d:c1:19:ac:e4:10:14:78:41:b5:58:b9:
3a:02:d8:71:11:f7:df:02:8d:0c:ee:cb:bb:ba:51:
f4:34:cf:f3:fd:82:70:d6:79:d1:34:37:3f:fa:20:
39:14:88:12:13:f6:fd:aa:7b:78:12:c6:d1:0d:6e:
3a:ff:78:07:d3:28:b4:9b:cd:e4:d6:f9:76:cd:03:
a2:f6:28:0c:eb:54:d6:f7:bb:2e:05:78:3a:25:54:
29:da:80:9b:16:24:ca:93:f0:88:94:c6:eb:7b:f1:
a2:25:cd:d4:b7:c0:1f:13:2e:10:25:94:ae:dc:af:
c2:53:b6:de:2a:7e:09:68:d0:5c:32:d2:c3:8d:62:
ab:1e:b2:8a:90:17:8c:a0:f6:8a:85:93:94:38:4e:
2d:14:d1:fe:42:ed:95:df:17:c4:0f:88:83:dc:6b:
5b:97:06:c5:72:37:a8:82:8f:c5:e5:e5:a0:64:4e:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:78:E2:1E:D4:D9:2D:4B:0D:26:E8:D4:26:91:28:47:63:24:C1:A9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vHjiHtTZLUsNJujUJpEoR2Mkwak.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.0.0/20
Signature Algorithm: sha256WithRSAEncryption
84:af:a8:5a:cc:f2:84:ef:bb:e0:19:c4:41:bb:f2:2a:3b:b5:
aa:ca:02:1f:59:7a:b6:f0:8a:84:6d:bf:ff:0e:ff:74:13:b4:
3d:49:fb:e5:f5:d6:52:1a:e2:45:5a:71:60:e1:ea:07:8e:4a:
18:ca:2d:d1:9e:ef:99:49:23:4b:70:ab:83:b1:6a:be:66:43:
5e:f9:e2:fc:fb:a1:70:09:bc:39:2d:95:41:6b:51:ce:9e:41:
2f:cc:4c:ca:aa:a0:38:c1:cd:8c:c0:f6:36:fe:bd:a3:81:3c:
f5:89:31:b9:d4:fd:5d:0d:e0:bc:66:71:62:92:cc:ea:16:18:
15:c4:50:e4:b8:c4:cc:e4:d0:55:80:8c:2c:68:76:a1:f3:a6:
fc:70:c7:fc:cc:9b:e9:2d:57:25:32:ff:45:c5:4a:dc:89:64:
41:cf:86:e4:65:9f:be:6f:14:42:55:fe:66:55:7b:7e:41:2d:
2b:b7:ff:e3:ab:ea:87:04:64:5a:bf:d6:95:69:19:06:07:49:
42:77:7d:db:92:65:57:52:a3:5f:d1:24:65:16:7a:e2:b9:a6:
ea:42:73:da:c9:bc:a1:ac:43:7a:85:ed:2e:2d:20:df:a2:33:
9d:56:3a:0d:8e:6b:c3:74:bd:e5:31:cc:ca:b5:39:57:53:e5:
ec:80:1a:4e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjIwMzBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDNzhFMjFFRDREOTJE
NEIwRDI2RThENDI2OTEyODQ3NjMyNEMxQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkJ7dUacG8t+RSYMNpp9X0WEjU56W1ISKxwOgagUfwAUjtJWOk
wFBatOZ30wuJya4+mQul7FNpwnS3SI91sgUwR7lipB71VVP6V5qvLU3BGazkEBR4
QbVYuToC2HER998CjQzuy7u6UfQ0z/P9gnDWedE0Nz/6IDkUiBIT9v2qe3gSxtEN
bjr/eAfTKLSbzeTW+XbNA6L2KAzrVNb3uy4FeDolVCnagJsWJMqT8IiUxut78aIl
zdS3wB8TLhAllK7cr8JTtt4qfglo0Fwy0sONYqsesoqQF4yg9oqFk5Q4Ti0U0f5C
7ZXfF8QPiIPca1uXBsVyN6iCj8Xl5aBkTv1rAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUvHjiHtTZLUsNJujUJpEoR2MkwakwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3ZIamlIdFRaTFVzTkp1alVKcEVvUjJNa3dhay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATc0gAwDQYJKoZIhvcNAQELBQADggEBAISvqFrM8oTvu+AZxEG78io7tarK
Ah9ZerbwioRtv/8O/3QTtD1J++X11lIa4kVacWDh6geOShjKLdGe75lJI0twq4Ox
ar5mQ1754vz7oXAJvDktlUFrUc6eQS/MTMqqoDjBzYzA9jb+vaOBPPWJMbnU/V0N
4LxmcWKSzOoWGBXEUOS4xMzk0FWAjCxodqHzpvxwx/zMm+ktVyUy/0XFStyJZEHP
huRln75vFEJV/mZVe35BLSu3/+Or6ocEZFq/1pVpGQYHSUJ3fduSZVdSo1/RJGUW
euK5pupCc9rJvKGsQ3qF7S4tIN+iM51WOg2Oa8N0veUxzMq1OVdT5eyAGk4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:47:02 2025 by rpki-client