Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/eoWwNvjJti9Cp853gpq5FiifWh8.roa
File: eoWwNvjJti9Cp853gpq5FiifWh8.roa (raw, json)
Hash identifier: KBImhDk1SpxQCmRpzReYhp0gWNlnLEzq+10dkHOyPv4=
Subject key identifier: 7A:85:B0:36:F8:C9:B6:2F:42:A7:CE:77:82:9A:B9:16:28:9F:5A:1F
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0310
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eoWwNvjJti9Cp853gpq5FiifWh8.roa
Signing time: Mon 21 Oct 2024 01:08:40 +0000
ROA not before: Mon 21 Oct 2024 01:08:40 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 10013
IP address blocks: 124.255.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 784 (0x310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 21 01:08:40 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=7A85B036F8C9B62F42A7CE77829AB916289F5A1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:d2:a1:76:bc:9f:51:2f:e8:96:52:8d:3a:
6a:20:77:0c:06:c2:34:63:4b:02:1e:ba:22:07:ad:
b6:7c:ec:51:9a:7c:89:87:39:e2:44:ca:1c:29:bf:
1a:07:45:04:76:4f:b9:81:e7:61:88:90:c3:22:07:
7d:ea:ea:84:00:bf:87:de:c8:6b:62:b9:d5:25:a3:
c5:f5:91:1f:a0:30:dc:10:38:7f:8a:f0:58:54:c3:
bc:36:8d:fe:44:a7:71:70:05:9b:d1:d0:6a:b2:be:
ad:91:e2:27:7f:ff:78:4b:98:1f:1d:2a:2b:54:46:
96:58:a9:e5:87:aa:30:be:9e:42:90:5e:bf:88:be:
ca:85:ed:49:0d:1d:c9:f6:b0:e2:8f:db:12:53:f9:
0c:bf:63:b9:92:03:18:55:b8:2c:91:33:71:4e:f1:
82:56:70:54:5c:10:8c:a8:ae:7c:8c:c0:5c:ef:e0:
b4:93:18:32:50:75:da:b3:e8:df:e4:34:39:41:20:
77:16:f3:9d:86:86:05:98:b7:69:a2:35:a5:66:c1:
74:55:dc:20:35:98:ca:e0:89:50:ee:a9:4f:d7:48:
70:6d:34:46:c1:89:54:7a:9b:50:ab:d5:13:a3:c1:
50:d4:7e:0d:e5:43:7d:b2:dd:19:c3:00:a6:d4:84:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:85:B0:36:F8:C9:B6:2F:42:A7:CE:77:82:9A:B9:16:28:9F:5A:1F
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eoWwNvjJti9Cp853gpq5FiifWh8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.255.192.0/20
Signature Algorithm: sha256WithRSAEncryption
10:41:6e:52:3d:2d:ec:4b:50:fd:06:c3:73:49:f2:94:e5:86:
13:8b:43:83:bf:e6:1b:a1:0a:b4:9a:25:da:d3:53:23:24:96:
83:b8:96:7c:a6:41:ca:93:fa:d2:5d:f5:92:32:b9:b8:c5:24:
79:13:1a:2a:61:3e:17:95:bf:4e:36:5f:d8:3c:57:ba:d1:63:
94:7d:13:dd:40:09:b1:5a:0e:66:15:21:25:75:a2:c9:b9:42:
ed:d0:d6:b3:99:cc:b1:3b:ce:07:96:d9:61:13:ca:f5:eb:05:
26:1c:9c:e7:92:e8:44:fc:23:46:16:04:49:91:9a:57:95:27:
c3:74:f8:b4:de:b6:97:e6:d5:c6:60:2b:4d:bd:ed:c7:1b:ea:
0b:39:8e:ff:bc:83:3e:e8:eb:95:c7:a3:aa:82:8d:a8:03:f1:
e0:4b:4e:c1:41:c4:aa:3f:2d:65:cf:7a:c2:0d:4a:97:c8:4c:
16:b8:dd:46:c1:8b:3a:9d:15:dd:b4:5d:c7:27:8f:ca:7c:8a:
0a:5a:d5:99:5b:ba:44:7f:84:43:3e:36:40:62:f8:07:eb:47:
d7:8e:c4:52:8d:58:9a:c2:7b:f2:ce:93:d0:5a:22:2b:9b:c8:
97:83:e6:a2:ca:79:bf:50:d7:51:ce:e7:81:e4:19:b9:f8:44:
f0:15:7c:6f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjEw
MTA4NDBaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdBODVCMDM2RjhDOUI2
MkY0MkE3Q0U3NzgyOUFCOTE2Mjg5RjVBMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOKtKhdryfUS/ollKNOmogdwwGwjRjSwIeuiIHrbZ87FGafImH
OeJEyhwpvxoHRQR2T7mB52GIkMMiB33q6oQAv4feyGtiudUlo8X1kR+gMNwQOH+K
8FhUw7w2jf5Ep3FwBZvR0Gqyvq2R4id//3hLmB8dKitURpZYqeWHqjC+nkKQXr+I
vsqF7UkNHcn2sOKP2xJT+Qy/Y7mSAxhVuCyRM3FO8YJWcFRcEIyornyMwFzv4LST
GDJQddqz6N/kNDlBIHcW852GhgWYt2miNaVmwXRV3CA1mMrgiVDuqU/XSHBtNEbB
iVR6m1Cr1ROjwVDUfg3lQ32y3RnDAKbUhGPfAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUeoWwNvjJti9Cp853gpq5FiifWh8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2VvV3dOdmpKdGk5Q3A4NTNncHE1RmlpZldoOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAR8/8AwDQYJKoZIhvcNAQELBQADggEBABBBblI9LexLUP0Gw3NJ8pTlhhOL
Q4O/5huhCrSaJdrTUyMkloO4lnymQcqT+tJd9ZIyubjFJHkTGiphPheVv042X9g8
V7rRY5R9E91ACbFaDmYVISV1osm5Qu3Q1rOZzLE7zgeW2WETyvXrBSYcnOeS6ET8
I0YWBEmRmleVJ8N0+LTetpfm1cZgK0297ccb6gs5jv+8gz7o65XHo6qCjagD8eBL
TsFBxKo/LWXPesINSpfITBa43UbBizqdFd20Xccnj8p8igpa1ZlbukR/hEM+NkBi
+AfrR9eOxFKNWJrCe/LOk9BaIiubyJeD5qLKeb9Q11HO54HkGbn4RPAVfG8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:58:52 2025 by rpki-client