Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/QOh4j2xfxsqq40Fg6r4o8zzf0RU.roa
File: QOh4j2xfxsqq40Fg6r4o8zzf0RU.roa (raw, json)
Hash identifier: hWTfxkZgNUEisHcxOzzTo6z4/OmQ0pm46UB0C+tmYhs=
Subject key identifier: 40:E8:78:8F:6C:5F:C6:CA:AA:E3:41:60:EA:BE:28:F3:3C:DF:D1:15
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 017B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QOh4j2xfxsqq40Fg6r4o8zzf0RU.roa
Signing time: Wed 31 Jul 2024 01:34:21 +0000
ROA not before: Wed 31 Jul 2024 01:34:21 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2497
IP address blocks: 210.138.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Jul 31 01:34:21 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=40E8788F6C5FC6CAAAE34160EABE28F33CDFD115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:2f:4f:03:87:82:cd:d4:56:a2:0a:f1:36:
69:34:7a:c7:be:d1:17:b2:4c:13:14:9a:e0:6c:bd:
35:f2:c2:60:b2:ce:60:f5:68:4e:4e:9c:6c:63:74:
d6:ce:ef:0c:72:1f:61:fa:a0:fa:cb:a2:55:cb:b3:
4e:3c:3f:f5:ed:ba:76:e8:f3:07:58:fa:db:2a:58:
6f:b9:1f:96:34:4b:7e:64:ef:a1:32:c0:fe:4d:5c:
66:db:2c:f0:a6:85:93:6d:07:c8:0a:44:2c:09:81:
69:17:ce:a4:30:40:a0:47:75:d7:6c:e1:0c:ff:21:
13:9e:8f:0c:fc:6f:db:80:f1:b6:04:4c:27:e9:83:
fe:70:a5:33:32:2f:fc:31:5a:fa:44:1e:37:41:2f:
6f:f1:b5:08:1f:ac:1d:b0:43:d8:64:5b:fa:3c:48:
d0:ec:a2:86:d5:2e:f1:c9:7d:2a:db:d7:8b:2a:c3:
44:5f:86:d4:ef:e1:7a:1b:30:29:01:3c:16:e2:ea:
71:5b:1f:ef:b2:a5:6b:7f:de:a1:54:83:71:38:28:
0b:ed:49:50:35:05:cd:f3:0b:f8:63:89:b6:bf:09:
02:6e:d0:7c:58:d8:6b:87:67:77:66:6a:13:71:f5:
b7:b3:db:d0:ba:cf:a3:00:ad:37:09:b6:14:b8:17:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E8:78:8F:6C:5F:C6:CA:AA:E3:41:60:EA:BE:28:F3:3C:DF:D1:15
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QOh4j2xfxsqq40Fg6r4o8zzf0RU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.138.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:9b:45:b0:13:76:88:c4:dd:f1:7f:f0:cd:c1:93:ca:22:82:
2a:04:10:b6:15:63:b5:f4:89:0a:1f:a5:9d:57:81:58:70:a6:
4d:e4:0c:67:ff:cd:5f:7a:5e:c8:30:0d:79:12:51:ea:ac:41:
2c:d2:9a:97:84:3c:d5:1a:3d:b4:a2:69:cf:f5:f8:91:80:bb:
21:ce:2d:53:36:d7:f2:58:0d:c6:fe:3b:f3:89:17:14:44:16:
51:cb:86:db:06:b0:33:f3:d4:c2:7b:a1:fa:03:c7:03:ec:97:
b0:19:78:eb:4b:ef:7c:03:a3:ed:40:cc:58:eb:0d:14:bd:64:
8c:18:e2:9b:6b:c0:36:3b:b6:0b:a1:67:4d:92:b3:3f:31:cc:
d0:1a:e7:2d:2a:f1:0b:64:8c:de:e9:c7:d4:64:56:84:b2:31:
bb:0d:3e:a3:4c:0d:77:0e:57:35:e0:e2:c8:c4:29:44:7d:8e:
91:8c:7b:85:79:92:f7:54:74:3d:ad:bb:3f:93:a8:41:3b:67:
32:5a:99:d0:3b:8b:74:af:fb:8f:24:2f:20:8a:b2:f3:a3:63:
ff:b0:3d:6c:e8:e3:40:33:f3:20:26:70:a5:7b:e2:d8:a9:da:
92:d4:03:f6:7d:a3:9a:63:7a:bc:d0:31:b1:5a:a3:4f:a1:18:
a7:15:d0:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICAXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA3MzEw
MTM0MjFaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQwRTg3ODhGNkM1RkM2
Q0FBQUUzNDE2MEVBQkUyOEYzM0NERkQxMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDROC9PA4eCzdRWogrxNmk0ese+0ReyTBMUmuBsvTXywmCyzmD1
aE5OnGxjdNbO7wxyH2H6oPrLolXLs048P/Xtunbo8wdY+tsqWG+5H5Y0S35k76Ey
wP5NXGbbLPCmhZNtB8gKRCwJgWkXzqQwQKBHddds4Qz/IROejwz8b9uA8bYETCfp
g/5wpTMyL/wxWvpEHjdBL2/xtQgfrB2wQ9hkW/o8SNDsoobVLvHJfSrb14sqw0Rf
htTv4XobMCkBPBbi6nFbH++ypWt/3qFUg3E4KAvtSVA1Bc3zC/hjiba/CQJu0HxY
2GuHZ3dmahNx9bez29C6z6MArTcJthS4F5zjAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUQOh4j2xfxsqq40Fg6r4o8zzf0RUwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvUU9oNGoyeGZ4c3FxNDBGZzZyNG84enpmMFJVLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
ANKKMA0GCSqGSIb3DQEBCwUAA4IBAQBUm0WwE3aIxN3xf/DNwZPKIoIqBBC2FWO1
9IkKH6WdV4FYcKZN5Axn/81fel7IMA15ElHqrEEs0pqXhDzVGj20omnP9fiRgLsh
zi1TNtfyWA3G/jvziRcURBZRy4bbBrAz89TCe6H6A8cD7JewGXjrS+98A6PtQMxY
6w0UvWSMGOKba8A2O7YLoWdNkrM/MczQGuctKvELZIze6cfUZFaEsjG7DT6jTA13
Dlc14OLIxClEfY6RjHuFeZL3VHQ9rbs/k6hBO2cyWpnQO4t0r/uPJC8girLzo2P/
sD1s6ONAM/MgJnCle+LYqdqS1AP2faOaY3q80DGxWqNPoRinFdDQ
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:31:03 2025 by rpki-client