Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/X1NZC9tyQhrSOsnipE-UaM4i06o.roa
File: X1NZC9tyQhrSOsnipE-UaM4i06o.roa (raw, json)
Hash identifier: Rn2r0126xgD/ZXJoOS8xWICJo0is4yDjM/q1zchbGK0=
Subject key identifier: 5F:53:59:0B:DB:72:42:1A:D2:3A:C9:E2:A4:4F:94:68:CE:22:D3:AA
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: D7
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/X1NZC9tyQhrSOsnipE-UaM4i06o.roa
Signing time: Fri 01 Sep 2023 01:30:54 +0000
ROA not before: Fri 01 Sep 2023 01:30:54 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2516
IP address blocks: 210.224.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Sep 1 01:30:54 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=5F53590BDB72421AD23AC9E2A44F9468CE22D3AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:b0:07:19:91:64:d9:fc:b8:be:00:6f:61:
98:58:16:79:fe:41:a5:9a:ed:4b:d1:1e:2d:54:4b:
36:3f:56:07:ed:a4:1f:98:51:f3:8e:10:3c:42:8e:
f2:54:51:4f:10:72:9d:79:bb:f7:f8:81:9e:b0:dc:
5e:96:b6:82:bb:78:0d:5b:69:90:f2:0f:d3:fc:56:
ed:37:02:bf:ca:18:c5:44:d1:96:fa:8f:f7:a4:ed:
63:7b:d4:2c:cb:a5:a7:99:1b:1f:e4:82:63:9a:f7:
a0:0b:49:7b:5e:09:01:b7:79:9e:85:9f:b6:22:78:
5b:e3:4c:22:62:c9:52:4c:8e:dd:84:b7:47:0f:7c:
12:50:c4:93:d0:a7:65:a7:bd:2d:1f:6a:08:53:1c:
b3:e7:61:ee:de:e4:fc:c5:b8:19:27:d5:02:4f:6b:
b1:ad:1e:24:1a:f4:e5:22:44:f0:dd:79:c3:bc:e4:
de:cd:1b:db:10:cd:8b:dd:c5:86:5f:ed:40:f0:69:
5a:06:96:f1:6d:02:5c:5d:34:14:2f:7b:f5:0f:98:
e5:42:a2:b5:bb:c4:6a:ee:ee:c1:36:9c:66:a8:ad:
fa:26:0f:84:55:64:5f:a9:87:9e:c2:7b:f4:e8:8d:
4f:5a:f1:c9:a9:40:ce:a1:4d:fd:57:be:f2:35:b6:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:53:59:0B:DB:72:42:1A:D2:3A:C9:E2:A4:4F:94:68:CE:22:D3:AA
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/X1NZC9tyQhrSOsnipE-UaM4i06o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.224.149.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2e:f3:fc:9f:c5:96:2f:5c:1d:ce:4a:f1:5d:69:76:1c:b1:
2d:23:4b:a9:79:50:c0:72:b5:bc:2d:ba:2f:b6:f3:f2:12:fd:
67:ff:54:a4:a2:d7:ef:5c:a5:7f:08:29:73:58:2a:95:90:c0:
01:f6:81:ea:ec:fa:03:23:f4:10:11:22:7e:3c:80:50:50:66:
25:bf:7d:ed:54:c8:19:5d:15:e4:45:47:fb:ff:8a:c2:9d:0c:
be:e6:12:b4:06:07:7b:7d:47:e7:fe:14:be:09:56:50:0d:55:
ef:f6:11:8c:38:ee:5b:3d:34:85:8e:a8:b9:47:8f:56:71:d7:
51:df:07:5f:cf:66:05:d9:3c:fb:d4:08:1e:7d:6c:91:e2:90:
1d:a9:0a:39:12:59:8c:a2:14:0e:1b:ce:9c:7e:b2:fa:fe:37:
1e:fd:ca:63:25:3a:85:66:3b:62:f0:a5:eb:28:e0:11:a6:f1:
99:ba:ee:ab:19:be:94:a2:41:f6:d4:f3:f3:f5:d9:cf:5c:ee:
0e:a9:ed:5c:68:ce:3e:85:13:f9:1e:f9:d8:0f:e0:9a:fe:38:
10:af:1c:46:31:72:4a:f3:c6:de:a4:15:99:0e:f1:92:c4:01:
5f:90:c5:14:2e:95:74:7f:7d:15:36:06:2b:df:e0:07:a8:5a:
5a:ff:81:f1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICANcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTMwNTRaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDVGNTM1OTBCREI3MjQy
MUFEMjNBQzlFMkE0NEY5NDY4Q0UyMkQzQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClt7AHGZFk2fy4vgBvYZhYFnn+QaWa7UvRHi1USzY/VgftpB+Y
UfOOEDxCjvJUUU8Qcp15u/f4gZ6w3F6WtoK7eA1baZDyD9P8Vu03Ar/KGMVE0Zb6
j/ek7WN71CzLpaeZGx/kgmOa96ALSXteCQG3eZ6Fn7YieFvjTCJiyVJMjt2Et0cP
fBJQxJPQp2WnvS0faghTHLPnYe7e5PzFuBkn1QJPa7GtHiQa9OUiRPDdecO85N7N
G9sQzYvdxYZf7UDwaVoGlvFtAlxdNBQve/UPmOVCorW7xGru7sE2nGaorfomD4RV
ZF+ph57Ce/TojU9a8cmpQM6hTf1XvvI1toLFAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUX1NZC9tyQhrSOsnipE+UaM4i06owHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9YMU5aQzl0eVFoclNPc25pcEUtVWFNNGkwNm8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0uCVMA0GCSqGSIb3DQEBCwUAA4IBAQBuLvP8n8WWL1wdzkrxXWl2
HLEtI0upeVDAcrW8LbovtvPyEv1n/1SkotfvXKV/CClzWCqVkMAB9oHq7PoDI/QQ
ESJ+PIBQUGYlv33tVMgZXRXkRUf7/4rCnQy+5hK0Bgd7fUfn/hS+CVZQDVXv9hGM
OO5bPTSFjqi5R49WcddR3wdfz2YF2Tz71AgefWyR4pAdqQo5ElmMohQOG86cfrL6
/jce/cpjJTqFZjti8KXrKOARpvGZuu6rGb6UokH21PPz9dnPXO4Oqe1caM4+hRP5
HvnYD+Ca/jgQrxxGMXJK88bepBWZDvGSxAFfkMUULpV0f30VNgYr3+AHqFpa/4Hx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org