Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/e3Cah5Ou3IbqpFd5UGAFf2WLE10.roa
File: e3Cah5Ou3IbqpFd5UGAFf2WLE10.roa (raw, json)
Hash identifier: Ezn22VdlVAo4RcaoCEgH5Sz45lGtz7pjCRWOUECzu8I=
Subject key identifier: 7B:70:9A:87:93:AE:DC:86:EA:A4:57:79:50:60:05:7F:65:8B:13:5D
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0135
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/e3Cah5Ou3IbqpFd5UGAFf2WLE10.roa
Signing time: Sun 01 Oct 2023 01:30:50 +0000
ROA not before: Sun 01 Oct 2023 01:30:50 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.10.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:30:50 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=7B709A8793AEDC86EAA457795060057F658B135D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:60:91:cd:0f:e5:06:38:55:84:23:9b:50:
69:c7:4a:c6:7c:46:a4:f9:8c:60:63:9d:0a:45:d2:
e9:66:93:06:7b:91:ba:8b:47:81:ce:5c:79:d1:bd:
9b:af:e2:49:a1:c0:b4:f9:79:74:0d:5a:d1:8f:51:
92:27:96:98:29:b2:7d:6a:02:1e:5b:15:b3:54:3f:
2d:7e:45:51:7d:e4:60:08:f0:60:9d:7b:01:12:77:
93:31:c9:bd:49:1d:43:26:62:65:30:4f:8e:c7:4c:
d3:17:a6:18:d4:e5:2c:f1:0c:ca:30:5c:10:c6:80:
1f:ec:38:81:cf:0e:f8:1a:58:28:be:db:19:c3:50:
28:87:db:fb:04:6f:3d:02:d8:0c:bc:0b:62:64:f7:
fc:58:94:af:f5:9b:e0:8f:58:c2:6d:8d:40:ea:b8:
0f:03:a0:ba:f7:ae:10:dc:34:da:ed:3e:87:9e:c0:
b1:95:4b:b4:91:a5:cb:a4:f7:d8:df:4a:86:42:67:
d6:b5:69:4e:0f:95:32:56:41:0c:ce:2a:ae:dc:31:
8c:f3:5f:94:4a:52:8f:c5:dc:d6:7b:ca:4a:e4:11:
f0:6c:be:ca:67:b0:6e:fc:ea:21:f0:90:e3:20:a2:
71:56:59:03:e6:76:85:69:c2:70:7c:63:60:2f:8d:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:70:9A:87:93:AE:DC:86:EA:A4:57:79:50:60:05:7F:65:8B:13:5D
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/e3Cah5Ou3IbqpFd5UGAFf2WLE10.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.160.0/23
Signature Algorithm: sha256WithRSAEncryption
77:a0:37:48:c3:c5:05:a4:81:b8:07:dd:df:24:65:23:2c:d0:
5c:85:3a:b6:60:78:8c:18:17:a2:24:3f:52:54:d5:a1:21:44:
f7:e0:fe:b6:b3:c9:83:5c:5f:c7:d9:c7:99:52:54:96:83:c8:
99:dd:fe:03:4c:ea:aa:eb:bc:11:f3:f2:ee:d1:68:47:bb:2c:
d7:2d:39:ff:c5:d2:52:50:3c:37:17:75:69:98:f9:5f:1e:7a:
d8:9d:31:be:f8:30:e8:0e:b4:ae:4b:e4:d8:6d:4c:25:7d:35:
8a:2f:32:5c:32:c1:10:9b:4e:d6:53:59:eb:45:fc:64:4a:b2:
cc:11:9c:6b:5e:d8:90:a1:1f:92:e5:52:2f:4e:08:c2:0f:93:
93:02:b1:da:db:d7:50:fa:e7:ee:c0:d6:ef:34:3b:db:b1:b8:
31:6c:db:3e:25:88:e2:11:ee:23:6e:06:20:d2:4e:70:bf:6d:
b7:28:0b:e7:66:0f:0a:0c:8a:78:2a:4a:d0:0f:eb:db:dc:fd:
5b:17:79:c3:04:df:da:97:42:e5:09:bf:54:19:24:8b:ac:f9:
83:8b:a4:27:c2:4f:89:7b:56:d0:78:24:1c:41:c7:38:c0:b9:
af:31:22:b2:46:2a:d1:2a:a6:43:c4:79:8d:bb:e2:6b:6d:4f:
7c:b0:4f:cd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICATUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMwNTBaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdCNzA5QTg3OTNBRURD
ODZFQUE0NTc3OTUwNjAwNTdGNjU4QjEzNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoz2CRzQ/lBjhVhCObUGnHSsZ8RqT5jGBjnQpF0ulmkwZ7kbqL
R4HOXHnRvZuv4kmhwLT5eXQNWtGPUZInlpgpsn1qAh5bFbNUPy1+RVF95GAI8GCd
ewESd5Mxyb1JHUMmYmUwT47HTNMXphjU5SzxDMowXBDGgB/sOIHPDvgaWCi+2xnD
UCiH2/sEbz0C2Ay8C2Jk9/xYlK/1m+CPWMJtjUDquA8DoLr3rhDcNNrtPoeewLGV
S7SRpcuk99jfSoZCZ9a1aU4PlTJWQQzOKq7cMYzzX5RKUo/F3NZ7ykrkEfBsvspn
sG786iHwkOMgonFWWQPmdoVpwnB8Y2AvjQVLAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUe3Cah5Ou3IbqpFd5UGAFf2WLE10wHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9lM0NhaDVPdTNJYnFwRmQ1VUdBRmYyV0xFMTAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB0wqgMA0GCSqGSIb3DQEBCwUAA4IBAQB3oDdIw8UFpIG4B93fJGUj
LNBchTq2YHiMGBeiJD9SVNWhIUT34P62s8mDXF/H2ceZUlSWg8iZ3f4DTOqq67wR
8/Lu0WhHuyzXLTn/xdJSUDw3F3VpmPlfHnrYnTG++DDoDrSuS+TYbUwlfTWKLzJc
MsEQm07WU1nrRfxkSrLMEZxrXtiQoR+S5VIvTgjCD5OTArHa29dQ+ufuwNbvNDvb
sbgxbNs+JYjiEe4jbgYg0k5wv223KAvnZg8KDIp4KkrQD+vb3P1bF3nDBN/al0Ll
Cb9UGSSLrPmDi6Qnwk+Je1bQeCQcQcc4wLmvMSKyRirRKqZDxHmNu+JrbU98sE/N
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:42:40 2025 by rpki-client