Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/o6d-5eB5fl1zEeJLNWUBQMKInDY.roa
File: o6d-5eB5fl1zEeJLNWUBQMKInDY.roa (raw, json)
Hash identifier: dnFyURemRCY+GWPKjvZuNE0kAMU8HfjSkJoi6cHY+LA=
Subject key identifier: A3:A7:7E:E5:E0:79:7E:5D:73:11:E2:4B:35:65:01:40:C2:88:9C:36
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0153
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/o6d-5eB5fl1zEeJLNWUBQMKInDY.roa
Signing time: Sun 01 Oct 2023 01:33:28 +0000
ROA not before: Sun 01 Oct 2023 01:33:28 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.125.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:33:28 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=A3A77EE5E0797E5D7311E24B35650140C2889C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:14:88:5c:d0:94:32:6e:8c:03:00:e3:3c:
9b:b8:b8:8e:ff:01:0a:b5:94:88:8f:ae:a9:41:82:
cd:b8:7b:b2:d0:c6:47:f2:a9:f6:e6:fa:04:5d:7e:
2f:fe:cf:05:3f:86:d8:86:c4:a5:a7:d6:6a:9a:0a:
ac:02:16:40:b7:43:01:69:94:7e:e2:0a:87:f4:7d:
99:29:a2:4b:cf:a6:24:3a:e4:56:c1:87:9b:88:f0:
c7:36:46:ba:2d:55:5d:e8:3d:e8:5b:09:3f:60:68:
9d:6b:66:15:e4:21:c9:ee:21:b4:70:44:e1:49:ee:
c6:0f:ab:a4:43:c3:b9:74:fe:35:e6:26:b7:a7:0e:
81:e5:4e:cd:15:39:9b:e6:ea:32:d1:3d:37:47:4c:
61:81:53:61:3c:80:ff:33:e6:b3:8d:54:ca:1c:75:
ee:51:40:a0:1d:87:f3:bb:b7:32:12:c6:c8:fc:ee:
9e:52:7c:ed:a3:b4:8e:4d:ed:9e:10:8c:ee:8b:03:
7c:1e:71:e9:41:18:33:44:4e:be:a5:9b:e0:72:a7:
f1:fc:d3:cc:8a:f9:e7:d0:52:28:80:e1:6a:c4:87:
88:34:f6:59:7f:4e:24:a3:4b:36:7c:1e:8e:88:59:
c9:c8:2a:65:0a:bf:fd:19:bc:10:7e:25:31:cb:28:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A7:7E:E5:E0:79:7E:5D:73:11:E2:4B:35:65:01:40:C2:88:9C:36
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/o6d-5eB5fl1zEeJLNWUBQMKInDY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.125.173.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:02:03:b3:6f:12:b3:7e:6b:ab:df:26:72:76:f7:13:28:e5:
b1:d7:12:fd:3a:f7:80:21:7e:c6:e0:0b:ae:d4:54:0d:6b:fa:
38:ec:f5:4a:57:26:b0:77:cf:5a:72:41:72:bd:60:be:12:3b:
45:43:0a:12:d7:96:50:1b:cc:02:26:34:b3:0f:d6:95:7a:2f:
7e:c8:60:7c:83:da:69:d3:fb:6e:21:18:c0:b7:76:a3:64:c2:
a2:6e:41:a2:ea:d7:47:cf:1a:59:dd:0c:4d:73:bb:bf:ec:47:
0e:76:c6:ce:3f:ef:c4:88:71:a6:ca:b4:ae:f0:69:23:ba:51:
c1:5b:8f:3e:3f:63:8f:8b:be:09:a1:7b:1f:fd:f5:96:88:02:
07:ca:97:dc:39:d1:32:67:2c:7a:1e:3d:1e:df:93:91:f7:27:
aa:81:23:0f:78:90:41:86:ef:81:14:97:93:8d:ec:4f:80:c1:
77:2e:69:0d:fc:0e:85:e2:92:29:2a:c5:f6:52:49:3f:19:7c:
18:06:e0:6a:a5:4b:bf:86:e4:86:c1:ae:35:ac:34:d7:f6:41:
bb:58:2b:1a:53:0b:87:b7:0b:f4:48:36:bb:98:63:24:00:52:
e1:1f:14:29:67:6e:95:02:b8:f0:3d:12:f2:d5:62:38:10:9e:
f0:fa:19:5b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMzMjhaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEEzQTc3RUU1RTA3OTdF
NUQ3MzExRTI0QjM1NjUwMTQwQzI4ODlDMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCl4hSIXNCUMm6MAwDjPJu4uI7/AQq1lIiPrqlBgs24e7LQxkfy
qfbm+gRdfi/+zwU/htiGxKWn1mqaCqwCFkC3QwFplH7iCof0fZkpokvPpiQ65FbB
h5uI8Mc2RrotVV3oPehbCT9gaJ1rZhXkIcnuIbRwROFJ7sYPq6RDw7l0/jXmJren
DoHlTs0VOZvm6jLRPTdHTGGBU2E8gP8z5rONVMocde5RQKAdh/O7tzISxsj87p5S
fO2jtI5N7Z4QjO6LA3wecelBGDNETr6lm+Byp/H808yK+efQUiiA4WrEh4g09ll/
TiSjSzZ8Ho6IWcnIKmUKv/0ZvBB+JTHLKA6tAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUo6d+5eB5fl1zEeJLNWUBQMKInDYwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9vNmQtNWVCNWZsMXpFZUpMTldVQlFNS0luRFku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA032tMA0GCSqGSIb3DQEBCwUAA4IBAQB8AgOzbxKzfmur3yZydvcT
KOWx1xL9OveAIX7G4Auu1FQNa/o47PVKVyawd89ackFyvWC+EjtFQwoS15ZQG8wC
JjSzD9aVei9+yGB8g9pp0/tuIRjAt3ajZMKibkGi6tdHzxpZ3QxNc7u/7EcOdsbO
P+/EiHGmyrSu8GkjulHBW48+P2OPi74JoXsf/fWWiAIHypfcOdEyZyx6Hj0e35OR
9yeqgSMPeJBBhu+BFJeTjexPgMF3LmkN/A6F4pIpKsX2Ukk/GXwYBuBqpUu/huSG
wa41rDTX9kG7WCsaUwuHtwv0SDa7mGMkAFLhHxQpZ26VArjwPRLy1WI4EJ7w+hlb
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:48 2025 by rpki-client