Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/95HLXvutg_Z5xYHnST9rVY-F5H0.roa
File: 95HLXvutg_Z5xYHnST9rVY-F5H0.roa (raw, json)
Hash identifier: 7b9NVzzJVfDXLwFBMTboWMbjfiT/9UbGfiO+5W+wr0U=
Subject key identifier: F7:91:CB:5E:FB:AD:83:F6:79:C5:81:E7:49:3F:6B:55:8F:85:E4:7D
Certificate issuer: /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial: 11
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/95HLXvutg_Z5xYHnST9rVY-F5H0.roa
Signing time: Tue 02 Apr 2024 00:01:14 +0000
ROA not before: Tue 02 Apr 2024 00:01:14 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2497
IP address blocks: 157.8.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Validity
Not Before: Apr 2 00:01:14 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=F791CB5EFBAD83F679C581E7493F6B558F85E47D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:6b:a5:c9:37:15:ea:e0:56:30:08:b9:4e:
2f:0a:43:95:1e:b3:3c:5f:47:3f:14:6c:8c:d9:58:
21:ed:92:37:b3:66:6d:57:19:bb:b6:f1:6f:b6:ef:
88:ae:b6:75:83:93:54:ff:2d:85:01:c8:39:f9:7f:
74:a2:af:e5:6f:b7:48:b5:2f:2c:b4:86:b0:ec:fc:
65:1b:1a:b7:2a:e4:7e:c2:60:b5:93:98:71:5e:57:
91:13:09:a6:d6:61:bb:06:92:bc:02:94:94:0d:c0:
7e:b2:aa:5a:bd:38:cc:2b:22:31:52:d3:dc:ab:2b:
11:08:e8:9f:68:c5:b3:d7:26:e7:88:c7:82:ff:1c:
d7:21:1b:65:ea:df:4b:f6:93:2e:57:7c:52:d9:d0:
63:56:51:35:e3:24:30:11:11:d3:1b:2c:f3:72:01:
3b:33:bb:2d:38:c4:cd:ad:f3:54:70:b0:4d:8a:d7:
e8:48:a9:58:96:86:97:e7:19:ec:76:93:0a:bb:22:
52:e2:ca:d0:9b:c6:62:d3:ef:50:ba:2c:df:3e:67:
c9:15:64:54:70:45:ff:78:5d:fa:48:dc:b5:87:66:
8f:ca:d5:e7:dd:e9:01:8e:2d:a5:52:17:34:f5:ec:
83:80:5b:0c:ad:0e:ca:80:70:de:45:03:fa:9c:65:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:CB:5E:FB:AD:83:F6:79:C5:81:E7:49:3F:6B:55:8F:85:E4:7D
X509v3 Authority Key Identifier:
keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/95HLXvutg_Z5xYHnST9rVY-F5H0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.8.18.0/23
Signature Algorithm: sha256WithRSAEncryption
93:d4:08:3d:d3:6d:8a:3c:9a:75:68:2a:01:70:c7:c3:76:54:
f0:33:68:98:4d:43:8e:36:00:0a:c0:01:39:cc:07:3e:90:5c:
41:17:6b:1e:18:46:fe:f1:2b:15:ab:b9:30:49:66:86:4f:ee:
7c:6f:ac:f5:be:7b:43:5e:02:22:94:5c:0a:dd:72:d3:65:0e:
1e:99:7d:c7:74:05:1a:db:8d:39:3e:b7:58:d8:a4:19:ef:43:
56:fd:c7:db:54:c4:f3:4d:63:00:c6:37:ef:ad:2b:29:0b:c9:
f3:6c:a5:39:fb:5c:c5:89:67:2d:84:01:7f:35:3c:cc:36:cf:
29:b6:5c:c1:67:86:d8:72:7e:7b:48:a1:06:29:0f:79:c9:05:
4b:98:c1:c0:04:0b:2a:70:29:88:50:48:64:89:e3:4b:14:da:
59:2b:d8:d0:72:83:51:07:ef:fd:c3:12:a9:7d:2a:bd:b2:64:
da:01:5c:e4:53:54:8d:f0:00:60:31:8d:da:3b:57:c0:66:41:
7e:60:83:c3:95:ad:9e:7d:5b:cb:f4:b7:c5:0e:3b:30:2d:7e:
89:3c:32:d7:6c:12:bf:70:8e:61:81:e6:4a:84:0d:d2:40:d8:
28:27:3a:72:f5:44:1b:d6:5c:f3:d4:0e:f6:ef:d0:11:9c:d7:
53:9e:cf:67
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTkx
Q0I5RjRDNDIyRDNCM0Q2NzUzNzFCMThBOERBRERBRTg3OThEMB4XDTI0MDQwMjAw
MDExNFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjc5MUNCNUVGQkFEODNG
Njc5QzU4MUU3NDkzRjZCNTU4Rjg1RTQ3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM0Ya6XJNxXq4FYwCLlOLwpDlR6zPF9HPxRsjNlYIe2SN7NmbVcZ
u7bxb7bviK62dYOTVP8thQHIOfl/dKKv5W+3SLUvLLSGsOz8ZRsatyrkfsJgtZOY
cV5XkRMJptZhuwaSvAKUlA3AfrKqWr04zCsiMVLT3KsrEQjon2jFs9cm54jHgv8c
1yEbZerfS/aTLld8UtnQY1ZRNeMkMBER0xss83IBOzO7LTjEza3zVHCwTYrX6Eip
WJaGl+cZ7HaTCrsiUuLK0JvGYtPvULos3z5nyRVkVHBF/3hd+kjctYdmj8rV593p
AY4tpVIXNPXsg4BbDK0OyoBw3kUD+pxlYPMCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBT3kcte+62D9nnFgedJP2tVj4XkfTAfBgNVHSMEGDAWgBRxkcufTEItOz1nU3Gx
io2t2uh5jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy9jWkhMbjB4Q0xUczlaMU54c1lxTnJkcm9lWTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jWkhMbjB4Q0xUczlaMU54c1lxTnJk
cm9lWTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTkzNy85NUhMWHZ1dGdfWjV4WUhuU1Q5clZZLUY1SDAucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBnQgSMA0GCSqGSIb3DQEBCwUAA4IBAQCT1Ag9022KPJp1aCoBcMfDdlTw
M2iYTUOONgAKwAE5zAc+kFxBF2seGEb+8SsVq7kwSWaGT+58b6z1vntDXgIilFwK
3XLTZQ4emX3HdAUa2405PrdY2KQZ70NW/cfbVMTzTWMAxjfvrSspC8nzbKU5+1zF
iWcthAF/NTzMNs8ptlzBZ4bYcn57SKEGKQ95yQVLmMHABAsqcCmIUEhkieNLFNpZ
K9jQcoNRB+/9wxKpfSq9smTaAVzkU1SN8ABgMY3aO1fAZkF+YIPDla2efVvL9LfF
DjswLX6JPDLXbBK/cI5hgeZKhA3SQNgoJzpy9UQb1lzz1A7279ARnNdTns9n
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:22 2025 by rpki-client