Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/0XBeuLS7fhqxzsoC1266WZxvNHg.roa
File: 0XBeuLS7fhqxzsoC1266WZxvNHg.roa (raw, json)
Hash identifier: 2ARCfSvLJ/D5KX/IjxP3lMhmi/LYstyQvfoAR+NaKQU=
Subject key identifier: D1:70:5E:B8:B4:BB:7E:1A:B1:CE:CA:02:D7:6E:BA:59:9C:6F:34:78
Certificate issuer: /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial: 1A
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/0XBeuLS7fhqxzsoC1266WZxvNHg.roa
Signing time: Mon 20 Nov 2023 03:58:13 +0000
ROA not before: Mon 20 Nov 2023 03:58:13 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 7511
IP address blocks: 219.100.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Validity
Not Before: Nov 20 03:58:13 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=D1705EB8B4BB7E1AB1CECA02D76EBA599C6F3478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:39:7c:ee:b0:38:d4:cb:3c:51:95:1c:ca:1a:
8a:22:a7:45:54:f8:b6:f8:66:f5:dd:0a:8c:f2:aa:
e5:fe:8a:32:26:7a:b2:87:de:28:8c:59:7f:51:9a:
80:f9:67:f1:da:50:b8:e6:47:51:aa:4c:1d:b6:63:
eb:a6:93:71:4e:57:2c:1b:0a:3b:cc:17:97:4e:f5:
3c:59:d5:35:af:a5:04:c3:fa:46:13:b4:0a:c8:c7:
c9:a1:17:a6:a0:2f:cc:66:44:1d:34:12:90:54:7b:
87:76:a8:dd:09:92:24:72:05:82:d9:75:ac:75:b2:
d4:12:b5:a6:c4:0a:e8:df:14:1e:bb:09:fb:43:44:
87:f0:19:6d:6b:c5:04:6e:dd:bb:9d:ab:64:61:96:
64:59:0f:d3:29:47:67:70:55:07:72:86:70:1e:e8:
9d:a1:c2:0b:3e:7b:2a:dc:21:eb:73:f9:25:0e:3c:
d1:1b:46:de:c8:37:1e:e2:94:93:eb:90:e8:2c:07:
61:16:76:b6:37:a3:2b:e0:19:f5:b7:dd:bd:80:ba:
64:0f:9d:94:11:7b:cf:69:2f:fd:69:39:46:30:05:
cd:84:7c:3c:51:0a:c9:cb:69:7f:30:2e:30:42:4d:
11:28:9a:52:38:be:93:3c:58:3e:0d:e5:5f:20:5f:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:70:5E:B8:B4:BB:7E:1A:B1:CE:CA:02:D7:6E:BA:59:9C:6F:34:78
X509v3 Authority Key Identifier:
keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/0XBeuLS7fhqxzsoC1266WZxvNHg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.8.0/22
Signature Algorithm: sha256WithRSAEncryption
68:67:9c:71:11:59:48:b0:54:dc:2b:a2:3a:ba:ac:b7:f7:38:
11:cc:00:8e:e9:70:47:34:95:ac:a9:bb:6b:08:56:c0:57:7d:
12:75:39:fd:97:4d:e7:61:e1:47:dc:4d:5c:0c:ed:43:9f:3b:
76:73:fc:e3:17:11:34:b4:2e:6b:12:c8:50:46:8c:05:b2:82:
37:b2:46:69:a6:39:03:d3:14:7e:9d:2a:e0:a3:9a:47:b4:d3:
78:1f:cb:21:7f:3a:65:8d:3a:3d:c3:16:c3:ee:c1:95:e7:ba:
bc:e9:47:10:c4:38:eb:19:f6:4d:4a:12:e3:c4:19:31:0a:ba:
3a:f1:fd:1f:c2:01:a1:2d:44:a8:68:1b:62:4f:50:2f:da:3b:
b1:c3:0e:f1:b2:a7:9f:f7:5b:43:34:50:8f:91:67:f5:23:be:
67:0f:d5:50:c3:4a:30:53:95:9d:46:52:8a:83:4c:a8:8c:84:
b7:61:ac:3a:1a:37:a5:89:ad:06:21:ff:dd:4f:af:81:2d:b8:
9c:a8:99:09:70:7e:ec:ef:4c:1d:dd:2f:4a:fc:38:dc:66:ce:
39:88:8f:d9:d5:d7:b8:f4:4b:99:9a:e0:5c:1f:42:85:20:1a:
8c:85:cd:f2:41:5a:e9:1a:36:87:53:31:3f:f2:52:a7:02:c0:
3e:63:37:ba
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NjQy
QTA3RDlBQzlEMjI3RUE0MkY3OUU2RDEzMUNCMUE5MjBFRENFMB4XDTIzMTEyMDAz
NTgxM1oXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoRDE3MDVFQjhCNEJCN0Ux
QUIxQ0VDQTAyRDc2RUJBNTk5QzZGMzQ3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPA5fO6wONTLPFGVHMoaiiKnRVT4tvhm9d0KjPKq5f6KMiZ6sofe
KIxZf1GagPln8dpQuOZHUapMHbZj66aTcU5XLBsKO8wXl071PFnVNa+lBMP6RhO0
CsjHyaEXpqAvzGZEHTQSkFR7h3ao3QmSJHIFgtl1rHWy1BK1psQK6N8UHrsJ+0NE
h/AZbWvFBG7du52rZGGWZFkP0ylHZ3BVB3KGcB7onaHCCz57Ktwh63P5JQ480RtG
3sg3HuKUk+uQ6CwHYRZ2tjejK+AZ9bfdvYC6ZA+dlBF7z2kv/Wk5RjAFzYR8PFEK
yctpfzAuMEJNESiaUji+kzxYPg3lXyBfwUsCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTRcF64tLt+GrHOygLXbrpZnG80eDAfBgNVHSMEGDAWgBR2QqB9msnSJ+pC955t
ExyxqSDtzjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMzEvZGtLZ2ZackowaWZxUXZlZWJSTWNzYWtnN2M0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZGtLZ2ZackowaWZxUXZlZWJSTWNz
YWtnN2M0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDMxLzBYQmV1TFM3ZmhxeHpzb0MxMjY2V1p4dk5IZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALbZAgwDQYJKoZIhvcNAQELBQADggEBAGhnnHERWUiwVNwrojq6rLf3
OBHMAI7pcEc0laypu2sIVsBXfRJ1Of2XTedh4UfcTVwM7UOfO3Zz/OMXETS0LmsS
yFBGjAWygjeyRmmmOQPTFH6dKuCjmke003gfyyF/OmWNOj3DFsPuwZXnurzpRxDE
OOsZ9k1KEuPEGTEKujrx/R/CAaEtRKhoG2JPUC/aO7HDDvGyp5/3W0M0UI+RZ/Uj
vmcP1VDDSjBTlZ1GUoqDTKiMhLdhrDoaN6WJrQYh/91Pr4EtuJyomQlwfuzvTB3d
L0r8ONxmzjmIj9nV17j0S5ma4FwfQoUgGoyFzfJBWukaNodTMT/yUqcCwD5jN7o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:58:22 2025 by rpki-client