Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZvgrfoEMp_jXFrrjefAxzs4odcg.roa
File: ZvgrfoEMp_jXFrrjefAxzs4odcg.roa (raw, json)
Hash identifier: 8G1eivQ2X1tez5sdc6K5YeYcPMx+hBN/Q55iGiRIzZY=
Subject key identifier: 66:F8:2B:7E:81:0C:A7:F8:D7:16:BA:E3:79:F0:31:CE:CE:28:75:C8
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: A8
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZvgrfoEMp_jXFrrjefAxzs4odcg.roa
Signing time: Wed 04 Dec 2024 19:34:58 +0000
ROA not before: Wed 04 Dec 2024 19:34:58 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.172.96/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:34:58 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=66F82B7E810CA7F8D716BAE379F031CECE2875C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:4f:02:c9:b8:3a:95:0b:76:28:4d:31:87:
a2:80:5a:fb:22:9e:9a:02:00:80:28:91:51:2b:22:
f8:2a:08:b9:b1:7b:55:d0:eb:cd:bd:90:48:bb:8c:
17:03:c8:c3:60:8a:55:c4:b1:71:1c:52:3a:7b:e5:
8f:bd:f6:9c:39:e4:7d:8c:f8:8b:fc:ad:63:3c:8a:
36:00:74:4e:63:d2:24:2d:bd:4e:f3:ca:d3:e4:a4:
ac:ab:3f:c8:26:44:a5:3b:6a:34:9f:9a:f1:8c:ef:
9a:4b:72:cb:57:2c:5b:e0:d9:63:79:2a:a2:f8:7b:
6f:d5:1c:f9:fe:4f:21:34:90:7f:76:05:eb:f2:7c:
e0:af:32:c3:8b:ad:4c:2e:05:f1:e9:6f:1f:6b:ed:
c3:9f:91:1d:75:8f:1d:32:0f:f0:98:26:98:a7:ef:
44:25:fb:11:e9:ed:9f:d0:1b:8d:b2:e4:84:66:de:
fe:84:51:b8:5d:23:38:d7:b6:34:fc:81:f3:b8:a4:
48:51:61:0f:45:de:0b:b1:4b:f3:00:54:76:c2:5d:
71:3b:a6:7c:b8:13:fd:19:0a:f2:82:68:da:85:14:
e7:6c:78:6d:de:3e:9b:a0:6f:71:e6:cc:83:c4:74:
68:89:c0:c5:ee:0c:a1:69:40:3b:54:24:e3:88:57:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F8:2B:7E:81:0C:A7:F8:D7:16:BA:E3:79:F0:31:CE:CE:28:75:C8
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZvgrfoEMp_jXFrrjefAxzs4odcg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.172.96/29
Signature Algorithm: sha256WithRSAEncryption
37:9e:f9:dc:79:90:3c:6a:0a:5c:38:10:52:82:64:b3:e5:a7:
2d:5a:39:f3:90:f6:15:e8:29:92:31:f3:22:2b:31:bc:d1:3a:
d1:79:85:eb:c0:53:ea:0b:9f:2c:2d:ee:9f:eb:9d:47:e8:32:
86:ea:f8:8e:ff:ac:10:fd:e6:0c:ff:49:02:ea:19:64:c0:70:
d6:f3:4d:1e:44:ef:e8:94:0c:1b:5a:ed:c2:0f:c6:d7:f2:68:
b6:be:fa:9c:08:92:c7:57:46:fc:69:39:00:9c:36:4a:0d:cc:
a4:d8:7d:4e:91:75:82:b9:79:e2:2f:94:b2:ce:84:2d:c1:2b:
7b:aa:54:99:9e:ce:a5:f0:5c:fe:86:05:9d:7b:85:1e:37:8f:
83:5c:a8:10:ff:e6:9a:11:55:97:92:97:c4:ae:db:80:7b:bd:
4c:4f:27:be:c2:10:f9:5c:24:24:12:e8:70:1a:74:70:0e:06:
ab:3f:ce:e6:28:4a:69:5d:46:61:e8:8e:fb:b1:3a:e4:73:4f:
5a:ce:07:7b:b0:f6:7f:ac:4d:0a:17:58:ff:a8:64:f5:e3:b9:
55:95:09:1a:90:94:6c:9f:3d:0c:ff:f7:d3:2c:00:6c:2b:e4:
c3:cc:e0:dc:82:a7:36:cd:8d:6f:3c:bb:97:ee:1b:6b:17:d5:
e3:8b:85:ca
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDQx
OTM0NThaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY2RjgyQjdFODEwQ0E3
RjhENzE2QkFFMzc5RjAzMUNFQ0UyODc1QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDesk8Cybg6lQt2KE0xh6KAWvsinpoCAIAokVErIvgqCLmxe1XQ
6829kEi7jBcDyMNgilXEsXEcUjp75Y+99pw55H2M+Iv8rWM8ijYAdE5j0iQtvU7z
ytPkpKyrP8gmRKU7ajSfmvGM75pLcstXLFvg2WN5KqL4e2/VHPn+TyE0kH92Bevy
fOCvMsOLrUwuBfHpbx9r7cOfkR11jx0yD/CYJpin70Ql+xHp7Z/QG42y5IRm3v6E
UbhdIzjXtjT8gfO4pEhRYQ9F3guxS/MAVHbCXXE7pny4E/0ZCvKCaNqFFOdseG3e
Ppugb3HmzIPEdGiJwMXuDKFpQDtUJOOIV27HAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUZvgrfoEMp/jXFrrjefAxzs4odcgwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC9admdyZm9FTXBfalhGcnJqZWZBeHpzNG9kY2cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUDPdWsYDANBgkqhkiG9w0BAQsFAAOCAQEAN5753HmQPGoKXDgQUoJk
s+WnLVo585D2FegpkjHzIisxvNE60XmF68BT6gufLC3un+udR+gyhur4jv+sEP3m
DP9JAuoZZMBw1vNNHkTv6JQMG1rtwg/G1/Jotr76nAiSx1dG/Gk5AJw2Sg3MpNh9
TpF1grl54i+Uss6ELcEre6pUmZ7OpfBc/oYFnXuFHjePg1yoEP/mmhFVl5KXxK7b
gHu9TE8nvsIQ+VwkJBLocBp0cA4Gqz/O5ihKaV1GYeiO+7E65HNPWs4He7D2f6xN
ChdY/6hk9eO5VZUJGpCUbJ89DP/30ywAbCvkw8zg3IKnNs2Nbzy7l+4baxfV44uF
yg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 13:42:51 2025 by rpki-client