Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/aZQBZSE6d1hpNM1ldTClRFLcTBQ.roa
File: aZQBZSE6d1hpNM1ldTClRFLcTBQ.roa (raw, json)
Hash identifier: Gl9wvAaODNgmGoRzlMGWEefssVIXJa0c/zEM/vKeCFg=
Subject key identifier: 69:94:01:65:21:3A:77:58:69:34:CD:65:75:30:A5:44:52:DC:4C:14
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 95
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/aZQBZSE6d1hpNM1ldTClRFLcTBQ.roa
Signing time: Wed 04 Dec 2024 19:10:58 +0000
ROA not before: Wed 04 Dec 2024 19:10:58 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 50601
IP address blocks: 124.40.52.128/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:10:58 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=69940165213A77586934CD657530A54452DC4C14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:0a:8e:30:bd:e6:56:a0:73:3f:e3:f5:16:
7b:10:e6:58:b3:0d:1b:ef:b3:98:7c:2c:94:b6:f9:
2a:4a:e8:a0:95:ae:65:a5:1a:f2:24:26:50:cc:cf:
2c:ac:5a:5b:8f:aa:cb:ba:37:21:ab:e3:44:b4:11:
79:9f:53:22:72:8a:6b:08:d1:e5:58:d1:94:15:c3:
80:4b:e5:3a:79:87:3f:f0:28:ab:1f:61:34:c6:ab:
e6:59:dd:48:1a:3c:6e:3a:77:72:d6:a1:62:c3:b2:
5d:9a:fd:50:9f:73:a0:aa:8e:96:19:13:8b:c3:06:
41:58:d8:43:70:03:d3:b7:aa:7f:8d:5e:45:c8:1a:
a2:fc:0a:c9:6e:8b:57:80:0e:70:de:15:c7:f1:95:
52:ec:95:ac:fa:a5:8a:24:b6:6b:76:c0:15:16:18:
3f:4f:87:88:53:f2:55:56:89:fd:0d:f4:6a:5c:b5:
a2:10:0a:46:a1:1f:3d:0c:d1:1c:9d:2e:2b:11:c3:
ab:02:cf:15:11:0e:8a:bf:ea:ad:3a:c2:2b:9b:0a:
c7:4e:30:04:f8:bd:d4:42:c0:ab:c2:3b:db:bd:ca:
61:85:d8:78:b9:e1:ab:05:55:53:01:a5:9d:f1:1c:
37:6c:7f:e8:10:ed:f5:a1:16:18:52:e6:29:b6:66:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:01:65:21:3A:77:58:69:34:CD:65:75:30:A5:44:52:DC:4C:14
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/aZQBZSE6d1hpNM1ldTClRFLcTBQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.40.52.128/26
Signature Algorithm: sha256WithRSAEncryption
41:75:df:ab:53:87:9b:a1:58:72:64:fd:fe:be:aa:ce:29:6d:
bb:99:07:0a:f3:6a:4b:2b:7c:ff:9e:ef:b6:aa:a3:a4:74:ae:
6a:36:f1:e5:b5:66:da:5e:d6:4c:99:74:74:c0:e7:c7:6e:52:
aa:1d:36:e9:22:47:3a:e0:b5:a0:38:8c:e0:60:be:e6:b2:d9:
43:2b:3a:3c:d2:8f:7f:aa:36:43:3b:f1:c2:81:4a:c5:31:01:
9d:19:e3:65:f2:15:3b:9b:e4:5d:4d:ff:fa:c5:d5:fa:33:9c:
7a:bf:0d:c8:42:34:f0:19:c4:5e:45:56:76:31:0d:76:8d:e4:
c0:94:45:d1:5a:ca:e4:57:60:bc:ef:31:3f:db:bf:a0:b8:95:
ff:1b:2f:94:29:f9:46:85:ad:aa:46:b4:79:0d:1a:ee:6f:e6:
25:f1:47:d5:53:ef:48:09:74:22:b4:2f:96:d1:a3:1f:9b:1f:
fe:fd:90:53:8c:ce:fa:9a:d7:52:72:c8:f0:d1:9c:ac:9c:f0:
ab:9f:d3:8c:99:89:f7:41:00:2c:dc:ad:a6:c3:9d:f9:a9:b8:
c7:3b:c3:8f:99:b9:c5:2b:57:94:9f:43:ea:7b:17:dd:61:5b:
ce:5e:b4:0e:2d:f3:65:9b:88:a7:73:7e:0d:de:d3:ce:db:b0:
81:00:e1:21
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDQx
OTEwNThaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY5OTQwMTY1MjEzQTc3
NTg2OTM0Q0Q2NTc1MzBBNTQ0NTJEQzRDMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYyAqOML3mVqBzP+P1FnsQ5lizDRvvs5h8LJS2+SpK6KCVrmWl
GvIkJlDMzyysWluPqsu6NyGr40S0EXmfUyJyimsI0eVY0ZQVw4BL5Tp5hz/wKKsf
YTTGq+ZZ3UgaPG46d3LWoWLDsl2a/VCfc6CqjpYZE4vDBkFY2ENwA9O3qn+NXkXI
GqL8Cslui1eADnDeFcfxlVLslaz6pYoktmt2wBUWGD9Ph4hT8lVWif0N9GpctaIQ
CkahHz0M0RydLisRw6sCzxURDoq/6q06wiubCsdOMAT4vdRCwKvCO9u9ymGF2Hi5
4asFVVMBpZ3xHDdsf+gQ7fWhFhhS5im2ZqOZAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUaZQBZSE6d1hpNM1ldTClRFLcTBQwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC9hWlFCWlNFNmQxaHBOTTFsZFRDbFJGTGNUQlEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUGfCg0gDANBgkqhkiG9w0BAQsFAAOCAQEAQXXfq1OHm6FYcmT9/r6q
ziltu5kHCvNqSyt8/57vtqqjpHSuajbx5bVm2l7WTJl0dMDnx25Sqh026SJHOuC1
oDiM4GC+5rLZQys6PNKPf6o2QzvxwoFKxTEBnRnjZfIVO5vkXU3/+sXV+jOcer8N
yEI08BnEXkVWdjENdo3kwJRF0VrK5FdgvO8xP9u/oLiV/xsvlCn5RoWtqka0eQ0a
7m/mJfFH1VPvSAl0IrQvltGjH5sf/v2QU4zO+prXUnLI8NGcrJzwq5/TjJmJ90EA
LNytpsOd+am4xzvDj5m5xStXlJ9D6nsX3WFbzl60Di3zZZuIp3N+Dd7TztuwgQDh
IQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:44 2025 by rpki-client