Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/iE0T6WeIET77bU0ASgC_qjvsaLI.roa
File: iE0T6WeIET77bU0ASgC_qjvsaLI.roa (raw, json)
Hash identifier: ggQG8SevH67BhGAdiCQoi+UP3ZJoilumEzwHkbuV67k=
Subject key identifier: 88:4D:13:E9:67:88:11:3E:FB:6D:4D:00:4A:00:BF:AA:3B:EC:68:B2
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0297
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/iE0T6WeIET77bU0ASgC_qjvsaLI.roa
Signing time: Mon 20 Feb 2023 08:05:26 +0000
ROA not before: Mon 20 Feb 2023 08:05:26 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.224/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 08:05:26 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=884D13E96788113EFB6D4D004A00BFAA3BEC68B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:14:a2:12:28:3c:11:b6:e3:49:2f:96:b4:
92:4f:77:77:f3:ae:17:42:91:f4:b0:0d:ff:91:fe:
e2:52:49:36:3b:a9:16:f5:b5:5c:30:d4:92:f9:be:
83:c2:2e:95:57:6c:cb:85:3e:41:1b:8d:b0:e1:6e:
cf:29:26:47:2b:a4:24:29:87:ad:6e:0f:55:22:a8:
72:2a:db:07:b5:18:95:9c:64:83:18:02:40:0a:32:
2b:77:8d:38:ae:c6:b0:fe:f5:e3:76:fb:26:0e:21:
8d:1c:5c:0a:85:1b:bb:18:a9:f0:94:c8:fb:aa:ec:
c7:38:dc:a2:b4:9d:1c:c4:1b:42:76:03:c1:0a:06:
bf:fb:60:aa:51:56:15:a4:09:b8:4a:51:af:56:c2:
dd:42:09:41:bc:4e:b8:bc:90:9f:7e:bf:34:8c:8d:
58:51:75:54:f1:d0:3a:27:03:1a:94:02:d7:92:f0:
bf:1c:f4:34:c4:9e:f7:7e:cc:da:4e:9e:89:1e:ef:
e9:be:ea:82:1b:b7:5c:32:f8:8b:41:78:c1:7e:88:
50:ee:de:b9:73:cc:df:d2:b4:be:9e:57:9d:b3:de:
75:89:07:c4:a9:e0:07:2f:2e:c5:ad:b1:d3:0d:40:
38:1b:f8:2b:db:bf:de:a6:b5:1b:e5:0e:21:fe:d8:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4D:13:E9:67:88:11:3E:FB:6D:4D:00:4A:00:BF:AA:3B:EC:68:B2
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/iE0T6WeIET77bU0ASgC_qjvsaLI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.224/32
Signature Algorithm: sha256WithRSAEncryption
5f:f9:f4:e0:3e:f3:d6:06:70:8f:fd:5b:a4:4d:d0:dd:c1:15:
80:ec:f0:49:be:76:74:5e:6b:6d:67:ff:a6:80:63:8f:05:26:
f0:29:6d:43:b3:47:08:33:fc:5d:bf:3a:4b:cb:0e:4f:8c:af:
62:48:68:29:66:13:41:8c:21:6e:ba:b1:a7:c6:1f:c1:90:70:
de:fa:aa:7a:8d:19:be:08:2b:12:1d:35:ba:77:82:c7:c4:da:
e2:5a:8a:dd:59:69:19:6c:64:76:c5:36:07:47:c2:cf:e2:5a:
85:69:07:5a:21:a2:94:d9:81:bb:12:ae:2d:ba:03:ff:6d:90:
01:0e:bf:7d:db:8d:8d:4b:02:ff:a8:b5:56:20:6b:e9:5f:9b:
11:03:84:4d:28:3a:d4:a5:06:37:e9:33:a5:44:80:98:1b:05:
cd:16:fd:37:24:5b:6c:65:04:88:1f:6a:c6:cf:d0:6b:13:f9:
65:c3:da:83:62:41:ab:be:ad:68:09:2a:bd:73:14:f9:c4:14:
6f:c2:fc:cf:bb:b7:9f:a4:63:0e:11:41:b4:e0:5d:7d:41:0a:
0b:db:4b:54:ed:68:0d:33:09:e1:c8:80:13:84:d0:b6:8c:e9:
22:f0:72:b1:ea:e5:ec:d1:64:98:76:d4:00:8d:55:5a:a9:64:
03:56:63:30
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICApcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MjZaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg4NEQxM0U5Njc4ODEx
M0VGQjZENEQwMDRBMDBCRkFBM0JFQzY4QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPdRSiEig8EbbjSS+WtJJPd3fzrhdCkfSwDf+R/uJSSTY7qRb1
tVww1JL5voPCLpVXbMuFPkEbjbDhbs8pJkcrpCQph61uD1UiqHIq2we1GJWcZIMY
AkAKMit3jTiuxrD+9eN2+yYOIY0cXAqFG7sYqfCUyPuq7Mc43KK0nRzEG0J2A8EK
Br/7YKpRVhWkCbhKUa9Wwt1CCUG8Tri8kJ9+vzSMjVhRdVTx0DonAxqUAteS8L8c
9DTEnvd+zNpOnoke7+m+6oIbt1wy+ItBeMF+iFDu3rlzzN/StL6eV52z3nWJB8Sp
4AcvLsWtsdMNQDgb+Cvbv96mtRvlDiH+2JE1AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUiE0T6WeIET77bU0ASgC/qjvsaLIwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9pRTBUNldlSUVUNzdiVTBBU2dDX3FqdnNhTEku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxa4DANBgkqhkiG9w0BAQsFAAOCAQEAX/n04D7z1gZwj/1bpE3Q
3cEVgOzwSb52dF5rbWf/poBjjwUm8CltQ7NHCDP8Xb86S8sOT4yvYkhoKWYTQYwh
brqxp8YfwZBw3vqqeo0ZvggrEh01uneCx8Ta4lqK3VlpGWxkdsU2B0fCz+JahWkH
WiGilNmBuxKuLboD/22QAQ6/fduNjUsC/6i1ViBr6V+bEQOETSg61KUGN+kzpUSA
mBsFzRb9NyRbbGUEiB9qxs/QaxP5ZcPag2JBq76taAkqvXMU+cQUb8L8z7u3n6Rj
DhFBtOBdfUEKC9tLVO1oDTMJ4ciAE4TQtozpIvByserl7NFkmHbUAI1VWqlkA1Zj
MA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:56 2025 by rpki-client