Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/p0qHOe0r5LxUfT-9j2q9ns5XGK8.roa
File: p0qHOe0r5LxUfT-9j2q9ns5XGK8.roa (raw, json)
Hash identifier: PkZXFSzqgfAgQOArFBrnCYyOE46/1JbGswjJKfAmqpM=
Subject key identifier: A7:4A:87:39:ED:2B:E4:BC:54:7D:3F:BD:8F:6A:BD:9E:CE:57:18:AF
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: B9
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/p0qHOe0r5LxUfT-9j2q9ns5XGK8.roa
Signing time: Sat 01 Jul 2023 01:31:16 +0000
ROA not before: Sat 01 Jul 2023 01:31:16 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 7684
IP address blocks: 202.242.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Jul 1 01:31:16 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=A74A8739ED2BE4BC547D3FBD8F6ABD9ECE5718AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:42:35:67:a8:88:1d:8e:1e:6a:c2:ec:f1:79:
ea:98:6a:50:c1:01:7c:47:fa:9f:2a:50:7c:33:c9:
07:e4:7b:e5:15:98:d4:e1:3a:68:7d:13:d5:78:dd:
ef:c1:26:36:41:27:98:61:cd:18:8e:51:03:28:e1:
7c:94:6e:96:f3:bc:15:c2:0c:01:40:fa:d2:58:e4:
87:21:e6:25:0b:9d:f2:06:6f:64:2a:89:53:cf:da:
5a:e3:b9:11:62:69:c2:a4:a9:9f:30:d6:f1:d3:32:
85:75:b2:c2:eb:b5:cd:a1:64:24:d9:cf:9d:0a:79:
ec:77:bc:71:28:35:6f:2c:8e:08:51:2e:99:46:9e:
d7:4d:06:ad:72:e4:6d:1a:d9:65:e3:7a:81:07:8a:
50:64:44:b0:e4:d7:ee:9a:6c:a6:31:f0:6b:03:47:
c8:3f:1d:36:08:b0:fb:a0:b5:d6:42:06:03:c4:82:
48:9e:f8:f0:8d:4e:26:42:39:f4:96:76:af:cf:c8:
67:2c:11:8c:df:ca:ea:cb:2e:3d:ff:9b:93:e7:51:
1e:af:93:be:8d:3d:79:ff:1e:6e:11:8c:12:0c:a0:
c4:bd:55:53:64:ee:1d:f4:45:04:41:16:1c:bc:f0:
1c:e7:b8:74:a8:47:b4:ee:d3:82:55:0e:ec:2e:e4:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4A:87:39:ED:2B:E4:BC:54:7D:3F:BD:8F:6A:BD:9E:CE:57:18:AF
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/p0qHOe0r5LxUfT-9j2q9ns5XGK8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.242.89.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ae:54:2e:a3:fd:d5:2c:b2:23:29:25:75:e9:73:2c:28:82:
2f:b3:71:8c:cd:52:22:0e:c3:6e:78:b3:a3:f3:b8:51:72:68:
ac:7b:0b:a5:19:ee:83:dc:ca:67:66:d4:c9:48:d7:62:c9:c1:
f6:90:ac:dc:c9:c5:b1:b6:0d:a2:b8:a8:6b:a0:8f:65:35:bb:
31:86:03:80:3c:66:80:7c:42:54:24:1c:c4:62:b5:98:d5:06:
09:e0:50:d8:75:10:79:19:01:8f:1b:5d:33:5a:39:4c:b9:6f:
ae:ae:9e:dc:74:0f:31:3a:62:74:e0:a0:b4:83:44:ed:4d:2f:
20:32:dd:71:89:cb:a7:7e:1b:10:14:d3:05:6c:f9:13:a5:52:
19:3f:28:7e:f6:bf:bc:32:32:22:3a:27:df:f3:c3:a8:ad:f3:
e0:3b:fa:15:a9:c8:a0:c3:d1:8a:2a:dc:77:ab:bb:74:b1:26:
08:94:13:8b:2f:6e:a5:ed:a9:19:e1:63:b2:70:98:90:a8:92:
e0:18:02:d0:7d:6e:92:69:a8:80:49:d8:94:b9:b0:96:6c:83:
65:13:8a:14:a0:e6:65:8a:e9:10:f3:98:06:9c:eb:e8:5c:7b:
93:d8:be:9a:af:62:b2:98:b9:a3:52:cf:6e:fb:a5:7f:40:57:
42:0f:45:72
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICALkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yMzA3MDEw
MTMxMTZaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEE3NEE4NzM5RUQyQkU0
QkM1NDdEM0ZCRDhGNkFCRDlFQ0U1NzE4QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4QjVnqIgdjh5qwuzxeeqYalDBAXxH+p8qUHwzyQfke+UVmNTh
Omh9E9V43e/BJjZBJ5hhzRiOUQMo4XyUbpbzvBXCDAFA+tJY5Ich5iULnfIGb2Qq
iVPP2lrjuRFiacKkqZ8w1vHTMoV1ssLrtc2hZCTZz50Keex3vHEoNW8sjghRLplG
ntdNBq1y5G0a2WXjeoEHilBkRLDk1+6abKYx8GsDR8g/HTYIsPugtdZCBgPEgkie
+PCNTiZCOfSWdq/PyGcsEYzfyurLLj3/m5PnUR6vk76NPXn/Hm4RjBIMoMS9VVNk
7h30RQRBFhy88BznuHSoR7Tu04JVDuwu5HeRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUp0qHOe0r5LxUfT+9j2q9ns5XGK8wHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L3AwcUhPZTByNUx4VWZULTlqMnE5bnM1WEdLOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADK8lkwDQYJKoZIhvcNAQELBQADggEBAHKuVC6j/dUssiMpJXXpcywogi+z
cYzNUiIOw254s6PzuFFyaKx7C6UZ7oPcymdm1MlI12LJwfaQrNzJxbG2DaK4qGug
j2U1uzGGA4A8ZoB8QlQkHMRitZjVBgngUNh1EHkZAY8bXTNaOUy5b66untx0DzE6
YnTgoLSDRO1NLyAy3XGJy6d+GxAU0wVs+ROlUhk/KH72v7wyMiI6J9/zw6it8+A7
+hWpyKDD0Yoq3Heru3SxJgiUE4svbqXtqRnhY7JwmJCokuAYAtB9bpJpqIBJ2JS5
sJZsg2UTihSg5mWK6RDzmAac6+hce5PYvpqvYrKYuaNSz277pX9AV0IPRXI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:44 2025 by rpki-client