Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O0wM-npMdxMDm05y3epTGtFJNcw.roa
File: O0wM-npMdxMDm05y3epTGtFJNcw.roa (raw, json)
Hash identifier: Awv88sk3mBL/GwxxJZRXo2O8JS7Q34zBaD6oMVqoBck=
Subject key identifier: 3B:4C:0C:FA:7A:4C:77:13:03:9B:4E:72:DD:EA:53:1A:D1:49:35:CC
Certificate issuer: /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial: 5F
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O0wM-npMdxMDm05y3epTGtFJNcw.roa
Signing time: Fri 31 Jan 2025 01:30:48 +0000
ROA not before: Fri 31 Jan 2025 01:30:48 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 0
IP address blocks: 2001:7fa:7::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Validity
Not Before: Jan 31 01:30:48 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=3B4C0CFA7A4C7713039B4E72DDEA531AD14935CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:6c:55:2f:93:a4:43:8a:82:43:fb:2d:9a:
ac:2d:7c:67:d0:22:52:35:57:0a:04:5e:12:43:87:
a4:3c:6f:42:93:2d:6e:51:d1:4f:42:ae:50:d2:6e:
14:81:55:83:4f:a4:42:15:62:2d:7b:b9:00:16:ae:
4b:a2:0e:6c:8a:a7:2b:49:fe:e6:2b:8a:ac:c1:82:
bb:61:14:f1:a4:bf:13:7a:4f:37:38:4e:a8:7c:16:
03:54:3a:11:37:d0:0e:a3:23:9e:3a:fb:55:d7:6b:
00:2d:23:e5:72:a3:e6:23:b4:b6:1b:c0:67:13:36:
ed:ea:c7:f3:b2:9f:f8:0b:83:7f:5f:85:ab:0f:a9:
88:f9:65:1a:bc:dd:77:df:63:44:7a:74:dc:22:90:
31:24:f0:66:d0:53:c4:41:bf:2d:24:96:5f:99:7f:
71:3a:60:49:fe:e3:de:ed:ab:bd:b1:41:cf:3a:0f:
b7:92:be:b1:5c:64:81:d1:0f:de:4b:08:dd:3c:01:
a5:72:74:5e:0d:64:9f:94:a8:1f:17:cf:9a:51:cd:
52:89:cc:e2:eb:f2:c7:42:a8:6b:90:f8:41:cf:ac:
6c:b5:04:38:d8:6d:8f:67:a0:36:07:d7:89:ee:61:
62:fb:ec:fc:60:b1:e8:41:bb:8b:47:e2:3a:50:47:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4C:0C:FA:7A:4C:77:13:03:9B:4E:72:DD:EA:53:1A:D1:49:35:CC
X509v3 Authority Key Identifier:
keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O0wM-npMdxMDm05y3epTGtFJNcw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:7::/48
Signature Algorithm: sha256WithRSAEncryption
41:fc:1a:fa:1f:89:2f:02:32:89:1d:db:9b:c6:f8:8b:e5:55:
92:35:6c:34:49:17:f5:47:7d:da:60:02:a1:2e:d8:a3:d9:05:
ec:6d:e2:f6:92:3d:52:94:a9:0c:24:ee:3a:35:70:7c:a7:65:
60:db:dd:4f:c4:62:df:ae:74:8e:fc:7f:a7:97:7b:5d:92:bb:
98:3a:fa:77:cc:a7:de:98:ce:02:93:5c:18:7e:2c:98:5c:af:
cc:12:74:75:01:7f:27:93:d2:0c:8c:db:74:30:c5:5f:01:06:
44:69:0f:d6:e9:26:e3:e6:35:70:5b:3a:ab:df:c3:60:6f:d5:
84:f0:bb:c1:5d:04:51:6c:99:e5:e9:cf:b1:41:bc:50:3d:57:
af:1d:17:9a:64:d6:18:67:75:f9:a6:96:0b:bf:a3:1e:ea:df:
9f:00:3a:e9:55:f8:5e:5a:83:a9:19:c9:f0:c5:7f:5e:6d:20:
92:42:e1:22:a9:9d:12:33:f7:f4:66:a7:16:dd:4f:62:57:f0:
73:3a:d2:e6:e1:ff:6f:4b:25:6f:57:7c:6b:94:5a:11:6f:8d:
03:8f:76:fa:48:d6:d1:46:91:cf:13:41:bf:63:2d:5b:f3:1e:
19:df:bb:8a:f4:30:24:6e:71:b2:9d:06:45:32:2b:85:96:0f:
c4:e3:29:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQTZC
NDlCMDc1MkFEM0JFM0RENjgzQjhBRUVBMjIwNUY1QUZEMjc5MB4XDTI1MDEzMTAx
MzA0OFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoM0I0QzBDRkE3QTRDNzcx
MzAzOUI0RTcyRERFQTUzMUFEMTQ5MzVDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALWGbFUvk6RDioJD+y2arC18Z9AiUjVXCgReEkOHpDxvQpMtblHR
T0KuUNJuFIFVg0+kQhViLXu5ABauS6IObIqnK0n+5iuKrMGCu2EU8aS/E3pPNzhO
qHwWA1Q6ETfQDqMjnjr7VddrAC0j5XKj5iO0thvAZxM27erH87Kf+AuDf1+Fqw+p
iPllGrzdd99jRHp03CKQMSTwZtBTxEG/LSSWX5l/cTpgSf7j3u2rvbFBzzoPt5K+
sVxkgdEP3ksI3TwBpXJ0Xg1kn5SoHxfPmlHNUonM4uvyx0Koa5D4Qc+sbLUEONht
j2egNgfXie5hYvvs/GCx6EG7i0fiOlBHwjECAwEAAaOCAiswggInMB0GA1UdDgQW
BBQ7TAz6ekx3EwObTnLd6lMa0Uk1zDAfBgNVHSMEGDAWgBTqa0mwdSrTvj3Wg7iu
6iIF9a/SeTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMDMvNm10SnNIVXEwNzQ5MW9PNHJ1b2lCZld2MG5rLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNm10SnNIVXEwNzQ5MW9PNHJ1b2lC
Zld2MG5rLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDAzL08wd00tbnBNZHhNRG0wNXkzZXBUR3RGSk5jdy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQf6AAcwDQYJKoZIhvcNAQELBQADggEBAEH8GvofiS8CMokd25vG
+IvlVZI1bDRJF/VHfdpgAqEu2KPZBext4vaSPVKUqQwk7jo1cHynZWDb3U/EYt+u
dI78f6eXe12Su5g6+nfMp96YzgKTXBh+LJhcr8wSdHUBfyeT0gyM23QwxV8BBkRp
D9bpJuPmNXBbOqvfw2Bv1YTwu8FdBFFsmeXpz7FBvFA9V68dF5pk1hhndfmmlgu/
ox7q358AOulV+F5ag6kZyfDFf15tIJJC4SKpnRIz9/RmpxbdT2JX8HM60ubh/29L
JW9XfGuUWhFvjQOPdvpI1tFGkc8TQb9jLVvzHhnfu4r0MCRucbKdBkUyK4WWD8Tj
KfE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:44 2025 by rpki-client