Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/UDWHHBLOAua8mLe-O-8e0gRZjMo.roa
File: UDWHHBLOAua8mLe-O-8e0gRZjMo.roa (raw, json)
Hash identifier: HaZnzADoDL3EbXu/L2LjTd1hJVM8mLlIO1vhtX0uLj0=
Subject key identifier: 50:35:87:1C:12:CE:02:E6:BC:98:B7:BE:3B:EF:1E:D2:04:59:8C:CA
Certificate issuer: /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial: 36
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/UDWHHBLOAua8mLe-O-8e0gRZjMo.roa
Signing time: Wed 18 Dec 2024 03:59:01 +0000
ROA not before: Wed 18 Dec 2024 03:59:01 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 0
IP address blocks: 2001:2c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Validity
Not Before: Dec 18 03:59:01 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=5035871C12CE02E6BC98B7BE3BEF1ED204598CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:1c:97:20:7b:16:26:94:6c:34:57:5d:38:
80:98:67:03:10:a5:c1:3d:e5:40:38:ca:16:92:75:
be:3d:7c:d1:5d:f2:84:c8:4c:b2:af:37:a4:5e:05:
89:c8:a2:6f:85:95:5d:8c:db:59:7b:1b:38:b9:65:
30:40:06:3a:94:26:d9:b5:4f:76:35:fc:42:a1:77:
67:5d:ae:56:30:e3:7f:c3:3e:a7:3a:cd:80:21:65:
df:05:47:df:87:01:c5:bf:25:44:ef:74:fc:1f:9f:
1b:58:73:55:c0:0c:33:d5:60:46:94:c6:cc:2d:42:
62:6d:53:9d:55:dd:24:2e:f6:47:9f:0a:5b:9a:9c:
a5:0a:e6:27:c4:41:e1:40:f9:37:00:4e:80:a7:96:
7c:b3:dc:21:4c:99:f9:e4:f6:34:fb:24:cc:19:cc:
34:9b:1f:40:c3:d7:91:44:bd:b0:52:c0:dd:e3:06:
8a:49:cf:e3:44:59:92:b2:a8:4e:b3:f9:9b:43:e8:
0c:d9:3e:29:02:8e:6c:99:c0:74:ab:40:0e:29:b8:
2f:20:e1:c7:13:ba:a4:4a:79:be:a3:de:32:12:dd:
64:4d:53:dc:53:a5:95:9e:7b:65:6e:31:82:97:b4:
3b:8a:42:07:fc:b8:4f:9d:6a:16:a8:21:4f:cb:8f:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:35:87:1C:12:CE:02:E6:BC:98:B7:BE:3B:EF:1E:D2:04:59:8C:CA
X509v3 Authority Key Identifier:
keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/UDWHHBLOAua8mLe-O-8e0gRZjMo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:2c8::/32
Signature Algorithm: sha256WithRSAEncryption
23:b5:b4:3f:dc:57:ed:40:1f:34:d8:11:ee:2c:8f:55:bf:25:
16:35:88:f7:f8:9e:19:77:30:44:5d:d1:c5:ae:ec:51:94:f8:
1a:92:5e:77:4b:15:e1:78:d8:af:3c:d8:17:0f:6d:49:d4:e3:
31:ff:3e:52:7f:ce:6c:04:ad:89:8f:fb:62:6a:f5:b7:23:81:
e7:4c:d0:53:28:f9:30:6d:80:bb:fc:a6:b4:4f:f2:b3:f7:0a:
a5:e9:f7:18:41:b8:3f:a5:90:b3:39:2b:97:43:2b:b5:f9:af:
4b:e3:88:8e:77:8e:00:04:0e:b3:27:cc:4d:29:73:2d:3e:54:
29:a5:42:96:83:3b:d8:44:27:fa:13:f4:12:2d:0b:af:25:9e:
7c:2f:73:a5:e4:9e:89:db:53:b6:b3:79:6b:8b:c1:2e:ec:ef:
72:27:7e:03:25:c5:7c:d2:50:ad:82:9a:c7:30:e5:d2:22:d2:
50:0b:85:aa:72:77:1a:61:73:d3:e8:a9:36:61:1e:50:cf:dd:
e3:43:73:b5:93:ab:3f:55:e0:bd:95:6c:9a:b7:ec:9d:f3:56:
b5:0e:07:ac:a3:e7:13:7f:ea:70:8e:18:cd:1c:60:fc:b4:f6:
0b:f9:5d:aa:da:02:c1:36:e9:9c:f3:1e:ac:bc:f3:bb:7a:e4:
67:79:a9:78
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjI5
QUE4QUVCMjQyQTEzRkIzNzFBNDRDQTVFMUYyOTU3QTcwRTFCMB4XDTI0MTIxODAz
NTkwMVoXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoNTAzNTg3MUMxMkNFMDJF
NkJDOThCN0JFM0JFRjFFRDIwNDU5OENDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN7eHJcgexYmlGw0V104gJhnAxClwT3lQDjKFpJ1vj180V3yhMhM
sq83pF4Ficiib4WVXYzbWXsbOLllMEAGOpQm2bVPdjX8QqF3Z12uVjDjf8M+pzrN
gCFl3wVH34cBxb8lRO90/B+fG1hzVcAMM9VgRpTGzC1CYm1TnVXdJC72R58KW5qc
pQrmJ8RB4UD5NwBOgKeWfLPcIUyZ+eT2NPskzBnMNJsfQMPXkUS9sFLA3eMGiknP
40RZkrKoTrP5m0PoDNk+KQKObJnAdKtADim4LyDhxxO6pEp5vqPeMhLdZE1T3FOl
lZ57ZW4xgpe0O4pCB/y4T51qFqghT8uP8WECAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRQNYccEs4C5ryYt7477x7SBFmMyjAfBgNVHSMEGDAWgBSmKaqK6yQqE/s3GkTK
Xh8pV6cOGzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTcvcGltcWl1c2tLaFA3TnhwRXlsNGZLVmVuRGhzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcGltcWl1c2tLaFA3TnhwRXlsNGZL
VmVuRGhzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDE3L1VEV0hIQkxPQXVhOG1MZS1PLThlMGdSWmpNby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQLIMA0GCSqGSIb3DQEBCwUAA4IBAQAjtbQ/3FftQB802BHuLI9V
vyUWNYj3+J4ZdzBEXdHFruxRlPgakl53SxXheNivPNgXD21J1OMx/z5Sf85sBK2J
j/tiavW3I4HnTNBTKPkwbYC7/Ka0T/Kz9wql6fcYQbg/pZCzOSuXQyu1+a9L44iO
d44ABA6zJ8xNKXMtPlQppUKWgzvYRCf6E/QSLQuvJZ58L3Ol5J6J21O2s3lri8Eu
7O9yJ34DJcV80lCtgprHMOXSItJQC4WqcncaYXPT6Kk2YR5Qz93jQ3O1k6s/VeC9
lWyat+yd81a1Dgeso+cTf+pwjhjNHGD8tPYL+V2q2gLBNumc8x6svPO7euRneal4
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:40 2025 by rpki-client