Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9aX81gTsbvVyh8z3tVOhn-w8y5k.roa
File: 9aX81gTsbvVyh8z3tVOhn-w8y5k.roa (raw, json)
Hash identifier: 3iUWcIn5Umt3zF0UjZJ0/hxlk038eIORFDMzMTcb0ig=
Subject key identifier: F5:A5:FC:D6:04:EC:6E:F5:72:87:CC:F7:B5:53:A1:9F:EC:3C:CB:99
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0312
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9aX81gTsbvVyh8z3tVOhn-w8y5k.roa
Signing time: Tue 30 Apr 2024 01:50:48 +0000
ROA not before: Tue 30 Apr 2024 01:50:48 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:7900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:50:48 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=F5A5FCD604EC6EF57287CCF7B553A19FEC3CCB99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:af:4a:ba:42:a0:fc:af:62:ad:1a:4b:d3:
ad:4c:50:2a:f8:8f:9c:15:81:0b:81:64:fe:56:44:
02:de:68:7e:33:43:bc:26:62:f3:45:a8:3f:a5:bb:
6e:4e:d9:62:1f:1f:bd:d4:7d:05:2c:e5:94:b5:ac:
04:1c:42:6f:23:59:f6:6e:1c:84:c7:1c:f2:18:4b:
af:58:e8:dc:00:30:af:df:d1:1f:02:a9:57:77:f7:
bc:4f:f5:79:5e:20:bf:d5:7c:db:dd:69:d6:95:50:
7f:d2:3c:a2:81:2e:73:49:d5:d3:93:c9:72:97:e9:
8b:b6:ad:7f:9e:f5:92:0a:b5:1e:74:74:34:92:70:
4b:c3:8f:4c:b8:ec:52:ea:e6:21:dd:d5:c2:84:c3:
9d:5d:fb:95:2b:10:0e:8b:3e:a7:33:59:84:b5:f6:
29:ce:8e:d0:d5:aa:33:b1:97:07:01:fe:2c:b0:8b:
da:fd:d9:df:71:c0:1b:75:dd:d6:03:db:64:09:92:
c7:6a:bc:6b:40:ae:9a:c9:db:8e:11:e2:54:e0:3c:
be:3d:c2:6a:30:45:b2:a2:fe:c4:4c:03:47:a1:a9:
f8:b8:17:ed:80:ae:42:d0:e1:c0:5d:39:42:35:bb:
82:ed:b5:4a:c2:4b:ec:be:07:aa:d5:e7:d8:0e:6a:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A5:FC:D6:04:EC:6E:F5:72:87:CC:F7:B5:53:A1:9F:EC:3C:CB:99
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9aX81gTsbvVyh8z3tVOhn-w8y5k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:7900::/40
Signature Algorithm: sha256WithRSAEncryption
1d:35:23:9b:96:08:a0:21:e9:81:f6:6b:53:94:15:f2:60:90:
e3:3b:a4:27:75:f4:65:d2:46:3c:d8:69:7b:4c:29:9a:c7:73:
0c:52:9b:7a:d6:a3:b1:89:d9:af:7e:b5:2c:9d:44:82:79:3c:
8a:c5:85:75:21:92:df:85:a2:53:5b:2f:07:1a:f6:d0:3b:48:
4a:8b:58:7d:0b:ad:ff:f8:de:37:ea:b6:c2:6f:18:be:98:57:
b4:86:e1:63:68:7b:44:c9:1a:a9:1e:7d:d1:bf:52:df:60:4c:
25:6c:94:cd:3e:14:4c:73:0a:bc:99:8d:3a:b1:6a:02:1d:9f:
ba:5d:8f:95:48:8f:4d:3e:b4:56:0e:45:fd:1b:f7:33:ba:f6:
2c:92:0c:74:cd:99:d8:a7:d2:1b:1a:a7:ac:34:d5:f3:9d:3f:
67:98:d1:35:72:ff:f2:60:23:bb:72:38:c8:35:85:50:70:97:
8c:ab:00:45:3e:8b:6c:d8:6a:2a:18:0c:4b:48:38:03:3c:96:
61:d3:5b:77:77:fc:d4:c8:46:1e:5a:e8:ae:64:98:bd:3e:bc:
e2:ec:4f:c3:ba:17:10:ad:89:81:58:43:37:bc:32:15:08:d4:
0a:d2:ad:30:51:f1:0f:f0:03:69:4f:c4:01:16:f6:94:61:26:
78:a9:c4:f4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTUwNDhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY1QTVGQ0Q2MDRFQzZF
RjU3Mjg3Q0NGN0I1NTNBMTlGRUMzQ0NCOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP8K9KukKg/K9irRpL061MUCr4j5wVgQuBZP5WRALeaH4zQ7wm
YvNFqD+lu25O2WIfH73UfQUs5ZS1rAQcQm8jWfZuHITHHPIYS69Y6NwAMK/f0R8C
qVd397xP9XleIL/VfNvdadaVUH/SPKKBLnNJ1dOTyXKX6Yu2rX+e9ZIKtR50dDSS
cEvDj0y47FLq5iHd1cKEw51d+5UrEA6LPqczWYS19inOjtDVqjOxlwcB/iywi9r9
2d9xwBt13dYD22QJksdqvGtArprJ244R4lTgPL49wmowRbKi/sRMA0ehqfi4F+2A
rkLQ4cBdOUI1u4LttUrCS+y+B6rV59gOasrlAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU9aX81gTsbvVyh8z3tVOhn+w8y5kwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS85YVg4MWdUc2J2VnloOHozdFZPaG4tdzh5NWsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa3kwDQYJKoZIhvcNAQELBQADggEBAB01I5uWCKAh6YH2a1OU
FfJgkOM7pCd19GXSRjzYaXtMKZrHcwxSm3rWo7GJ2a9+tSydRIJ5PIrFhXUhkt+F
olNbLwca9tA7SEqLWH0Lrf/43jfqtsJvGL6YV7SG4WNoe0TJGqkefdG/Ut9gTCVs
lM0+FExzCryZjTqxagIdn7pdj5VIj00+tFYORf0b9zO69iySDHTNmdin0hsap6w0
1fOdP2eY0TVy//JgI7tyOMg1hVBwl4yrAEU+i2zYaioYDEtIOAM8lmHTW3d3/NTI
Rh5a6K5kmL0+vOLsT8O6FxCtiYFYQze8MhUI1ArSrTBR8Q/wA2lPxAEW9pRhJnip
xPQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:29 2025 by rpki-client