Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hwMQb8_Av2ccPy87cHdF33ec6fU.roa
File: hwMQb8_Av2ccPy87cHdF33ec6fU.roa (raw, json)
Hash identifier: jxem47B2NnTRI3zByQpo+XPJVQA887BaK+53PadWiWk=
Subject key identifier: 87:03:10:6F:CF:C0:BF:67:1C:3F:2F:3B:70:77:45:DF:77:9C:E9:F5
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 02E1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hwMQb8_Av2ccPy87cHdF33ec6fU.roa
Signing time: Tue 30 Apr 2024 01:44:59 +0000
ROA not before: Tue 30 Apr 2024 01:44:59 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:70:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:44:59 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=8703106FCFC0BF671C3F2F3B707745DF779CE9F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:76:a1:9b:d9:90:1f:65:76:3d:91:9b:6b:
44:47:63:ec:c5:d0:ca:10:5b:3e:53:bc:5d:8e:21:
d3:63:9b:2b:4a:72:09:92:c1:31:f6:a0:a6:3c:cc:
09:8a:c5:fc:9d:87:b8:b2:98:4b:5f:56:bf:cf:c3:
9c:c0:c1:16:f5:b1:d0:83:6e:64:54:57:31:3d:91:
db:3a:51:4d:f6:3b:ac:cc:c7:e8:0c:eb:e9:07:2a:
c1:77:e3:2b:6e:4d:a3:63:35:4a:a9:56:ef:41:db:
f0:d0:9a:1f:37:69:af:8e:11:f6:04:5a:a4:21:7c:
be:3e:65:10:3b:07:ad:a1:8f:c8:5b:3c:ac:c0:07:
2f:f2:8d:fc:8d:38:54:61:69:51:03:a3:26:8b:a3:
ea:d3:82:85:bc:3d:35:8b:49:db:14:b8:f5:a9:80:
2c:86:de:a4:a9:b1:0d:d8:62:4c:0e:e0:f1:86:90:
05:85:97:af:e1:4e:27:a8:23:b5:8e:96:dc:56:2e:
c7:40:ec:12:22:d5:36:3e:73:bc:de:9f:60:06:94:
79:bf:54:f6:63:fd:8a:af:9a:77:a1:07:7d:a3:ab:
35:32:1a:da:48:c3:75:bd:24:95:96:f2:37:c7:e4:
49:c8:3a:2b:af:30:1e:64:36:8c:ee:e4:f0:2e:2b:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:03:10:6F:CF:C0:BF:67:1C:3F:2F:3B:70:77:45:DF:77:9C:E9:F5
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hwMQb8_Av2ccPy87cHdF33ec6fU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:70:9::/48
Signature Algorithm: sha256WithRSAEncryption
95:11:9b:11:9b:42:1a:05:e6:f6:fd:94:50:48:a7:16:17:c1:
95:2a:f4:7a:32:2b:ff:90:4c:33:a8:76:dd:35:cb:6a:17:52:
3f:89:10:c9:a6:36:64:ff:85:f4:63:3d:03:06:97:c7:05:1a:
28:bd:b4:86:39:25:61:9b:b7:c3:89:61:be:1f:21:e2:4e:41:
56:99:32:1a:49:f1:6b:11:ec:36:a8:c8:7c:64:9f:ea:51:12:
b0:49:f0:98:c5:1c:31:0f:3a:72:40:77:7f:c2:96:d3:cb:07:
4f:45:18:87:a2:ef:d2:e8:ac:34:cc:95:c3:d6:ca:83:c9:2a:
5c:e5:aa:70:04:bb:8a:f8:c9:dc:9c:a7:bd:cd:62:55:cc:f8:
2c:d6:79:c4:5c:94:cd:0f:cb:bc:6e:00:be:12:30:59:e9:5b:
6f:64:e5:10:65:ab:57:36:b3:69:87:b9:53:82:5c:0b:6e:78:
0e:b5:63:86:9b:47:a2:9c:eb:88:b8:9c:d8:99:a0:0d:fd:21:
1b:98:06:24:bb:26:0d:12:a5:63:43:d3:8f:93:65:b9:b3:cf:
0d:bb:84:5e:51:74:ce:81:82:e8:74:71:75:31:1a:c9:9e:da:
57:e2:a5:ba:92:06:45:37:2b:5f:9b:dc:d1:f9:2d:a1:f6:f0:
45:2b:57:3c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTQ0NTlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg3MDMxMDZGQ0ZDMEJG
NjcxQzNGMkYzQjcwNzc0NURGNzc5Q0U5RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnPnahm9mQH2V2PZGba0RHY+zF0MoQWz5TvF2OIdNjmytKcgmS
wTH2oKY8zAmKxfydh7iymEtfVr/Pw5zAwRb1sdCDbmRUVzE9kds6UU32O6zMx+gM
6+kHKsF34ytuTaNjNUqpVu9B2/DQmh83aa+OEfYEWqQhfL4+ZRA7B62hj8hbPKzA
By/yjfyNOFRhaVEDoyaLo+rTgoW8PTWLSdsUuPWpgCyG3qSpsQ3YYkwO4PGGkAWF
l6/hTieoI7WOltxWLsdA7BIi1TY+c7zen2AGlHm/VPZj/YqvmnehB32jqzUyGtpI
w3W9JJWW8jfH5EnIOiuvMB5kNozu5PAuKzqBAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUhwMQb8/Av2ccPy87cHdF33ec6fUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9od01RYjhfQXYyY2NQeTg3Y0hkRjMzZWM2ZlUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAoAcAAJMA0GCSqGSIb3DQEBCwUAA4IBAQCVEZsRm0IaBeb2/ZRQ
SKcWF8GVKvR6Miv/kEwzqHbdNctqF1I/iRDJpjZk/4X0Yz0DBpfHBRoovbSGOSVh
m7fDiWG+HyHiTkFWmTIaSfFrEew2qMh8ZJ/qURKwSfCYxRwxDzpyQHd/wpbTywdP
RRiHou/S6Kw0zJXD1sqDySpc5apwBLuK+MncnKe9zWJVzPgs1nnEXJTND8u8bgC+
EjBZ6VtvZOUQZatXNrNph7lTglwLbngOtWOGm0einOuIuJzYmaAN/SEbmAYkuyYN
EqVjQ9OPk2W5s88Nu4ReUXTOgYLodHF1MRrJntpX4qW6kgZFNytfm9zR+S2h9vBF
K1c8
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:31 2025 by rpki-client