Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30213/U6gFzInwl4yY1yZ9euSipLcTIPM.roa
File: U6gFzInwl4yY1yZ9euSipLcTIPM.roa (raw, json)
Hash identifier: qPuD/1UnaNSwLxdPvvsR5IoPEUwvg2NdDH1o2TVSpw4=
Subject key identifier: 53:A8:05:CC:89:F0:97:8C:98:D7:26:7D:7A:E4:A2:A4:B7:13:20:F3
Certificate issuer: /CN=95CFA33EF4F36150ED866B859895E1A1DA2FA1A1
Certificate serial: 13
Authority key identifier: 95:CF:A3:3E:F4:F3:61:50:ED:86:6B:85:98:95:E1:A1:DA:2F:A1:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/U6gFzInwl4yY1yZ9euSipLcTIPM.roa
Signing time: Sat 29 Mar 2025 06:33:00 +0000
ROA not before: Sat 29 Mar 2025 06:33:00 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 17931
IP address blocks: 2402:4700::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95CFA33EF4F36150ED866B859895E1A1DA2FA1A1
Validity
Not Before: Mar 29 06:33:00 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=53A805CC89F0978C98D7267D7AE4A2A4B71320F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:31:84:89:2c:fc:3e:be:2b:bd:04:58:5e:
86:c7:33:dc:fa:25:9e:09:78:11:d1:3c:9d:95:87:
9f:0f:c3:68:81:6d:52:d3:d9:2c:f9:f9:84:90:c4:
58:a3:88:6d:09:02:cd:4a:91:56:ed:98:12:c2:53:
ef:ef:ae:88:25:c5:53:2a:ee:ef:92:26:26:68:12:
e3:1e:ad:cf:28:20:8c:ff:fc:b4:a0:92:9c:8c:37:
27:d9:c0:a1:d6:c3:dc:21:46:07:6c:2c:ce:93:0d:
3c:4d:af:1e:8f:4d:d4:62:58:0e:35:f6:52:48:4e:
05:c8:5d:98:12:88:d9:52:1d:ec:c0:b4:a7:11:80:
0b:cb:6c:d1:df:94:ea:1e:7b:d7:35:0f:02:a9:eb:
46:74:d5:a9:d3:ee:f8:08:ff:be:2b:05:44:f0:c1:
7f:29:1b:d8:d0:e0:a3:0a:d4:95:36:76:17:8c:d9:
71:80:dd:02:43:c5:43:b2:61:f9:0d:41:cc:c2:16:
01:ca:5e:8e:16:36:2d:79:48:05:20:82:f7:fc:bc:
e2:ec:4a:c3:58:54:2b:ed:36:7f:f5:59:fd:d6:e0:
13:3f:63:9c:50:71:15:8c:39:b5:4c:a1:cf:10:25:
40:50:a6:17:7b:3f:e4:85:45:66:5c:58:7e:be:19:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:05:CC:89:F0:97:8C:98:D7:26:7D:7A:E4:A2:A4:B7:13:20:F3
X509v3 Authority Key Identifier:
keyid:95:CF:A3:3E:F4:F3:61:50:ED:86:6B:85:98:95:E1:A1:DA:2F:A1:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/U6gFzInwl4yY1yZ9euSipLcTIPM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4700::/32
Signature Algorithm: sha256WithRSAEncryption
5d:01:59:0e:42:a8:47:da:64:3e:a1:d3:85:80:20:6d:17:7b:
24:08:bd:8c:9d:be:9e:ac:e3:ad:29:c6:6b:c1:47:75:99:5b:
44:a1:86:45:87:b3:87:de:b0:f7:6c:4d:80:12:b5:92:ff:3f:
76:b4:da:a2:c0:50:1f:0c:c0:b2:0f:54:48:0f:23:ff:20:b6:
51:70:5f:19:e3:d9:9f:10:40:45:5e:03:3b:5f:40:ef:ad:12:
ad:c1:40:b9:91:42:d5:93:e0:a9:b8:2b:56:47:12:e0:07:2d:
40:1a:23:25:87:39:85:b3:ee:c2:c8:70:79:1c:e6:73:00:9b:
77:f2:29:bb:18:b5:7c:8a:3b:9c:11:b4:e3:28:59:e8:d7:f4:
b4:93:21:6d:d1:e3:75:6a:76:71:22:7e:82:ac:46:22:19:bd:
b5:94:e1:d8:76:ec:36:f5:22:6c:da:af:b7:c6:20:02:0f:93:
f3:97:20:f5:a6:be:26:4c:c7:15:98:49:20:61:60:51:0a:ed:
da:12:01:e7:12:65:7f:97:49:c8:d0:d6:f1:95:bd:c6:46:26:
a0:08:ae:23:e3:c1:00:68:3f:bb:8a:9f:f8:ef:31:d0:ec:e0:
9f:6f:d2:a2:2d:0f:0a:93:94:48:9d:78:68:3b:35:eb:aa:f0:
e1:80:6c:b1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NUNG
QTMzRUY0RjM2MTUwRUQ4NjZCODU5ODk1RTFBMURBMkZBMUExMB4XDTI1MDMyOTA2
MzMwMFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoNTNBODA1Q0M4OUYwOTc4
Qzk4RDcyNjdEN0FFNEEyQTRCNzEzMjBGMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKZRMYSJLPw+viu9BFhehscz3Polngl4EdE8nZWHnw/DaIFtUtPZ
LPn5hJDEWKOIbQkCzUqRVu2YEsJT7++uiCXFUyru75ImJmgS4x6tzyggjP/8tKCS
nIw3J9nAodbD3CFGB2wszpMNPE2vHo9N1GJYDjX2UkhOBchdmBKI2VId7MC0pxGA
C8ts0d+U6h571zUPAqnrRnTVqdPu+Aj/visFRPDBfykb2NDgowrUlTZ2F4zZcYDd
AkPFQ7Jh+Q1BzMIWAcpejhY2LXlIBSCC9/y84uxKw1hUK+02f/VZ/dbgEz9jnFBx
FYw5tUyhzxAlQFCmF3s/5IVFZlxYfr4Zbb8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRTqAXMifCXjJjXJn165KKktxMg8zAfBgNVHSMEGDAWgBSVz6M+9PNhUO2Ga4WY
leGh2i+hoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyMTMvbGMtalB2VHpZVkR0aG11Rm1KWGhvZG92b2FFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGMtalB2VHpZVkR0aG11Rm1KWGhv
ZG92b2FFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMjEzL1U2Z0Z6SW53bDR5WTF5WjlldVNpcExjVElQTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAkcAMA0GCSqGSIb3DQEBCwUAA4IBAQBdAVkOQqhH2mQ+odOFgCBt
F3skCL2Mnb6erOOtKcZrwUd1mVtEoYZFh7OH3rD3bE2AErWS/z92tNqiwFAfDMCy
D1RIDyP/ILZRcF8Z49mfEEBFXgM7X0DvrRKtwUC5kULVk+CpuCtWRxLgBy1AGiMl
hzmFs+7CyHB5HOZzAJt38im7GLV8ijucEbTjKFno1/S0kyFt0eN1anZxIn6CrEYi
Gb21lOHYduw29SJs2q+3xiACD5PzlyD1pr4mTMcVmEkgYWBRCu3aEgHnEmV/l0nI
0Nbxlb3GRiagCK4j48EAaD+7ip/47zHQ7OCfb9KiLQ8Kk5RInXhoOzXrqvDhgGyx
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:47 2025 by rpki-client