Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30419/5JZEu_hg2SV1OYM68eLc5h2r3J4.roa
File: 5JZEu_hg2SV1OYM68eLc5h2r3J4.roa (raw, json)
Hash identifier: SusOf0wIPYLRLFQK16/F7WHuSLI1pZEEfiAL9oHgtok=
Subject key identifier: E4:96:44:BB:F8:60:D9:25:75:39:83:3A:F1:E2:DC:E6:1D:AB:DC:9E
Certificate issuer: /CN=5C94D460126D3E224B1DBD6646FAE9243A60EC41
Certificate serial: 11
Authority key identifier: 5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/5JZEu_hg2SV1OYM68eLc5h2r3J4.roa
Signing time: Wed 08 Jan 2025 01:14:29 +0000
ROA not before: Wed 08 Jan 2025 01:14:29 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 150366
IP address blocks: 2400:fba0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C94D460126D3E224B1DBD6646FAE9243A60EC41
Validity
Not Before: Jan 8 01:14:29 2025 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=E49644BBF860D9257539833AF1E2DCE61DABDC9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:2c:19:6c:d2:4e:26:ee:ff:9f:bd:d1:88:
e3:a1:64:4c:fd:7e:82:68:f3:81:da:61:08:93:9a:
6d:ca:36:5e:18:de:5b:8b:0d:59:74:f4:a7:85:bb:
e2:6e:7b:6f:61:67:bb:67:8f:4f:23:f5:4a:30:b6:
f8:1e:6d:b8:31:48:a1:87:26:47:84:28:15:10:a1:
e4:9e:d9:cb:f3:d4:12:eb:bb:0b:ab:53:eb:83:0a:
45:03:f4:9a:02:62:33:d0:f3:f9:22:a4:95:d4:a0:
98:16:c4:17:64:39:48:da:c3:94:bb:e8:e7:f5:b9:
8d:8e:29:85:f2:c2:45:b3:1c:2a:d6:b2:b5:7c:4e:
b1:40:ac:1e:b4:13:ad:c0:c7:77:ef:c7:ea:d4:08:
84:3c:33:e3:2e:33:7a:1f:22:a0:2c:8f:d2:fe:10:
ab:b4:04:4c:7f:15:f6:bd:7a:82:a7:e7:ab:55:a5:
7e:d0:4f:92:cf:66:2a:00:d8:a8:e8:c2:7d:9f:0b:
63:fa:61:c4:db:79:c7:fc:1b:f6:0e:7f:3b:91:2a:
02:25:5e:df:1c:c4:0a:95:d8:9c:a5:e4:5f:29:a9:
6f:9b:31:5b:c5:15:72:b2:9f:5c:84:68:f8:e1:71:
13:90:5e:79:ce:1c:da:6a:83:d0:cb:ae:c0:99:68:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:96:44:BB:F8:60:D9:25:75:39:83:3A:F1:E2:DC:E6:1D:AB:DC:9E
X509v3 Authority Key Identifier:
keyid:5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/5JZEu_hg2SV1OYM68eLc5h2r3J4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:fba0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:cb:44:c8:b1:91:82:77:34:74:38:9d:e2:34:7a:ba:5c:ef:
6d:b7:c4:31:ef:21:81:d7:e7:d7:5b:f9:81:c8:6c:aa:20:bb:
64:3d:31:b5:f4:e2:b9:a4:11:76:66:f9:e5:d6:49:78:6e:13:
c9:e7:23:a8:af:54:a1:4c:19:4d:9b:c7:cc:27:6d:49:0f:3c:
f1:c4:1c:3b:6b:7e:f3:42:8f:6e:3a:65:dd:09:0f:1b:cf:65:
bc:e5:83:97:12:f1:bd:fc:bc:11:ba:ab:0c:2b:f4:79:fe:e0:
f4:d6:f7:bf:ce:02:7a:d2:02:86:33:18:b7:dc:d3:ed:49:22:
22:e7:c4:5d:a8:40:dc:04:ea:28:80:4c:2a:2b:58:46:ec:a6:
0b:12:88:27:62:b0:11:44:68:e1:a9:aa:5b:b3:fb:ca:c5:06:
24:72:45:65:8a:c8:42:26:cf:dd:00:25:20:e3:3e:25:7d:a0:
cd:4e:0c:0a:a7:0a:c6:f1:0d:24:16:86:4c:57:0a:bb:ea:c6:
37:28:52:d8:2e:37:00:64:d8:3b:54:1d:76:2c:67:bd:af:d1:
02:80:e9:84:46:b0:88:46:01:46:21:51:7f:92:66:7a:46:7a:
aa:21:64:28:99:17:e4:8e:cc:89:21:79:1f:8e:77:56:0d:16:
45:d6:f1:80
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1Qzk0
RDQ2MDEyNkQzRTIyNEIxREJENjY0NkZBRTkyNDNBNjBFQzQxMB4XDTI1MDEwODAx
MTQyOVoXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoRTQ5NjQ0QkJGODYwRDky
NTc1Mzk4MzNBRjFFMkRDRTYxREFCREM5RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALuDLBls0k4m7v+fvdGI46FkTP1+gmjzgdphCJOabco2XhjeW4sN
WXT0p4W74m57b2Fnu2ePTyP1SjC2+B5tuDFIoYcmR4QoFRCh5J7Zy/PUEuu7C6tT
64MKRQP0mgJiM9Dz+SKkldSgmBbEF2Q5SNrDlLvo5/W5jY4phfLCRbMcKtaytXxO
sUCsHrQTrcDHd+/H6tQIhDwz4y4zeh8ioCyP0v4Qq7QETH8V9r16gqfnq1WlftBP
ks9mKgDYqOjCfZ8LY/phxNt5x/wb9g5/O5EqAiVe3xzECpXYnKXkXympb5sxW8UV
crKfXIRo+OFxE5Beec4c2mqD0MuuwJlomZcCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTklkS7+GDZJXU5gzrx4tzmHavcnjAfBgNVHSMEGDAWgBRclNRgEm0+IksdvWZG
+ukkOmDsQTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MTkvWEpUVVlCSnRQaUpMSGIxbVJ2cnBKRHBnN0VFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWEpUVVlCSnRQaUpMSGIxbVJ2cnBK
RHBnN0VFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDE5LzVKWkV1X2hnMlNWMU9ZTTY4ZUxjNWgycjNKNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAPugMA0GCSqGSIb3DQEBCwUAA4IBAQAfy0TIsZGCdzR0OJ3iNHq6
XO9tt8Qx7yGB1+fXW/mByGyqILtkPTG19OK5pBF2Zvnl1kl4bhPJ5yOor1ShTBlN
m8fMJ21JDzzxxBw7a37zQo9uOmXdCQ8bz2W85YOXEvG9/LwRuqsMK/R5/uD01ve/
zgJ60gKGMxi33NPtSSIi58RdqEDcBOoogEwqK1hG7KYLEognYrARRGjhqapbs/vK
xQYkckVlishCJs/dACUg4z4lfaDNTgwKpwrG8Q0kFoZMVwq76sY3KFLYLjcAZNg7
VB12LGe9r9ECgOmERrCIRgFGIVF/kmZ6RnqqIWQomRfkjsyJIXkfjndWDRZF1vGA
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:18 2025 by rpki-client