Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-oQyZNyQKnPO3CgE-c3yjGMVNLw.roa
File: -oQyZNyQKnPO3CgE-c3yjGMVNLw.roa (raw, json)
Hash identifier: kD6Atl63CmeIBYyC47noNRK6YcEAsRd/NKveSsWFxx8=
Subject key identifier: FA:84:32:64:DC:90:2A:73:CE:DC:28:04:F9:CD:F2:8C:63:15:34:BC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08EC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-oQyZNyQKnPO3CgE-c3yjGMVNLw.roa
Signing time: Tue 30 Apr 2024 02:26:31 +0000
ROA not before: Tue 30 Apr 2024 02:26:31 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:26:31 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=FA843264DC902A73CEDC2804F9CDF28C631534BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:08:c4:cb:c6:c2:bb:60:b7:49:53:cb:fb:
bb:1a:6c:aa:61:df:4f:36:72:f7:f0:15:b9:bb:c7:
b9:5b:ce:48:45:f1:c7:39:84:42:0a:f4:34:71:65:
ff:6b:51:c6:f9:b2:f4:0c:02:fd:60:3c:4c:51:08:
cc:05:db:21:89:d7:e2:d0:bb:8a:6f:c5:59:13:24:
98:e8:f0:d1:3f:cc:e5:cf:bd:59:8f:68:e1:af:58:
e3:94:cc:84:c3:c7:7c:bb:87:52:e3:9f:57:be:ef:
84:f6:e8:fe:b2:8d:07:46:d3:14:80:b7:6c:d5:54:
41:e6:b3:80:95:40:a8:b9:ca:86:41:de:86:f1:a2:
e2:f9:cd:b8:b1:35:22:76:15:e2:ea:9e:79:6d:34:
ed:5e:df:34:c8:78:ef:e7:e1:68:c2:fa:05:0b:21:
57:76:b3:cf:f5:f9:1d:c5:c1:6c:b9:64:16:06:26:
b5:8d:96:75:3a:ab:e0:de:a6:6a:be:c5:44:a2:92:
0a:80:3b:fe:c5:b1:73:aa:7d:ea:66:43:09:32:57:
a9:64:9a:da:04:53:ad:34:8f:b3:d7:e7:4f:83:0c:
8d:6c:15:99:a0:37:4f:af:8d:0c:2c:cd:1d:fb:c8:
01:03:30:94:75:32:ac:ad:62:40:6d:7a:34:86:e8:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:32:64:DC:90:2A:73:CE:DC:28:04:F9:CD:F2:8C:63:15:34:BC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-oQyZNyQKnPO3CgE-c3yjGMVNLw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:59:df:d9:3e:e7:3f:e1:b0:08:1f:76:22:f2:92:53:5e:fa:
75:b3:45:66:20:9b:ba:78:95:cb:cf:9e:d8:f7:8f:61:b8:c0:
06:4d:5d:33:c8:2c:6e:43:1c:d3:71:e2:9e:64:a7:82:6e:db:
54:11:e7:c3:ff:9a:15:26:89:cd:b3:34:ce:4f:9b:2f:2b:0c:
59:84:9a:8b:80:e1:e6:f1:e5:c7:fd:fe:7b:d9:30:50:f6:3f:
eb:87:49:32:b5:d0:39:c2:cd:16:93:9c:b5:62:10:9c:e8:69:
e4:26:49:14:83:20:49:89:1e:99:ff:82:70:1a:9e:f9:3c:91:
ed:fe:4e:f5:2e:db:3c:5c:89:9b:9b:03:06:fd:64:f8:32:5e:
b5:83:5c:04:cc:63:62:8f:1f:c1:52:a4:24:ea:d4:f4:e4:b6:
4a:c9:0d:c6:95:72:85:61:cc:01:0d:65:3a:97:5f:8c:58:ea:
de:ca:29:53:47:df:0d:d6:05:1f:55:8a:4d:45:95:f7:8f:df:
54:13:c6:96:1e:60:35:a4:77:6a:e7:63:b1:fc:19:ee:62:c8:
f9:db:05:4a:50:f3:ea:96:63:42:f6:2f:1a:01:4c:d9:51:b2:
7a:87:af:d3:7c:b6:b0:25:42:a0:6d:fd:33:90:b5:ae:df:2f:
ea:f0:43:d8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjI2MzFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZBODQzMjY0REM5MDJB
NzNDRURDMjgwNEY5Q0RGMjhDNjMxNTM0QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCIQjEy8bCu2C3SVPL+7sabKph3082cvfwFbm7x7lbzkhF8cc5
hEIK9DRxZf9rUcb5svQMAv1gPExRCMwF2yGJ1+LQu4pvxVkTJJjo8NE/zOXPvVmP
aOGvWOOUzITDx3y7h1Ljn1e+74T26P6yjQdG0xSAt2zVVEHms4CVQKi5yoZB3obx
ouL5zbixNSJ2FeLqnnltNO1e3zTIeO/n4WjC+gULIVd2s8/1+R3FwWy5ZBYGJrWN
lnU6q+Depmq+xUSikgqAO/7FsXOqfepmQwkyV6lkmtoEU600j7PX50+DDI1sFZmg
N0+vjQwszR37yAEDMJR1MqytYkBtejSG6IDbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU+oQyZNyQKnPO3CgE+c3yjGMVNLwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5Ly1vUXlaTnlRS25QTzNDZ0UtYzN5akdNVk5Mdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaAQwDQYJKoZIhvcNAQELBQADggEBAK5Z39k+5z/hsAgfdiLyklNe+nWz
RWYgm7p4lcvPntj3j2G4wAZNXTPILG5DHNNx4p5kp4Ju21QR58P/mhUmic2zNM5P
my8rDFmEmouA4ebx5cf9/nvZMFD2P+uHSTK10DnCzRaTnLViEJzoaeQmSRSDIEmJ
Hpn/gnAanvk8ke3+TvUu2zxciZubAwb9ZPgyXrWDXATMY2KPH8FSpCTq1PTktkrJ
DcaVcoVhzAENZTqXX4xY6t7KKVNH3w3WBR9Vik1FlfeP31QTxpYeYDWkd2rnY7H8
Ge5iyPnbBUpQ8+qWY0L2LxoBTNlRsnqHr9N8trAlQqBt/TOQta7fL+rwQ9g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:06 2025 by rpki-client