Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1MaJD7Z6XvWtUjrVrorahX6XqNM.roa
File: 1MaJD7Z6XvWtUjrVrorahX6XqNM.roa (raw, json)
Hash identifier: N1zhFO/VMcDsx3LeHCTZbnHFXmTTC/khCq7GzuMQhYo=
Subject key identifier: D4:C6:89:0F:B6:7A:5E:F5:AD:52:3A:D5:AE:8A:DA:85:7E:97:A8:D3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0AAC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1MaJD7Z6XvWtUjrVrorahX6XqNM.roa
Signing time: Sun 30 Jun 2024 01:54:28 +0000
ROA not before: Sun 30 Jun 2024 01:54:28 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 211.14.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2732 (0xaac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:54:28 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=D4C6890FB67A5EF5AD523AD5AE8ADA857E97A8D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:e2:b0:e2:ee:b7:49:02:e3:63:4c:b3:c6:
e6:36:1d:46:f1:54:dd:93:8a:20:a1:48:c4:80:5a:
e9:21:6e:f4:44:cb:86:09:bb:13:36:14:25:0e:27:
09:e7:62:a2:f9:07:b8:70:e4:fc:fe:ac:3a:9d:e1:
8b:34:d8:5b:e9:c3:18:63:23:2b:f7:bd:65:44:33:
8a:01:c0:3b:99:3a:e4:04:11:99:dd:ee:23:72:3b:
61:51:f4:3f:ea:30:18:52:e4:f7:95:17:c7:aa:02:
18:a8:26:4c:01:fb:44:07:9c:74:2e:b9:d1:35:b3:
bf:80:a6:98:7b:b2:4d:7b:35:2c:23:bd:96:44:90:
0f:49:78:4b:cf:01:4f:d9:5c:35:6b:84:8f:10:04:
09:a1:2d:d8:44:9b:1e:43:d1:54:bb:c4:a9:56:ab:
83:14:4a:63:71:cb:01:4b:31:e2:ba:47:65:94:d1:
4a:26:92:2e:ca:6c:ba:43:2b:d4:78:8c:67:98:d9:
5e:d2:a8:6b:ed:fd:fd:c7:0c:75:c7:42:ec:78:72:
e4:16:f4:d2:d0:5f:dc:89:de:a6:2f:1a:4d:d1:20:
f1:01:06:6e:c0:fa:3d:a4:9a:25:7c:ea:a9:76:27:
4a:14:76:98:e1:f3:ca:06:00:93:cd:27:47:f6:fe:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:89:0F:B6:7A:5E:F5:AD:52:3A:D5:AE:8A:DA:85:7E:97:A8:D3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1MaJD7Z6XvWtUjrVrorahX6XqNM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.95.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f3:3f:bc:26:68:42:6c:98:41:93:15:1a:79:a6:9f:02:df:
9c:a6:8f:df:fb:de:58:8b:ce:69:57:8d:3e:24:a5:a0:9e:ff:
3e:6c:ab:8d:42:30:28:4a:72:17:dc:f0:b4:40:a1:06:1a:d7:
0d:e0:6c:2d:bc:68:a7:85:e1:af:3c:0b:9b:70:19:50:9f:97:
51:16:99:fc:62:cf:49:49:05:ae:11:63:8d:e0:34:b5:c6:8f:
1d:5f:6a:c6:0d:a6:f9:e1:3a:a7:f2:a9:1a:7a:b7:64:6a:94:
11:b9:80:77:ba:ca:ee:47:38:3d:2f:cf:b6:d6:c3:0b:b0:8a:
45:26:dc:ac:0d:86:b2:13:9a:f1:c8:77:87:c8:99:80:ed:e9:
3f:2d:79:eb:b0:b4:91:bf:a3:8f:76:88:cf:6e:72:6e:05:f4:
e8:5f:ea:fb:f3:ec:c8:ee:86:95:45:dc:ab:20:df:bb:09:7f:
88:89:d5:55:0c:e6:be:64:34:6b:1c:24:1d:1a:3c:d6:f9:e1:
7d:cb:f7:07:d6:37:72:33:22:6c:59:57:1d:86:57:8f:11:e9:
6a:7c:6f:0d:53:2c:3c:bf:4e:40:cb:3b:ed:5a:13:12:24:a0:
42:f7:eb:98:dd:eb:3c:45:99:e6:2f:51:f2:3f:6d:c4:1e:ad:
d1:a9:19:f4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTU0MjhaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEQ0QzY4OTBGQjY3QTVF
RjVBRDUyM0FENUFFOEFEQTg1N0U5N0E4RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDldeKw4u63SQLjY0yzxuY2HUbxVN2TiiChSMSAWukhbvREy4YJ
uxM2FCUOJwnnYqL5B7hw5Pz+rDqd4Ys02FvpwxhjIyv3vWVEM4oBwDuZOuQEEZnd
7iNyO2FR9D/qMBhS5PeVF8eqAhioJkwB+0QHnHQuudE1s7+Apph7sk17NSwjvZZE
kA9JeEvPAU/ZXDVrhI8QBAmhLdhEmx5D0VS7xKlWq4MUSmNxywFLMeK6R2WU0Uom
ki7KbLpDK9R4jGeY2V7SqGvt/f3HDHXHQux4cuQW9NLQX9yJ3qYvGk3RIPEBBm7A
+j2kmiV86ql2J0oUdpjh88oGAJPNJ0f2/v2rAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU1MaJD7Z6XvWtUjrVrorahX6XqNMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzFNYUpEN1o2WHZXdFVqclZyb3JhaFg2WHFOTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADTDl8wDQYJKoZIhvcNAQELBQADggEBAKvzP7wmaEJsmEGTFRp5pp8C35ym
j9/73liLzmlXjT4kpaCe/z5sq41CMChKchfc8LRAoQYa1w3gbC28aKeF4a88C5tw
GVCfl1EWmfxiz0lJBa4RY43gNLXGjx1fasYNpvnhOqfyqRp6t2RqlBG5gHe6yu5H
OD0vz7bWwwuwikUm3KwNhrITmvHId4fImYDt6T8teeuwtJG/o492iM9ucm4F9Ohf
6vvz7MjuhpVF3Ksg37sJf4iJ1VUM5r5kNGscJB0aPNb54X3L9wfWN3IzImxZVx2G
V48R6Wp8bw1TLDy/TkDLO+1aExIkoEL365jd6zxFmeYvUfI/bcQerdGpGfQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:58 2025 by rpki-client