Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1UD56jHyurzdz1UYc8cJNo3P0kw.roa
File: 1UD56jHyurzdz1UYc8cJNo3P0kw.roa (raw, json)
Hash identifier: 2zi/1YN6hVjBxmA6pBII8czXqwG/SCUH/n1xvOQt/8E=
Subject key identifier: D5:40:F9:EA:31:F2:BA:BC:DD:CF:55:18:73:C7:09:36:8D:CF:D2:4C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B40
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1UD56jHyurzdz1UYc8cJNo3P0kw.roa
Signing time: Thu 06 Mar 2025 06:56:37 +0000
ROA not before: Thu 06 Mar 2025 06:56:37 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.75.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2880 (0xb40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 6 06:56:37 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=D540F9EA31F2BABCDDCF551873C709368DCFD24C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:33:7a:a0:ac:39:20:17:40:c3:dc:db:0d:
5e:29:cb:53:e0:61:ce:d6:d8:2d:60:73:3a:5d:c9:
5c:f6:89:5e:a3:ea:06:4e:96:c4:d2:45:0b:92:66:
60:c4:7e:5b:42:cd:e5:c9:81:54:c6:4f:1c:86:d1:
e1:07:29:e5:f9:c3:fe:c2:ea:7a:aa:35:ac:c7:70:
16:07:f4:53:c4:9f:ab:c3:26:f2:94:f7:14:c5:b3:
f5:e0:26:b6:1b:cb:3d:a9:e0:b1:05:b6:a4:81:72:
81:9c:cd:8b:60:cd:47:1b:36:96:3e:a5:ad:18:42:
43:db:bf:5d:b3:a1:f4:be:39:e4:68:a1:5e:9a:46:
50:b7:cc:87:c4:a5:10:b2:34:9f:a3:04:9d:ff:a2:
64:17:5d:ee:28:b4:33:be:fc:c6:b1:04:7b:3e:6f:
ea:98:6e:e5:4f:7d:51:2a:27:03:05:9f:eb:01:45:
c4:0d:b2:6a:91:2a:be:2c:50:6a:78:ea:49:9f:72:
4b:39:23:60:4b:fb:b4:d9:a4:6e:7e:59:6f:a5:0a:
31:be:47:3f:c0:81:4e:41:1d:28:2b:5c:9a:a8:38:
25:ce:1d:1a:6e:64:a3:77:06:26:a3:62:4f:aa:cf:
07:ec:81:a6:fa:4c:ec:4f:ff:a8:e4:c7:30:5e:aa:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:F9:EA:31:F2:BA:BC:DD:CF:55:18:73:C7:09:36:8D:CF:D2:4C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1UD56jHyurzdz1UYc8cJNo3P0kw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b4:cd:2c:17:4e:41:dc:53:54:63:1b:ac:f1:e2:ee:72:9f:
ec:76:6a:4e:99:97:e3:ae:dc:f4:2e:44:c6:02:92:96:aa:d2:
a5:44:bb:57:60:19:b2:7a:af:ff:de:f4:11:82:52:6a:69:40:
3a:0a:5c:f1:1e:1b:a5:0e:3c:e8:6c:89:ca:79:d1:b2:a3:55:
e1:f6:fd:ae:40:4e:47:30:19:65:ec:a5:70:2a:9f:e6:fb:b0:
c5:0d:19:a2:bd:0d:56:57:24:56:75:7b:f0:e0:15:94:26:43:
a5:dd:cc:2f:77:c9:ee:01:25:b2:9f:56:8e:14:09:ef:bc:c9:
02:93:8b:f3:f1:31:88:56:c0:bd:8a:1c:f7:08:f2:8a:c6:92:
b4:6e:b4:3a:68:e8:3d:77:8c:23:80:ae:cf:33:b2:c2:6b:f9:
a9:99:89:00:9b:9f:c4:81:88:4b:51:f1:80:fa:a1:f5:eb:3e:
83:2b:d4:75:c8:85:32:3d:d8:b9:5f:50:15:13:9d:c9:63:56:
19:77:52:20:28:a1:f7:6c:c5:8a:4e:56:3e:25:0b:7f:93:cb:
60:d7:45:b0:c4:60:48:15:19:67:65:00:95:55:77:4e:eb:be:
ea:f7:c6:6c:62:9e:d6:35:50:2a:bc:51:53:23:7a:f0:00:eb:
7e:e8:65:70
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAzMDYw
NjU2MzdaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ1NDBGOUVBMzFGMkJB
QkNERENGNTUxODczQzcwOTM2OERDRkQyNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVmzN6oKw5IBdAw9zbDV4py1PgYc7W2C1gczpdyVz2iV6j6gZO
lsTSRQuSZmDEfltCzeXJgVTGTxyG0eEHKeX5w/7C6nqqNazHcBYH9FPEn6vDJvKU
9xTFs/XgJrYbyz2p4LEFtqSBcoGczYtgzUcbNpY+pa0YQkPbv12zofS+OeRooV6a
RlC3zIfEpRCyNJ+jBJ3/omQXXe4otDO+/MaxBHs+b+qYbuVPfVEqJwMFn+sBRcQN
smqRKr4sUGp46kmfcks5I2BL+7TZpG5+WW+lCjG+Rz/AgU5BHSgrXJqoOCXOHRpu
ZKN3BiajYk+qzwfsgab6TOxP/6jkxzBeqqyzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU1UD56jHyurzdz1UYc8cJNo3P0kwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzFVRDU2akh5dXJ6ZHoxVVljOGNKTm8zUDBrdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABS3wwDQYJKoZIhvcNAQELBQADggEBAKC0zSwXTkHcU1RjG6zx4u5yn+x2
ak6Zl+Ou3PQuRMYCkpaq0qVEu1dgGbJ6r//e9BGCUmppQDoKXPEeG6UOPOhsicp5
0bKjVeH2/a5ATkcwGWXspXAqn+b7sMUNGaK9DVZXJFZ1e/DgFZQmQ6XdzC93ye4B
JbKfVo4UCe+8yQKTi/PxMYhWwL2KHPcI8orGkrRutDpo6D13jCOArs8zssJr+amZ
iQCbn8SBiEtR8YD6ofXrPoMr1HXIhTI92LlfUBUTncljVhl3UiAoofdsxYpOVj4l
C3+Ty2DXRbDEYEgVGWdlAJVVd07rvur3xmxintY1UCq8UVMjevAA637oZXA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:58 2025 by rpki-client