Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5v9aJ-QfTE31-sm-E56QCI1YIsc.roa
File: 5v9aJ-QfTE31-sm-E56QCI1YIsc.roa (raw, json)
Hash identifier: DzC0kX8GK+UqmI8FSTNsytWnc0n9HvfbFAekYn3aqDI=
Subject key identifier: E6:FF:5A:27:E4:1F:4C:4D:F5:FA:C9:BE:13:9E:90:08:8D:58:22:C7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A34
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5v9aJ-QfTE31-sm-E56QCI1YIsc.roa
Signing time: Sun 30 Jun 2024 01:46:34 +0000
ROA not before: Sun 30 Jun 2024 01:46:34 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.72.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2612 (0xa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:46:34 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=E6FF5A27E41F4C4DF5FAC9BE139E90088D5822C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:66:de:0e:9c:1b:cc:40:4d:d5:e3:89:44:
56:86:87:b9:16:a5:63:79:c1:89:17:29:70:ae:1b:
2e:ae:b5:92:f2:3c:c9:2f:1b:1f:ce:fe:7f:d2:cb:
67:53:d6:43:8d:ea:2b:0b:d4:88:d9:40:30:f7:b6:
00:f7:2a:f3:af:a2:db:d8:6f:40:12:df:b5:9f:b2:
55:67:31:b9:98:36:a0:ed:66:26:4e:9f:46:ba:0c:
12:7d:1e:6c:df:d6:73:33:a1:f8:48:a3:6a:a9:28:
39:73:e9:71:53:0d:32:12:06:66:60:c0:94:ae:77:
aa:97:80:16:8e:3c:03:e4:a3:ee:05:dc:1a:ff:b5:
f9:36:1f:e0:53:17:19:14:e8:5b:53:dc:2e:e6:2c:
12:8f:c7:66:e1:66:91:b0:5a:84:9d:11:e9:7b:b7:
31:d1:13:62:15:d1:ac:61:ef:7d:9a:60:11:9c:33:
72:c9:68:f7:36:2c:02:06:9b:ea:ed:c4:15:ed:c7:
2a:c5:b7:20:8c:07:1c:f5:75:57:13:04:08:8d:8d:
2a:d8:3c:92:b4:81:56:a1:73:8b:8a:12:0e:89:ca:
4d:25:e7:92:55:45:9b:3b:e2:45:4b:9b:aa:b1:a2:
14:97:0d:24:bd:71:ed:a7:c5:30:51:eb:1c:2e:7e:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FF:5A:27:E4:1F:4C:4D:F5:FA:C9:BE:13:9E:90:08:8D:58:22:C7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5v9aJ-QfTE31-sm-E56QCI1YIsc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.24.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:a3:d0:55:dd:9c:08:6c:72:4e:45:0f:f1:e7:a5:d6:0d:73:
5f:af:f4:18:01:46:e0:c6:da:07:ec:87:dc:3f:59:cb:58:e7:
c3:68:b4:5f:cd:2a:7c:0a:a5:af:95:20:8c:e8:79:54:71:8f:
f1:9f:8c:12:35:0e:b9:26:ee:63:08:0f:ec:e2:a4:e6:35:d1:
56:00:b4:df:f8:cc:a5:55:69:e8:a9:73:cd:2e:e0:e4:bc:ef:
a2:ba:5f:ac:71:71:89:b6:0f:af:8f:76:b0:15:50:47:83:dd:
5e:5c:8f:6b:bf:19:5a:d3:87:d9:3f:c2:37:d1:bb:53:bf:a8:
a5:75:6d:85:8e:93:1b:5f:08:a6:d5:71:49:51:f4:9e:bc:a5:
e2:18:44:5c:f9:e0:7b:55:b3:07:4b:a8:c5:a9:6c:82:c2:13:
e2:c5:e9:3a:2a:7e:fc:f1:ca:0e:09:50:ff:e4:97:18:4a:42:
97:3f:55:35:46:9f:48:0e:43:77:3e:0a:82:9e:47:5f:a7:4b:
55:31:c5:81:d6:79:b3:c2:b7:c0:2b:b4:bf:51:82:5a:39:0e:
e3:56:d3:81:d9:fe:8e:88:63:bb:5b:92:90:8b:d6:9c:98:a0:
39:80:43:73:b1:b5:0c:f4:42:1b:fc:0a:a2:87:fc:0f:06:07:
c2:b5:75:e7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTQ2MzRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEU2RkY1QTI3RTQxRjRD
NERGNUZBQzlCRTEzOUU5MDA4OEQ1ODIyQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjVmbeDpwbzEBN1eOJRFaGh7kWpWN5wYkXKXCuGy6utZLyPMkv
Gx/O/n/Sy2dT1kON6isL1IjZQDD3tgD3KvOvotvYb0AS37WfslVnMbmYNqDtZiZO
n0a6DBJ9Hmzf1nMzofhIo2qpKDlz6XFTDTISBmZgwJSud6qXgBaOPAPko+4F3Br/
tfk2H+BTFxkU6FtT3C7mLBKPx2bhZpGwWoSdEel7tzHRE2IV0axh732aYBGcM3LJ
aPc2LAIGm+rtxBXtxyrFtyCMBxz1dVcTBAiNjSrYPJK0gVahc4uKEg6Jyk0l55JV
RZs74kVLm6qxohSXDSS9ce2nxTBR6xwufm3DAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU5v9aJ+QfTE31+sm+E56QCI1YIscwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzV2OWFKLVFmVEUzMS1zbS1FNTZRQ0kxWUlzYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMBSBgwDQYJKoZIhvcNAQELBQADggEBAJ2j0FXdnAhsck5FD/HnpdYNc1+v
9BgBRuDG2gfsh9w/WctY58NotF/NKnwKpa+VIIzoeVRxj/GfjBI1Drkm7mMID+zi
pOY10VYAtN/4zKVVaeipc80u4OS876K6X6xxcYm2D6+PdrAVUEeD3V5cj2u/GVrT
h9k/wjfRu1O/qKV1bYWOkxtfCKbVcUlR9J68peIYRFz54HtVswdLqMWpbILCE+LF
6Toqfvzxyg4JUP/klxhKQpc/VTVGn0gOQ3c+CoKeR1+nS1UxxYHWebPCt8ArtL9R
glo5DuNW04HZ/o6IY7tbkpCL1pyYoDmAQ3OxtQz0Qhv8CqKH/A8GB8K1dec=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:13 2025 by rpki-client