Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CFfHgVvRswVPVzlegEMsdIEsZP4.roa
File: CFfHgVvRswVPVzlegEMsdIEsZP4.roa (raw, json)
Hash identifier: VCBcbg51uDqmFR7WiLjVeDSMRHfwfAqwuH/wfevXPMg=
Subject key identifier: 08:57:C7:81:5B:D1:B3:05:4F:57:39:5E:80:43:2C:74:81:2C:64:FE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 97
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CFfHgVvRswVPVzlegEMsdIEsZP4.roa
Signing time: Wed 29 Mar 2023 16:05:02 +0000
ROA not before: Wed 29 Mar 2023 16:05:02 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:05:02 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=0857C7815BD1B3054F57395E80432C74812C64FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:7b:36:57:d6:6f:95:4b:57:a6:fe:f4:09:
cd:78:ed:6a:17:c5:4a:28:a4:f4:34:97:41:0a:79:
15:9e:25:61:d1:5d:5c:2a:d7:93:45:9d:ea:ec:f3:
3a:07:e0:e3:08:b2:2d:7e:05:6d:ca:86:3f:60:ae:
76:cd:f4:7b:16:79:fb:b7:73:ee:76:65:22:f5:c9:
04:1d:7c:03:24:59:b3:35:61:3a:47:20:0d:38:52:
78:82:55:54:13:6b:0d:e0:59:df:6f:71:dc:cb:13:
6e:ae:5c:2c:da:88:5a:41:0d:6f:39:cf:b4:dc:1a:
0f:14:43:8e:88:9f:bb:4d:e5:17:06:9e:13:66:12:
62:f0:e4:ae:51:2d:43:59:1a:d3:fc:11:08:56:27:
30:38:4f:dd:46:77:25:15:b8:7e:77:d7:4c:9f:7c:
2a:36:28:a2:e2:64:c8:1a:e2:2c:97:28:b2:52:31:
6c:79:65:f5:70:cc:a9:dc:fb:51:e5:64:49:15:aa:
2e:fd:a0:52:35:cc:02:51:c6:cb:30:94:0f:50:67:
0f:b8:a3:ed:d2:96:be:72:74:7c:0d:1b:86:cc:e3:
28:26:6a:8f:65:48:d3:2b:33:3f:e1:c0:1b:a5:06:
41:9e:f4:bf:59:93:31:85:0a:9c:92:80:2f:89:6c:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:C7:81:5B:D1:B3:05:4F:57:39:5E:80:43:2C:74:81:2C:64:FE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CFfHgVvRswVPVzlegEMsdIEsZP4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.134.0/23
Signature Algorithm: sha256WithRSAEncryption
43:5f:2a:a4:74:16:b2:7e:4f:20:64:79:39:03:86:65:12:30:
a5:9c:66:a1:73:a2:04:27:b3:30:fa:af:63:dd:1c:0b:c3:04:
66:d5:fe:64:4c:34:75:c1:87:b4:45:a3:63:b0:0a:96:2b:af:
02:e1:1b:6c:1d:c0:60:73:f5:d6:f9:20:c7:15:62:2e:78:4c:
1d:6a:3a:48:63:9b:5b:b4:f2:88:d1:28:5a:e7:ae:1d:1e:cf:
65:aa:cb:1e:6d:aa:19:e1:2c:6d:78:77:b7:fe:3a:9b:9f:dd:
47:f9:3d:00:22:30:18:7c:15:ba:91:6c:67:03:f3:e3:49:93:
b4:1a:9c:c8:c2:8e:b6:19:88:60:8f:7f:84:0b:be:af:37:18:
16:19:12:99:19:c3:34:e0:f6:31:19:66:a2:c8:04:15:35:99:
2d:5d:af:32:fd:9b:18:17:23:f4:a9:3c:91:c7:40:0e:ae:88:
51:b4:29:4d:64:fa:0c:a3:54:d7:fd:ec:ad:d2:5a:05:48:1c:
23:1b:7f:3d:94:ea:1e:1c:66:59:82:e6:16:0d:e5:7e:ef:51:
0d:d3:53:ce:5c:25:f6:6f:cd:de:e6:1b:90:cc:88:56:33:cc:
7a:18:da:d9:5d:05:06:a7:49:94:d3:37:e8:55:ce:f0:13:76:
6f:06:e2:9a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA1MDJaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDA4NTdDNzgxNUJEMUIz
MDU0RjU3Mzk1RTgwNDMyQzc0ODEyQzY0RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6nHs2V9ZvlUtXpv70Cc147WoXxUoopPQ0l0EKeRWeJWHRXVwq
15NFners8zoH4OMIsi1+BW3Khj9grnbN9HsWefu3c+52ZSL1yQQdfAMkWbM1YTpH
IA04UniCVVQTaw3gWd9vcdzLE26uXCzaiFpBDW85z7TcGg8UQ46In7tN5RcGnhNm
EmLw5K5RLUNZGtP8EQhWJzA4T91GdyUVuH5310yffCo2KKLiZMga4iyXKLJSMWx5
ZfVwzKnc+1HlZEkVqi79oFI1zAJRxsswlA9QZw+4o+3Slr5ydHwNG4bM4ygmao9l
SNMrMz/hwBulBkGe9L9ZkzGFCpySgC+JbDd7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUCFfHgVvRswVPVzlegEMsdIEsZP4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0NGZkhnVnZSc3dWUFZ6bGVnRU1zZElFc1pQNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYoYwDQYJKoZIhvcNAQELBQADggEBAENfKqR0FrJ+TyBkeTkDhmUSMKWc
ZqFzogQnszD6r2PdHAvDBGbV/mRMNHXBh7RFo2OwCpYrrwLhG2wdwGBz9db5IMcV
Yi54TB1qOkhjm1u08ojRKFrnrh0ez2Wqyx5tqhnhLG14d7f+Opuf3Uf5PQAiMBh8
FbqRbGcD8+NJk7QanMjCjrYZiGCPf4QLvq83GBYZEpkZwzTg9jEZZqLIBBU1mS1d
rzL9mxgXI/SpPJHHQA6uiFG0KU1k+gyjVNf97K3SWgVIHCMbfz2U6h4cZlmC5hYN
5X7vUQ3TU85cJfZvzd7mG5DMiFYzzHoY2tldBQanSZTTN+hVzvATdm8G4po=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:28 2025 by rpki-client