Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EkJx8jP9xUWdgKHbSmU-npCl7Ac.roa
File: EkJx8jP9xUWdgKHbSmU-npCl7Ac.roa (raw, json)
Hash identifier: qey4YJJe4ZGkcj7/UId+TWg4k+e3EVlxrUkKT/+ZjBU=
Subject key identifier: 12:42:71:F2:33:FD:C5:45:9D:80:A1:DB:4A:65:3E:9E:90:A5:EC:07
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A63
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EkJx8jP9xUWdgKHbSmU-npCl7Ac.roa
Signing time: Sun 30 Jun 2024 01:50:23 +0000
ROA not before: Sun 30 Jun 2024 01:50:23 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.76.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2659 (0xa63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:50:23 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=124271F233FDC5459D80A1DB4A653E9E90A5EC07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:1b:21:ca:53:02:89:ff:05:f0:9d:d6:10:
e2:49:52:6c:78:60:66:28:53:49:75:54:5b:20:e7:
87:97:d1:ab:87:e1:f5:85:76:d6:29:56:e2:ab:58:
6f:47:3f:b6:e2:a6:ea:56:31:cb:03:09:15:63:f1:
97:ee:e5:91:b3:e5:7f:ac:8f:0e:8d:84:af:5e:d6:
cf:56:a2:9d:5b:8e:7f:b7:5c:e3:37:45:40:9f:73:
f0:0e:da:c3:30:55:14:20:e3:c8:a6:fc:3f:57:4d:
bc:a1:a9:51:b8:b8:d6:af:a4:82:cd:1f:97:84:15:
90:0c:3c:67:8a:fb:f1:68:fb:f1:6c:07:ba:59:82:
26:7c:36:34:47:c7:f5:fc:99:28:9f:6b:8d:32:9f:
75:ac:fd:d5:7b:c2:c4:7f:bc:bf:26:32:78:83:01:
a9:36:06:f4:98:de:72:94:04:82:42:90:4a:5c:81:
d6:ec:5e:b0:2e:01:0e:9c:c2:77:a3:49:32:70:57:
a1:30:ac:7e:2f:c3:3d:d7:e6:90:48:ab:86:6d:5c:
f8:95:3c:35:f1:a8:ba:9a:55:d0:0e:93:ea:98:d5:
80:e5:dd:19:7a:f1:9c:cc:09:d3:f9:33:02:42:05:
3a:0e:96:1b:12:a3:3d:e3:f0:04:f4:bb:1b:bf:a5:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:71:F2:33:FD:C5:45:9D:80:A1:DB:4A:65:3E:9E:90:A5:EC:07
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EkJx8jP9xUWdgKHbSmU-npCl7Ac.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.16.0/21
Signature Algorithm: sha256WithRSAEncryption
44:d4:12:e8:8e:f3:ed:88:fb:f2:c7:e6:02:2b:01:6b:33:6f:
f9:d3:d4:21:f6:97:f3:1d:77:de:b4:89:83:c9:95:b7:63:ef:
38:7e:17:ae:41:55:f9:b0:9b:d2:24:a2:f7:1b:8d:09:9a:99:
63:fc:1e:98:32:6b:2a:bb:13:9a:c3:d2:d6:69:f6:9e:11:a1:
79:ca:9c:ba:ac:95:a4:72:19:9e:8f:7e:1d:c9:e1:3b:a8:fd:
02:af:05:5a:95:63:10:ab:ca:3b:79:cb:9e:48:af:9d:ce:7a:
61:64:f7:fe:77:0c:c4:e6:9e:21:64:f9:f3:7b:b7:99:94:4e:
dc:d4:ec:fd:11:0e:5c:f3:e2:be:15:7e:82:f8:1d:e6:01:77:
81:20:3e:bd:83:b6:ff:b9:ec:5f:8b:f8:8a:95:bd:2b:31:7e:
f6:ee:01:2d:c0:21:9e:8b:d9:95:4d:ea:28:e7:5b:65:6a:ed:
58:dd:27:16:e4:b8:b5:54:9f:63:be:dc:5a:60:51:98:d2:9e:
ef:a0:66:48:fe:d6:67:ca:a8:39:18:cf:1b:bb:8f:4a:e8:26:
fa:f9:be:59:ab:3b:d3:3a:66:d1:61:10:d0:ef:20:b0:bf:f7:
37:77:82:d9:f4:52:6c:dc:62:79:c0:8a:ba:89:8c:98:3c:67:
39:a6:d7:5f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTUwMjNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDEyNDI3MUYyMzNGREM1
NDU5RDgwQTFEQjRBNjUzRTlFOTBBNUVDMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChABshylMCif8F8J3WEOJJUmx4YGYoU0l1VFsg54eX0auH4fWF
dtYpVuKrWG9HP7bipupWMcsDCRVj8Zfu5ZGz5X+sjw6NhK9e1s9Wop1bjn+3XOM3
RUCfc/AO2sMwVRQg48im/D9XTbyhqVG4uNavpILNH5eEFZAMPGeK+/Fo+/FsB7pZ
giZ8NjRHx/X8mSifa40yn3Ws/dV7wsR/vL8mMniDAak2BvSY3nKUBIJCkEpcgdbs
XrAuAQ6cwnejSTJwV6EwrH4vwz3X5pBIq4ZtXPiVPDXxqLqaVdAOk+qY1YDl3Rl6
8ZzMCdP5MwJCBToOlhsSoz3j8AT0uxu/pRt3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEkJx8jP9xUWdgKHbSmU+npCl7AcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0VrSng4alA5eFVXZGdLSGJTbVUtbnBDbDdBYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMBTBAwDQYJKoZIhvcNAQELBQADggEBAETUEuiO8+2I+/LH5gIrAWszb/nT
1CH2l/Mdd960iYPJlbdj7zh+F65BVfmwm9IkovcbjQmamWP8Hpgyayq7E5rD0tZp
9p4RoXnKnLqslaRyGZ6Pfh3J4Tuo/QKvBVqVYxCryjt5y55Ir53OemFk9/53DMTm
niFk+fN7t5mUTtzU7P0RDlzz4r4VfoL4HeYBd4EgPr2Dtv+57F+L+IqVvSsxfvbu
AS3AIZ6L2ZVN6ijnW2Vq7VjdJxbkuLVUn2O+3FpgUZjSnu+gZkj+1mfKqDkYzxu7
j0roJvr5vlmrO9M6ZtFhENDvILC/9zd3gtn0UmzcYnnAirqJjJg8Zzmm118=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:39 2025 by rpki-client