Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/F7YagsvqS6DL0doE67XsX_Sfre0.roa
File: F7YagsvqS6DL0doE67XsX_Sfre0.roa (raw, json)
Hash identifier: 6o+buUB70MRATLd6iTJsH0IZ3YsJmATuPqM/LdY1LAM=
Subject key identifier: 17:B6:1A:82:CB:EA:4B:A0:CB:D1:DA:04:EB:B5:EC:5F:F4:9F:AD:ED
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0739
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F7YagsvqS6DL0doE67XsX_Sfre0.roa
Signing time: Tue 30 Apr 2024 01:58:43 +0000
ROA not before: Tue 30 Apr 2024 01:58:43 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1849 (0x739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:58:43 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=17B61A82CBEA4BA0CBD1DA04EBB5EC5FF49FADED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:0a:37:a0:13:05:c4:e3:26:46:74:46:e2:
68:42:27:a7:96:e3:6c:bd:72:5f:6c:53:e4:f4:67:
5e:f9:8a:d6:96:34:49:a1:06:3e:ef:a9:bb:e2:15:
f6:74:b2:88:4d:e8:e3:56:78:96:c0:b4:17:a9:47:
5b:ff:bf:34:c0:31:0e:b7:13:07:95:39:a1:31:9f:
1c:ae:72:51:63:b5:7d:9b:ae:ef:76:4e:e3:e5:2e:
bf:a3:16:21:b2:44:73:64:e4:4d:3a:c6:75:ba:47:
3e:77:5f:b1:7f:38:ec:1e:95:79:23:1a:eb:da:b2:
ec:1e:a4:6c:71:9a:5b:cf:ec:a5:d2:a5:c1:b4:89:
ed:ab:7d:52:39:15:e3:4c:84:0f:a1:7a:76:24:a6:
46:f0:cb:3f:dc:0b:3f:d6:1e:ab:a2:c0:e6:ed:ce:
34:59:66:82:ae:7a:22:f5:d9:d9:de:28:7a:e1:2d:
80:84:f5:69:dd:42:86:d9:6b:81:96:18:22:cd:27:
9c:3a:60:d5:4c:7e:49:6c:fb:f2:f6:fa:f7:63:9b:
22:00:51:d1:7a:b9:00:05:14:74:b3:04:8b:46:4d:
b2:31:ab:a6:d3:44:63:de:75:f3:f3:b5:33:ca:b6:
64:77:04:46:15:3d:9c:43:f5:f9:82:b5:bf:0e:f5:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B6:1A:82:CB:EA:4B:A0:CB:D1:DA:04:EB:B5:EC:5F:F4:9F:AD:ED
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F7YagsvqS6DL0doE67XsX_Sfre0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.208.0/22
Signature Algorithm: sha256WithRSAEncryption
64:df:9f:55:e4:77:13:e0:b5:19:8b:c8:a6:61:68:61:ca:20:
9a:8e:98:dc:1f:a9:c6:6b:d6:08:d4:48:f1:73:fd:6c:03:c4:
8f:ad:5a:29:b2:81:64:d6:01:4d:8b:26:7a:50:93:0b:7d:48:
bd:f1:d3:90:cd:3e:49:6f:2a:22:49:cb:37:ff:d1:74:1d:29:
f7:b0:39:55:8f:94:de:62:4d:fd:e7:9a:68:30:4d:8b:f7:40:
08:b4:db:b8:3a:fa:ed:4e:b1:d5:ed:aa:b6:f4:e3:95:ee:c8:
df:2e:37:c5:1e:f2:7f:c0:fb:d3:4c:ea:f5:7c:b1:d4:6a:ac:
d2:a9:da:af:5d:82:03:d7:1e:e2:2e:0a:24:ec:59:d2:28:d0:
e0:f9:40:c1:45:1b:30:80:26:28:21:06:88:07:e6:ff:ca:43:
8d:1b:5b:4e:16:f0:1b:b8:ac:68:ab:f9:e2:07:8f:e7:5e:72:
d9:a0:b7:8d:2a:09:c6:be:15:3b:f0:a6:6f:6a:44:d8:a4:94:
18:ba:da:1f:5f:a7:83:a4:c4:52:57:55:e4:16:37:77:75:2b:
30:9b:2f:72:a5:08:a6:c3:97:a3:e8:02:47:e6:f3:41:90:60:
fb:8a:47:84:4e:5d:ce:97:60:b3:1c:19:5e:78:6b:0e:3e:71:
b0:93:1a:6e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTU4NDNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE3QjYxQTgyQ0JFQTRC
QTBDQkQxREEwNEVCQjVFQzVGRjQ5RkFERUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0ZQo3oBMFxOMmRnRG4mhCJ6eW42y9cl9sU+T0Z175itaWNEmh
Bj7vqbviFfZ0sohN6ONWeJbAtBepR1v/vzTAMQ63EweVOaExnxyuclFjtX2bru92
TuPlLr+jFiGyRHNk5E06xnW6Rz53X7F/OOwelXkjGuvasuwepGxxmlvP7KXSpcG0
ie2rfVI5FeNMhA+henYkpkbwyz/cCz/WHquiwObtzjRZZoKueiL12dneKHrhLYCE
9WndQobZa4GWGCLNJ5w6YNVMfkls+/L2+vdjmyIAUdF6uQAFFHSzBItGTbIxq6bT
RGPedfPztTPKtmR3BEYVPZxD9fmCtb8O9QmpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUF7YagsvqS6DL0doE67XsX/Sfre0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0Y3WWFnc3ZxUzZETDBkb0U2N1hzWF9TZnJlMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYtAwDQYJKoZIhvcNAQELBQADggEBAGTfn1XkdxPgtRmLyKZhaGHKIJqO
mNwfqcZr1gjUSPFz/WwDxI+tWimygWTWAU2LJnpQkwt9SL3x05DNPklvKiJJyzf/
0XQdKfewOVWPlN5iTf3nmmgwTYv3QAi027g6+u1OsdXtqrb045XuyN8uN8Ue8n/A
+9NM6vV8sdRqrNKp2q9dggPXHuIuCiTsWdIo0OD5QMFFGzCAJighBogH5v/KQ40b
W04W8Bu4rGir+eIHj+dectmgt40qCca+FTvwpm9qRNiklBi62h9fp4OkxFJXVeQW
N3d1KzCbL3KlCKbDl6PoAkfm80GQYPuKR4ROXc6XYLMcGV54aw4+cbCTGm4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:29 2025 by rpki-client