Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGIH_Sza6yO4dpjRKpmlqc4uTvY.roa
File: HGIH_Sza6yO4dpjRKpmlqc4uTvY.roa (raw, json)
Hash identifier: Z6HcnExchKL+HAd4oFixZEVyA9nUjNREYnKV7voQJqY=
Subject key identifier: 1C:62:07:FD:2C:DA:EB:23:B8:76:98:D1:2A:99:A5:A9:CE:2E:4E:F6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08A4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGIH_Sza6yO4dpjRKpmlqc4uTvY.roa
Signing time: Tue 30 Apr 2024 02:22:32 +0000
ROA not before: Tue 30 Apr 2024 02:22:32 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:22:32 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=1C6207FD2CDAEB23B87698D12A99A5A9CE2E4EF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:af:59:1e:45:3a:85:64:ae:d1:5f:be:cc:15:
80:5f:26:99:50:18:f2:f5:93:5b:4e:ac:f4:bb:a7:
2b:1f:4b:89:2c:d8:09:59:f8:a3:73:04:01:3d:a7:
b5:10:00:f3:08:50:99:76:98:f6:d9:49:4c:c0:f5:
da:c6:08:0a:67:0c:e5:7d:97:a3:4f:22:6a:d3:e4:
29:e2:7a:0c:b8:33:01:90:a1:c9:ac:1d:ca:d1:d2:
6e:d5:62:19:32:bb:ae:97:71:50:57:da:e4:85:21:
e5:56:d2:da:37:3e:79:f8:62:12:a3:ac:4a:b4:3c:
81:84:1f:02:3c:9c:4a:ef:97:c2:ec:a0:c7:f5:00:
d9:3c:43:30:48:d6:56:d2:db:40:dd:eb:6d:10:c6:
96:36:41:41:4a:d0:9d:8e:68:87:9f:96:1e:d2:fc:
9e:0a:ca:f7:d4:14:d5:de:21:75:9c:3c:ab:3b:a9:
05:8b:79:69:b0:19:a1:02:40:54:73:91:11:95:f1:
dc:42:07:99:28:68:0a:57:fe:12:4f:83:87:77:94:
14:2c:0a:f1:db:60:09:7a:00:3e:5d:06:ea:bf:e4:
76:1b:d7:5a:21:1f:6e:dc:5a:4c:e3:6e:dd:5f:c1:
16:54:86:4e:c7:39:61:a7:0d:c1:d6:02:5c:95:3a:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:62:07:FD:2C:DA:EB:23:B8:76:98:D1:2A:99:A5:A9:CE:2E:4E:F6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGIH_Sza6yO4dpjRKpmlqc4uTvY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.160.0/22
Signature Algorithm: sha256WithRSAEncryption
e1:12:95:eb:8c:04:1b:65:30:90:4a:9b:7f:0b:06:cd:61:d8:
8f:d4:57:89:f0:b6:19:84:18:44:55:fa:63:ad:ec:ad:a3:a8:
20:d4:17:51:89:5a:8a:84:67:f2:57:be:73:ef:90:14:69:b1:
2b:de:51:0c:39:79:c7:df:1b:64:2c:e9:b1:3c:94:39:08:68:
46:a0:a1:b5:99:6d:77:89:a4:f2:74:3a:cf:3d:b4:24:d7:8d:
2a:9d:5f:99:e8:4e:93:5b:0d:21:7b:f1:ca:82:d6:4f:3f:72:
2b:0f:e7:8d:27:ec:32:fd:8b:c3:2b:1d:d4:db:23:dd:38:2e:
50:ed:96:ee:01:c0:75:b5:77:5e:cc:7c:b6:4d:41:2c:ca:bf:
c9:34:de:49:dd:ff:70:19:05:a3:68:f3:24:b8:98:5d:c8:4f:
44:79:e5:dc:2c:3e:d7:42:71:e3:05:13:3b:26:29:ea:61:6f:
92:61:d1:f6:f3:dc:8a:f1:68:fe:88:cb:8c:7a:d4:bc:e8:29:
c3:37:c3:9e:25:ef:66:fb:4a:c7:7a:0f:e4:b1:50:27:88:56:
b3:7e:61:d7:66:41:91:3d:e7:76:ca:76:52:57:de:8d:97:12:
7c:f9:c4:5d:04:e2:50:c7:11:14:c2:6a:78:57:c5:f2:8b:50:
8c:05:06:cc
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjIyMzJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFDNjIwN0ZEMkNEQUVC
MjNCODc2OThEMTJBOTlBNUE5Q0UyRTRFRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDor1keRTqFZK7RX77MFYBfJplQGPL1k1tOrPS7pysfS4ks2AlZ
+KNzBAE9p7UQAPMIUJl2mPbZSUzA9drGCApnDOV9l6NPImrT5Cniegy4MwGQocms
HcrR0m7VYhkyu66XcVBX2uSFIeVW0to3Pnn4YhKjrEq0PIGEHwI8nErvl8LsoMf1
ANk8QzBI1lbS20Dd620QxpY2QUFK0J2OaIeflh7S/J4KyvfUFNXeIXWcPKs7qQWL
eWmwGaECQFRzkRGV8dxCB5koaApX/hJPg4d3lBQsCvHbYAl6AD5dBuq/5HYb11oh
H27cWkzjbt1fwRZUhk7HOWGnDcHWAlyVOl5NAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUHGIH/Sza6yO4dpjRKpmlqc4uTvYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0hHSUhfU3phNnlPNGRwalJLcG1scWM0dVR2WS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYqAwDQYJKoZIhvcNAQELBQADggEBAOESleuMBBtlMJBKm38LBs1h2I/U
V4nwthmEGERV+mOt7K2jqCDUF1GJWoqEZ/JXvnPvkBRpsSveUQw5ecffG2Qs6bE8
lDkIaEagobWZbXeJpPJ0Os89tCTXjSqdX5noTpNbDSF78cqC1k8/cisP540n7DL9
i8MrHdTbI904LlDtlu4BwHW1d17MfLZNQSzKv8k03knd/3AZBaNo8yS4mF3IT0R5
5dwsPtdCceMFEzsmKephb5Jh0fbz3IrxaP6Iy4x61LzoKcM3w54l72b7Ssd6D+Sx
UCeIVrN+YddmQZE953bKdlJX3o2XEnz5xF0E4lDHERTCanhXxfKLUIwFBsw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:46 2025 by rpki-client