Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/d9m8KeaBoY2eJanFVPewCF88ZPM.roa
File: d9m8KeaBoY2eJanFVPewCF88ZPM.roa (raw, json)
Hash identifier: ajerA9wXUe6rOr+0SkGunw7+Dy6bHNZ/9qVz4IqU/U4=
Subject key identifier: 77:D9:BC:29:E6:81:A1:8D:9E:25:A9:C5:54:F7:B0:08:5F:3C:64:F3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0AB1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d9m8KeaBoY2eJanFVPewCF88ZPM.roa
Signing time: Sun 30 Jun 2024 01:54:31 +0000
ROA not before: Sun 30 Jun 2024 01:54:31 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.159.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2737 (0xab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:54:31 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=77D9BC29E681A18D9E25A9C554F7B0085F3C64F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:82:13:35:88:08:7c:37:d5:18:36:56:26:
99:40:cc:f0:a0:bb:bc:e5:1b:48:b7:e0:04:30:60:
be:f2:ac:5a:70:e4:ab:79:a4:a8:9b:27:2a:d4:65:
24:50:d7:0d:ee:af:b2:df:15:5c:61:5e:34:bc:5c:
b1:96:09:e5:b5:40:59:42:e6:8d:c2:90:8d:72:1c:
c0:7a:0d:e8:94:06:41:19:0a:75:08:1a:bf:bd:a2:
b4:e3:b7:20:6e:68:5a:69:f6:25:d7:a2:cd:40:1f:
d3:f3:c0:62:f8:1b:34:13:f1:5c:7e:0f:d4:75:f8:
19:f8:71:4b:29:a3:4b:7a:21:40:c5:46:09:3d:95:
a5:09:6a:b0:67:30:53:66:9e:00:a1:f4:9c:86:ba:
fe:36:62:32:8c:48:e9:59:21:09:b6:86:4a:04:24:
d7:7d:6d:ec:69:c1:91:69:96:ad:30:df:6e:e1:db:
34:4c:d3:3a:b7:cf:5a:e7:9f:4a:ba:fc:fe:1b:46:
95:ff:bb:ec:6b:ed:db:21:ba:39:d7:41:15:f6:d5:
0b:36:22:93:6d:52:83:a2:b6:55:6c:81:ee:3d:af:
cf:8a:70:ba:89:2f:2b:85:32:2e:54:af:38:f1:fc:
b1:cf:d0:b4:c7:4d:74:14:57:db:ce:94:03:d6:ac:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D9:BC:29:E6:81:A1:8D:9E:25:A9:C5:54:F7:B0:08:5F:3C:64:F3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d9m8KeaBoY2eJanFVPewCF88ZPM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.62.0/23
Signature Algorithm: sha256WithRSAEncryption
de:4d:fc:25:60:9a:1e:ab:74:e7:9a:e7:f2:50:a3:12:96:1d:
df:bc:46:c4:47:d5:a4:31:9e:41:9a:08:29:24:1b:20:43:9d:
6e:5a:65:36:d0:7f:ab:cd:5d:ba:82:1c:ae:38:70:0d:96:de:
32:ed:19:f9:ef:f3:f7:92:35:f4:8e:b0:54:c7:f5:e2:d1:5d:
ba:a8:f3:ae:f1:2b:d9:27:b8:d0:55:c1:3b:92:96:da:a7:c6:
89:37:96:1c:3b:25:56:c2:a7:be:b1:3f:4b:f3:af:2b:ec:74:
95:07:b5:28:cf:06:93:88:c5:f1:cd:ec:a1:99:bb:b9:b4:cb:
8d:f2:04:c2:53:93:58:b1:15:10:d1:8a:94:1a:b4:c0:b9:47:
c9:19:9d:d3:ee:19:ab:b1:70:20:52:7e:8e:b8:9e:c7:98:aa:
26:8c:56:51:0c:71:0d:24:99:0a:8a:c8:69:28:8f:ac:29:cb:
dd:78:f9:7a:67:70:5f:b9:3d:86:6f:45:6f:a9:ea:c6:d4:31:
45:97:6a:2f:20:09:55:cc:91:77:11:51:b3:9d:0b:0d:b5:e5:
f5:e5:7f:d5:aa:7f:90:ba:d2:84:2b:1d:6c:d2:9f:b3:e5:b0:
93:5d:40:19:b9:72:ce:fc:31:1e:54:fb:5a:2b:90:bf:d5:cf:
bb:73:23:ab
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTU0MzFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDc3RDlCQzI5RTY4MUEx
OEQ5RTI1QTlDNTU0RjdCMDA4NUYzQzY0RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+0oITNYgIfDfVGDZWJplAzPCgu7zlG0i34AQwYL7yrFpw5Kt5
pKibJyrUZSRQ1w3ur7LfFVxhXjS8XLGWCeW1QFlC5o3CkI1yHMB6DeiUBkEZCnUI
Gr+9orTjtyBuaFpp9iXXos1AH9PzwGL4GzQT8Vx+D9R1+Bn4cUspo0t6IUDFRgk9
laUJarBnMFNmngCh9JyGuv42YjKMSOlZIQm2hkoEJNd9bexpwZFplq0w327h2zRM
0zq3z1rnn0q6/P4bRpX/u+xr7dshujnXQRX21Qs2IpNtUoOitlVsge49r8+KcLqJ
LyuFMi5Urzjx/LHP0LTHTXQUV9vOlAPWrKfdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUd9m8KeaBoY2eJanFVPewCF88ZPMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2Q5bThLZWFCb1kyZUphbkZWUGV3Q0Y4OFpQTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHcnz4wDQYJKoZIhvcNAQELBQADggEBAN5N/CVgmh6rdOea5/JQoxKWHd+8
RsRH1aQxnkGaCCkkGyBDnW5aZTbQf6vNXbqCHK44cA2W3jLtGfnv8/eSNfSOsFTH
9eLRXbqo867xK9knuNBVwTuSltqnxok3lhw7JVbCp76xP0vzryvsdJUHtSjPBpOI
xfHN7KGZu7m0y43yBMJTk1ixFRDRipQatMC5R8kZndPuGauxcCBSfo64nseYqiaM
VlEMcQ0kmQqKyGkoj6wpy914+XpncF+5PYZvRW+p6sbUMUWXai8gCVXMkXcRUbOd
Cw215fXlf9Wqf5C60oQrHWzSn7PlsJNdQBm5cs78MR5U+1orkL/Vz7tzI6s=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:16 2025 by rpki-client