Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dmb3xxM8r3AEFVOeAbAbHeVbhPY.roa
File: dmb3xxM8r3AEFVOeAbAbHeVbhPY.roa (raw, json)
Hash identifier: LV4oe0IUc4mNFwXcrlYqlrYhoI9ywWEojtT1M04Uelg=
Subject key identifier: 76:66:F7:C7:13:3C:AF:70:04:15:53:9E:01:B0:1B:1D:E5:5B:84:F6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0765
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dmb3xxM8r3AEFVOeAbAbHeVbhPY.roa
Signing time: Tue 30 Apr 2024 02:01:41 +0000
ROA not before: Tue 30 Apr 2024 02:01:41 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1893 (0x765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:01:41 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=7666F7C7133CAF700415539E01B01B1DE55B84F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:17:bd:04:32:de:52:49:4e:c2:c6:08:e7:
46:d4:5a:95:e9:04:5d:60:f2:11:04:b7:63:33:26:
19:af:cb:f4:a7:a1:9d:3c:58:af:c8:d3:0d:cc:50:
b6:27:3d:10:d0:4f:b5:ce:4f:20:be:3c:fc:00:a3:
34:d7:14:1e:7a:59:3e:a0:b9:33:bc:93:ec:d7:24:
99:af:70:72:16:91:49:cf:92:8a:76:03:74:a4:c4:
21:f7:29:6f:be:35:04:25:87:4a:cc:f5:16:59:da:
1c:d6:aa:39:55:15:cd:e6:78:c4:8f:b7:e1:05:ff:
99:7a:9e:61:18:ff:79:fa:30:3d:ce:b2:a5:35:53:
02:cd:7e:c7:78:d1:28:d7:64:94:00:c5:e5:6d:68:
a9:af:10:da:22:91:9d:8e:23:27:23:85:09:e2:e1:
5d:78:ac:9a:27:fb:f1:75:34:a8:a3:9c:6e:bd:a6:
d8:dd:ea:2d:b5:3b:d1:76:d7:7f:99:0d:bf:50:fd:
c1:b2:7f:c3:a3:fe:21:3e:14:71:40:15:02:eb:3e:
76:1a:05:cb:e8:92:62:54:aa:ac:e0:4a:7d:26:5a:
cd:3e:0c:7c:11:07:04:5c:eb:7d:63:a5:60:b7:79:
75:72:1b:32:ef:4e:9e:14:bd:e4:b8:80:7a:3c:d4:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:66:F7:C7:13:3C:AF:70:04:15:53:9E:01:B0:1B:1D:E5:5B:84:F6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dmb3xxM8r3AEFVOeAbAbHeVbhPY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:87:80:50:49:b5:f5:e6:ec:9a:2e:49:ae:83:7c:db:4d:71:
58:04:ee:b0:9a:fe:e5:cb:ed:cc:70:d4:49:4c:1f:7b:9a:44:
10:f8:24:3a:cf:df:0d:c6:3e:99:92:45:4d:58:20:e2:c9:ff:
18:a4:b1:67:cf:2c:b1:f8:dc:2d:d5:2e:e5:f0:36:49:10:c2:
50:b1:26:45:5d:90:e5:fb:61:54:71:d7:f9:66:6e:f0:3f:ac:
f5:8c:06:03:57:82:2a:6c:3d:e7:0c:9a:6f:af:f2:48:0f:1d:
44:44:dc:cb:46:e9:53:e8:ed:05:f9:59:82:a4:d5:12:3e:c5:
f3:3c:7f:ef:ba:74:d2:7f:95:fc:5b:44:be:ff:bd:56:65:7f:
23:76:a9:89:24:3c:3d:c3:82:02:1e:b8:c8:95:bb:ff:03:23:
52:6e:40:1a:59:64:ac:07:cd:d8:55:08:54:89:7a:d7:b8:2f:
f1:d9:bf:01:d9:af:41:c2:78:0f:12:d8:c7:f2:44:96:91:33:
90:4e:76:6c:2c:98:f7:d3:7d:cb:20:fd:a4:b6:39:8e:81:18:
88:49:42:25:19:c2:f1:a1:50:2b:1e:e4:48:e7:a7:5e:52:42:
84:8d:9f:0b:e1:2d:62:8f:19:33:cf:d2:2c:bc:b1:14:8f:92:
de:f9:ca:4e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjAxNDFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc2NjZGN0M3MTMzQ0FG
NzAwNDE1NTM5RTAxQjAxQjFERTU1Qjg0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHtRe9BDLeUklOwsYI50bUWpXpBF1g8hEEt2MzJhmvy/SnoZ08
WK/I0w3MULYnPRDQT7XOTyC+PPwAozTXFB56WT6guTO8k+zXJJmvcHIWkUnPkop2
A3SkxCH3KW++NQQlh0rM9RZZ2hzWqjlVFc3meMSPt+EF/5l6nmEY/3n6MD3OsqU1
UwLNfsd40SjXZJQAxeVtaKmvENoikZ2OIycjhQni4V14rJon+/F1NKijnG69ptjd
6i21O9F213+ZDb9Q/cGyf8Oj/iE+FHFAFQLrPnYaBcvokmJUqqzgSn0mWs0+DHwR
BwRc631jpWC3eXVyGzLvTp4UveS4gHo81PM9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUdmb3xxM8r3AEFVOeAbAbHeVbhPYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2RtYjN4eE04cjNBRUZWT2VBYkFiSGVWYmhQWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQBSdAwDQYJKoZIhvcNAQELBQADggEBAEqHgFBJtfXm7JouSa6DfNtNcVgE
7rCa/uXL7cxw1ElMH3uaRBD4JDrP3w3GPpmSRU1YIOLJ/xiksWfPLLH43C3VLuXw
NkkQwlCxJkVdkOX7YVRx1/lmbvA/rPWMBgNXgipsPecMmm+v8kgPHURE3MtG6VPo
7QX5WYKk1RI+xfM8f++6dNJ/lfxbRL7/vVZlfyN2qYkkPD3DggIeuMiVu/8DI1Ju
QBpZZKwHzdhVCFSJete4L/HZvwHZr0HCeA8S2MfyRJaRM5BOdmwsmPfTfcsg/aS2
OY6BGIhJQiUZwvGhUCse5Ejnp15SQoSNnwvhLWKPGTPP0iy8sRSPkt75yk4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:21 2025 by rpki-client