Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/msq-ZRUuegA4xe444Udvd9IPp9M.roa
File: msq-ZRUuegA4xe444Udvd9IPp9M.roa (raw, json)
Hash identifier: 2WlsIukGY5cl/ZmsgFcWSfHRfVQ5Plx06poH0MKA2GQ=
Subject key identifier: 9A:CA:BE:65:15:2E:7A:00:38:C5:EE:38:E1:47:6F:77:D2:0F:A7:D3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A78
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/msq-ZRUuegA4xe444Udvd9IPp9M.roa
Signing time: Sun 30 Jun 2024 01:50:35 +0000
ROA not before: Sun 30 Jun 2024 01:50:35 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 211.14.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2680 (0xa78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:50:35 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=9ACABE65152E7A0038C5EE38E1476F77D20FA7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:d3:26:ea:cd:d4:19:d0:f1:ff:57:27:37:
54:42:15:fb:e5:9c:5b:26:03:c6:7a:47:a0:02:a0:
e3:e4:db:9f:c1:d9:9c:09:31:cb:4a:42:c4:1e:27:
d0:1a:56:52:e7:7f:d5:66:b9:8b:ea:9a:51:5f:c7:
c3:99:c2:55:87:c4:97:e8:3f:be:5c:55:e9:79:8f:
8e:62:4c:01:0b:ed:d4:51:dd:7f:cb:c7:2e:24:8a:
96:8a:c9:ff:a6:0f:4c:a4:fd:f3:1f:36:ef:d1:0b:
e5:01:32:4e:18:1a:d4:ec:1a:db:77:03:c2:be:fb:
90:44:02:cb:2f:b4:83:00:76:16:a7:e5:25:6c:d0:
d8:95:ef:31:d1:b6:a2:fe:be:df:91:8b:96:4a:73:
ea:0c:ef:fe:ae:91:6d:b5:35:68:2b:90:dc:33:8e:
cf:53:bd:bf:bc:16:a3:01:7d:3b:24:b6:1b:0e:d9:
d6:fb:a8:5b:e2:40:bb:91:b5:9f:0c:ac:ca:4c:a7:
99:b4:eb:ea:54:73:99:61:d0:d0:67:70:65:df:6d:
59:dd:b1:a2:96:c2:75:d8:77:5b:00:88:8e:40:50:
f0:f3:36:ab:89:16:c0:8f:f2:25:5f:56:66:81:ea:
b5:53:d6:de:e8:10:99:57:37:ab:34:e2:c8:66:84:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:BE:65:15:2E:7A:00:38:C5:EE:38:E1:47:6F:77:D2:0F:A7:D3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/msq-ZRUuegA4xe444Udvd9IPp9M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:06:a9:bb:33:ba:a2:2f:57:c9:00:3a:77:d5:4c:59:e1:85:
05:99:9f:bf:47:36:ae:2a:e2:bf:46:53:06:cf:c6:db:0e:f6:
c6:28:75:d1:2e:41:e0:49:9f:c2:bb:b7:e4:86:40:53:74:cf:
fc:4d:cf:7e:8f:b1:7b:d3:44:46:4e:b3:6e:aa:34:d1:7b:a5:
21:a6:5b:a1:90:f4:ac:54:84:29:a8:58:2a:64:4a:28:8e:68:
f7:a2:f8:26:7e:2a:8a:56:37:64:c3:20:2b:1a:9c:4d:af:5c:
6f:a6:49:82:8f:c9:3a:0f:a4:35:25:bc:40:c8:bd:e8:15:17:
10:f4:d5:81:72:fe:df:a9:91:0d:dc:f5:d0:42:f2:b7:81:83:
23:03:d3:7a:8e:17:ad:75:a5:60:60:50:07:86:a3:4a:a7:86:
b4:aa:c0:44:77:83:89:5a:ff:49:f9:84:69:45:75:59:58:32:
72:d0:9e:2d:c4:36:fd:51:11:37:b0:11:dc:91:e6:6f:d8:12:
c0:db:2e:a3:ea:14:f2:59:5d:9f:67:e1:d3:ae:a0:9a:69:4a:
a5:16:48:d5:40:05:83:af:e9:98:85:17:41:2b:c4:fc:27:38:
d1:18:e0:36:e9:77:48:8c:00:32:3e:2b:ba:af:b2:98:17:48:
30:f7:55:21
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTUwMzVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDlBQ0FCRTY1MTUyRTdB
MDAzOEM1RUUzOEUxNDc2Rjc3RDIwRkE3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCd1NMm6s3UGdDx/1cnN1RCFfvlnFsmA8Z6R6ACoOPk25/B2ZwJ
MctKQsQeJ9AaVlLnf9VmuYvqmlFfx8OZwlWHxJfoP75cVel5j45iTAEL7dRR3X/L
xy4kipaKyf+mD0yk/fMfNu/RC+UBMk4YGtTsGtt3A8K++5BEAssvtIMAdhan5SVs
0NiV7zHRtqL+vt+Ri5ZKc+oM7/6ukW21NWgrkNwzjs9Tvb+8FqMBfTskthsO2db7
qFviQLuRtZ8MrMpMp5m06+pUc5lh0NBncGXfbVndsaKWwnXYd1sAiI5AUPDzNquJ
FsCP8iVfVmaB6rVT1t7oEJlXN6s04shmhEBnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUmsq+ZRUuegA4xe444Udvd9IPp9MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L21zcS1aUlV1ZWdBNHhlNDQ0VWR2ZDlJUHA5TS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALTDnwwDQYJKoZIhvcNAQELBQADggEBAC4GqbszuqIvV8kAOnfVTFnhhQWZ
n79HNq4q4r9GUwbPxtsO9sYoddEuQeBJn8K7t+SGQFN0z/xNz36PsXvTREZOs26q
NNF7pSGmW6GQ9KxUhCmoWCpkSiiOaPei+CZ+KopWN2TDICsanE2vXG+mSYKPyToP
pDUlvEDIvegVFxD01YFy/t+pkQ3c9dBC8reBgyMD03qOF611pWBgUAeGo0qnhrSq
wER3g4la/0n5hGlFdVlYMnLQni3ENv1RETewEdyR5m/YEsDbLqPqFPJZXZ9n4dOu
oJppSqUWSNVABYOv6ZiFF0ErxPwnONEY4Dbpd0iMADI+K7qvspgXSDD3VSE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:52 2025 by rpki-client