Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tcGV3HzzPAGjE0GGxODUXwLRcmE.roa
File: tcGV3HzzPAGjE0GGxODUXwLRcmE.roa (raw, json)
Hash identifier: 8xzeu+/hvyrfA4gaA9g1B1NHLcxE9TIh6dY+VQdsymY=
Subject key identifier: B5:C1:95:DC:7C:F3:3C:01:A3:13:41:86:C4:E0:D4:5F:02:D1:72:61
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 058A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tcGV3HzzPAGjE0GGxODUXwLRcmE.roa
Signing time: Thu 27 Jul 2023 16:58:14 +0000
ROA not before: Thu 27 Jul 2023 16:58:14 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.159.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1418 (0x58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:58:14 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=B5C195DC7CF33C01A3134186C4E0D45F02D17261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:67:df:05:ae:31:8d:e5:94:c9:13:fa:3d:
47:b6:c0:3a:a4:9b:06:d1:b0:2a:5e:d0:03:d6:d4:
5f:34:46:16:22:94:d6:1a:8a:5d:98:78:57:dc:a8:
8f:bf:ba:c3:48:55:d0:43:92:96:12:7d:15:e4:d8:
db:94:f0:ea:46:11:ae:61:95:cb:70:af:6c:fb:40:
95:38:99:86:37:71:b6:eb:70:61:7c:4f:ad:21:75:
61:5b:7a:be:bf:6f:a7:63:16:eb:27:85:30:b7:66:
88:4f:08:3c:c4:c2:83:02:26:ed:cc:87:80:63:c0:
51:18:e1:d7:1d:c5:5b:70:47:5e:7b:8c:0c:e0:70:
d8:10:bc:15:0a:36:19:26:bb:95:8b:68:96:d2:3e:
6a:7f:fe:f4:d6:29:d9:53:ff:be:9c:f5:6d:cb:c6:
d8:d0:d0:1c:f8:31:da:ed:72:1b:3d:4f:92:86:e0:
73:d5:0b:c8:14:c2:00:58:02:b4:14:a3:3c:32:a8:
64:44:90:ef:4e:1f:2b:9f:ad:19:67:ca:7f:71:c0:
b7:a9:07:2f:af:da:fc:a4:82:00:b6:a1:2c:5e:73:
25:d5:66:f4:3c:e7:7f:a4:c6:3e:58:ff:d1:0a:da:
b4:32:5a:df:c2:66:a1:ce:00:38:08:65:60:e8:87:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C1:95:DC:7C:F3:3C:01:A3:13:41:86:C4:E0:D4:5F:02:D1:72:61
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tcGV3HzzPAGjE0GGxODUXwLRcmE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.250.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:15:25:7e:1b:95:43:a7:85:dd:45:15:6c:15:0a:9d:b9:c3:
ce:1d:00:b4:27:45:e9:6b:de:a8:79:63:a6:3d:24:c4:91:21:
59:56:fe:ad:f5:03:4e:4b:24:7d:16:cb:b6:55:3a:14:05:b3:
68:58:60:ab:47:7f:76:bb:24:60:b6:b3:ee:28:62:da:a7:b6:
f7:41:66:99:b5:b6:01:e2:f6:3d:b5:78:e1:53:8b:41:5b:9c:
b4:17:67:1b:06:de:09:0a:ab:24:02:33:a6:a0:f1:50:e0:a0:
8b:62:6a:e1:4d:b4:1f:ca:61:18:6f:99:81:97:53:1e:e8:0b:
76:f0:91:ce:93:8d:49:b7:04:42:79:2a:bd:d4:70:7d:ed:d8:
9f:48:56:59:58:0e:35:ef:a7:9b:13:50:68:24:3d:b4:bd:cc:
f1:45:2e:67:ff:a9:b6:e9:45:d3:da:f0:09:b2:b0:00:46:09:
60:ca:94:33:57:4d:3b:28:49:10:7a:86:69:3a:39:f4:6c:01:
87:68:1f:25:4e:69:ae:04:a7:a5:6f:63:75:c8:c8:5e:88:cf:
56:54:2e:fe:9d:3b:7d:19:71:63:94:26:a4:5f:1a:5e:61:91:
21:f5:c1:e5:2b:51:84:9c:f3:cd:f3:61:33:41:e1:d0:83:cc:
0a:b7:47:4f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU4MTRaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEI1QzE5NURDN0NGMzND
MDFBMzEzNDE4NkM0RTBENDVGMDJEMTcyNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoR2ffBa4xjeWUyRP6PUe2wDqkmwbRsCpe0APW1F80RhYilNYa
il2YeFfcqI+/usNIVdBDkpYSfRXk2NuU8OpGEa5hlctwr2z7QJU4mYY3cbbrcGF8
T60hdWFber6/b6djFusnhTC3ZohPCDzEwoMCJu3Mh4BjwFEY4dcdxVtwR157jAzg
cNgQvBUKNhkmu5WLaJbSPmp//vTWKdlT/76c9W3LxtjQ0Bz4Mdrtchs9T5KG4HPV
C8gUwgBYArQUozwyqGREkO9OHyufrRlnyn9xwLepBy+v2vykggC2oSxecyXVZvQ8
53+kxj5Y/9EK2rQyWt/CZqHOADgIZWDoh2vlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUtcGV3HzzPAGjE0GGxODUXwLRcmEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3RjR1YzSHp6UEFHakUwR0d4T0RVWHdMUmNtRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADcn/owDQYJKoZIhvcNAQELBQADggEBAOcVJX4blUOnhd1FFWwVCp25w84d
ALQnRelr3qh5Y6Y9JMSRIVlW/q31A05LJH0Wy7ZVOhQFs2hYYKtHf3a7JGC2s+4o
YtqntvdBZpm1tgHi9j21eOFTi0FbnLQXZxsG3gkKqyQCM6ag8VDgoItiauFNtB/K
YRhvmYGXUx7oC3bwkc6TjUm3BEJ5Kr3UcH3t2J9IVllYDjXvp5sTUGgkPbS9zPFF
Lmf/qbbpRdPa8AmysABGCWDKlDNXTTsoSRB6hmk6OfRsAYdoHyVOaa4Ep6VvY3XI
yF6Iz1ZULv6dO30ZcWOUJqRfGl5hkSH1weUrUYSc883zYTNB4dCDzAq3R08=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:19 2025 by rpki-client