Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wfQGXToZM9wDaBuj2gtRTgFupBE.roa
File: wfQGXToZM9wDaBuj2gtRTgFupBE.roa (raw, json)
Hash identifier: Qe4RLN1lmtUQDhwMssqUoP9TvkmNSa4EaXl0IijetAQ=
Subject key identifier: C1:F4:06:5D:3A:19:33:DC:03:68:1B:A3:DA:0B:51:4E:01:6E:A4:11
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 07FE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wfQGXToZM9wDaBuj2gtRTgFupBE.roa
Signing time: Tue 30 Apr 2024 02:12:18 +0000
ROA not before: Tue 30 Apr 2024 02:12:18 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2046 (0x7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:12:18 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=C1F4065D3A1933DC03681BA3DA0B514E016EA411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:b5:32:12:fd:d8:ac:18:5d:29:d4:b8:1c:
dc:16:76:f0:15:5f:77:b3:e4:4e:64:d7:8f:6f:7c:
c2:eb:34:4d:e7:f7:57:1f:76:83:e8:74:e1:e8:d1:
35:a2:a2:1a:dd:fc:e3:a0:0d:f9:7e:f6:b8:b9:73:
98:2e:f8:9d:69:dd:d8:65:b2:74:d1:3f:da:83:d9:
37:4f:fd:05:77:27:7f:ff:7b:b0:75:a0:95:bd:12:
d6:39:08:14:5c:51:3a:bf:9a:f3:68:04:71:31:3f:
59:27:f4:4c:16:73:60:22:40:da:42:9a:bf:68:ec:
fa:d9:33:40:fa:d2:e7:85:01:7b:5b:be:82:21:1f:
8e:b8:a7:df:5a:8a:f1:c7:fc:c2:17:5a:78:b1:16:
f5:74:62:8b:6d:7b:a5:e3:d6:f1:20:d2:17:74:10:
c6:be:ba:18:9e:8f:c1:0c:8b:14:87:35:48:3c:09:
93:09:f6:27:31:31:6e:53:6d:9c:de:75:df:81:d0:
43:06:e4:5a:67:87:08:7e:6d:09:9a:74:85:f8:0f:
9e:49:32:73:4b:a6:7a:c3:c2:41:6c:a9:ea:e4:47:
07:04:e9:64:0e:68:9c:43:cb:29:18:e2:0a:7c:e6:
17:5a:46:cd:58:ba:ee:ab:d7:aa:46:ce:1a:27:1e:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F4:06:5D:3A:19:33:DC:03:68:1B:A3:DA:0B:51:4E:01:6E:A4:11
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wfQGXToZM9wDaBuj2gtRTgFupBE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c5:1c:a5:4b:11:77:06:97:be:b2:f8:82:84:6a:06:35:cf:
a1:6a:97:fd:a2:65:ef:d6:0c:ed:df:99:68:d4:4e:aa:fd:96:
90:84:5e:f4:51:5a:ef:0b:6e:e8:76:d2:92:c1:0a:f7:d8:a9:
b2:36:fb:9d:32:d7:ca:c5:10:c5:2c:2a:aa:c1:35:e8:0b:96:
40:9b:4f:93:f2:4a:a3:c6:37:93:83:82:e5:96:f3:d2:7f:a4:
bf:3e:57:32:75:44:05:77:bc:84:98:47:ce:3b:7d:5a:b4:7a:
74:41:4f:ec:4d:64:a2:7d:08:ff:a1:3a:54:d3:4e:4a:25:4e:
74:f9:a4:ac:5c:a6:d6:97:14:a5:34:82:5d:b9:58:f7:4e:20:
1e:c3:bf:32:bf:86:36:2e:7b:73:5d:a6:0b:c9:30:de:69:67:
49:65:b6:5c:1d:c9:37:e2:22:b7:ab:0e:57:7b:f8:27:6f:58:
a0:d5:8f:f9:0b:1d:95:22:e3:2b:d9:fa:51:30:f0:ae:c8:a4:
3b:15:9e:e1:2f:4c:6d:69:8d:48:f9:a7:48:be:53:3a:f4:af:
a6:23:aa:57:b3:7f:59:75:96:ae:eb:53:25:00:83:a3:08:cb:
36:34:37:3f:5d:2d:9b:99:5f:6a:e3:78:ab:7b:fa:77:d8:be:
b9:45:a1:8e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjEyMThaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMxRjQwNjVEM0ExOTMz
REMwMzY4MUJBM0RBMEI1MTRFMDE2RUE0MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeRbUyEv3YrBhdKdS4HNwWdvAVX3ez5E5k149vfMLrNE3n91cf
doPodOHo0TWiohrd/OOgDfl+9ri5c5gu+J1p3dhlsnTRP9qD2TdP/QV3J3//e7B1
oJW9EtY5CBRcUTq/mvNoBHExP1kn9EwWc2AiQNpCmr9o7PrZM0D60ueFAXtbvoIh
H464p99aivHH/MIXWnixFvV0Yotte6Xj1vEg0hd0EMa+uhiej8EMixSHNUg8CZMJ
9icxMW5TbZzedd+B0EMG5Fpnhwh+bQmadIX4D55JMnNLpnrDwkFsqerkRwcE6WQO
aJxDyykY4gp85hdaRs1Yuu6r16pGzhonHpD9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwfQGXToZM9wDaBuj2gtRTgFupBEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3dmUUdYVG9aTTl3RGFCdWoyZ3RSVGdGdXBCRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxalowDQYJKoZIhvcNAQELBQADggEBABzFHKVLEXcGl76y+IKEagY1z6Fq
l/2iZe/WDO3fmWjUTqr9lpCEXvRRWu8Lbuh20pLBCvfYqbI2+50y18rFEMUsKqrB
NegLlkCbT5PySqPGN5ODguWW89J/pL8+VzJ1RAV3vISYR847fVq0enRBT+xNZKJ9
CP+hOlTTTkolTnT5pKxcptaXFKU0gl25WPdOIB7DvzK/hjYue3NdpgvJMN5pZ0ll
tlwdyTfiIrerDld7+CdvWKDVj/kLHZUi4yvZ+lEw8K7IpDsVnuEvTG1pjUj5p0i+
Uzr0r6Yjqlezf1l1lq7rUyUAg6MIyzY0Nz9dLZuZX2rjeKt7+nfYvrlFoY4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:39 2025 by rpki-client