Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xg2Qj5krPAQvFuXyuqe60p0qXNo.roa
File: xg2Qj5krPAQvFuXyuqe60p0qXNo.roa (raw, json)
Hash identifier: fV9zaY8iuKEI98fBrEL8CDaJliNmLcwXmH3/xpRztz0=
Subject key identifier: C6:0D:90:8F:99:2B:3C:04:2F:16:E5:F2:BA:A7:BA:D2:9D:2A:5C:DA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06F6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xg2Qj5krPAQvFuXyuqe60p0qXNo.roa
Signing time: Tue 30 Apr 2024 01:49:46 +0000
ROA not before: Tue 30 Apr 2024 01:49:46 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:49:46 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=C60D908F992B3C042F16E5F2BAA7BAD29D2A5CDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:9b:ef:a9:7d:de:48:31:34:ea:e3:35:ba:
10:c9:c2:93:52:5c:50:9b:1b:81:5f:66:47:26:0e:
48:3d:b5:17:f7:f1:bf:e6:70:8d:c9:e5:c4:67:c6:
93:13:04:4e:56:2e:08:66:2a:0d:db:73:75:3a:7c:
c5:94:70:1b:03:5a:50:8d:2b:b8:3a:f7:02:94:95:
9d:2f:3b:38:50:9f:18:af:df:a6:d7:02:43:dd:0e:
94:bf:d5:12:5f:d4:02:d6:b8:a0:1a:cc:1a:77:04:
4f:b0:8e:ca:f9:2b:45:e1:85:08:ae:11:cd:2b:c3:
8a:4e:da:c3:3f:f4:58:83:22:24:c0:0a:85:55:1f:
8e:85:1c:16:6a:37:78:77:14:7a:9c:20:c3:e6:8c:
45:c0:ee:0a:37:03:50:f0:b6:ed:d9:1f:81:5a:34:
ae:76:af:45:8e:60:70:f5:ac:8e:81:08:12:e4:4f:
7e:ed:18:07:e3:02:2a:86:5c:ae:68:dd:d7:59:d6:
97:09:a0:b0:91:40:27:ca:70:67:86:4b:de:ca:5c:
a3:d0:a9:fa:63:7a:d1:85:ba:73:b9:36:f6:f8:62:
69:2d:c7:5e:d9:b9:b3:31:d9:b2:01:c1:da:f8:18:
9c:2f:38:f3:ac:dc:c2:3a:17:c7:b8:aa:13:c3:d3:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0D:90:8F:99:2B:3C:04:2F:16:E5:F2:BA:A7:BA:D2:9D:2A:5C:DA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xg2Qj5krPAQvFuXyuqe60p0qXNo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.29.0/24
Signature Algorithm: sha256WithRSAEncryption
31:03:bc:42:66:05:0e:99:81:a0:86:5e:e8:3f:66:ff:ee:a7:
1b:a5:1d:0a:6f:58:44:a0:53:92:ca:41:b0:b8:40:9d:51:3b:
20:5a:9c:12:e0:dc:8e:95:87:99:6a:8e:4f:d2:e9:6c:3e:46:
ad:8d:1e:08:46:24:cb:2c:4f:9d:18:ca:20:44:f6:19:2a:d6:
f0:a3:bf:27:a8:66:80:2d:3c:de:b6:d8:43:88:d5:54:18:9a:
0e:8b:59:9b:8e:cd:26:2a:d5:c0:00:67:2d:2a:3c:db:6c:25:
f8:d2:4e:fc:31:74:38:67:0e:a4:6d:12:e8:e6:f4:f0:90:38:
20:98:a0:c7:35:9e:7e:34:01:14:a1:b7:19:55:29:8d:75:95:
6a:87:09:49:b3:a0:b1:fa:23:53:f5:b5:ab:a4:72:a7:e6:6b:
78:04:c6:bf:15:87:fa:08:35:99:e5:b4:c5:81:96:2a:ea:f8:
d3:11:e2:c1:ae:7c:23:84:4f:94:e1:32:33:3c:1c:7f:b8:52:
ae:a5:bf:57:5c:1e:2f:d6:44:8d:a4:d6:7b:db:14:54:0a:1e:
23:38:27:90:e1:3a:6c:f5:5f:35:d0:96:d2:d9:1d:22:80:69:
92:c1:52:95:0d:b5:92:0c:ce:8b:98:4c:2f:0c:bb:8d:d6:1e:
17:35:82:12
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTQ5NDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM2MEQ5MDhGOTkyQjND
MDQyRjE2RTVGMkJBQTdCQUQyOUQyQTVDREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN3pvvqX3eSDE06uM1uhDJwpNSXFCbG4FfZkcmDkg9tRf38b/m
cI3J5cRnxpMTBE5WLghmKg3bc3U6fMWUcBsDWlCNK7g69wKUlZ0vOzhQnxiv36bX
AkPdDpS/1RJf1ALWuKAazBp3BE+wjsr5K0XhhQiuEc0rw4pO2sM/9FiDIiTACoVV
H46FHBZqN3h3FHqcIMPmjEXA7go3A1Dwtu3ZH4FaNK52r0WOYHD1rI6BCBLkT37t
GAfjAiqGXK5o3ddZ1pcJoLCRQCfKcGeGS97KXKPQqfpjetGFunO5Nvb4Ymktx17Z
ubMx2bIBwdr4GJwvOPOs3MI6F8e4qhPD0xm5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUxg2Qj5krPAQvFuXyuqe60p0qXNowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3hnMlFqNWtyUEFRdkZ1WHl1cWU2MHAwcVhOby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYB0wDQYJKoZIhvcNAQELBQADggEBADEDvEJmBQ6ZgaCGXug/Zv/upxul
HQpvWESgU5LKQbC4QJ1ROyBanBLg3I6Vh5lqjk/S6Ww+Rq2NHghGJMssT50YyiBE
9hkq1vCjvyeoZoAtPN622EOI1VQYmg6LWZuOzSYq1cAAZy0qPNtsJfjSTvwxdDhn
DqRtEujm9PCQOCCYoMc1nn40ARShtxlVKY11lWqHCUmzoLH6I1P1taukcqfma3gE
xr8Vh/oINZnltMWBlirq+NMR4sGufCOET5ThMjM8HH+4Uq6lv1dcHi/WRI2k1nvb
FFQKHiM4J5DhOmz1XzXQltLZHSKAaZLBUpUNtZIMzouYTC8Mu43WHhc1ghI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:27 2025 by rpki-client