Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/fHnL3ZpdOP9YTDThe3uP28UwBoA.roa
File: fHnL3ZpdOP9YTDThe3uP28UwBoA.roa (raw, json)
Hash identifier: Nnz1JzPtwqgJbxYKshxKIJ2bLlCCqoKABTp/7IGm4C4=
Subject key identifier: 7C:79:CB:DD:9A:5D:38:FF:58:4C:34:E1:7B:7B:8F:DB:C5:30:06:80
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: E1
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/fHnL3ZpdOP9YTDThe3uP28UwBoA.roa
Signing time: Thu 29 Feb 2024 01:29:41 +0000
ROA not before: Thu 29 Feb 2024 01:29:41 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9607
IP address blocks: 211.14.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Feb 29 01:29:41 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=7C79CBDD9A5D38FF584C34E17B7B8FDBC5300680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:e2:c8:7b:7d:1a:0b:45:c2:b0:a9:83:1b:
a7:1d:e5:b4:54:92:2e:35:9a:91:35:14:07:f4:f8:
63:00:1e:5b:67:f3:5c:7c:87:76:ab:9d:3a:97:8c:
97:1a:a0:a4:26:cc:70:30:6c:a1:4b:a8:5b:14:34:
b0:33:81:bc:a8:57:41:64:30:05:57:b6:3e:28:33:
4f:f3:ea:58:df:43:d4:ae:13:c9:12:69:8e:c9:0d:
47:9e:74:b4:9d:2e:62:74:51:3a:31:47:4a:92:fc:
a7:3c:86:93:6d:3f:14:9c:23:b7:d5:3a:54:f8:f7:
fa:27:99:45:e3:5d:6d:b2:76:60:d0:ba:d2:49:62:
93:d1:88:6c:83:ac:d1:5d:ff:8e:30:e1:57:c4:3c:
67:ae:6a:bb:58:bc:c2:f2:55:07:45:c6:e5:6c:1f:
fa:19:11:6a:f8:43:43:30:2e:b1:f1:69:ea:8b:ac:
d5:82:b2:73:a4:fc:22:ff:3e:c7:bc:37:50:24:eb:
f1:ae:e5:18:72:90:d8:eb:c8:50:51:91:72:77:1a:
40:f7:de:e7:ca:fe:11:e7:a8:3d:24:56:e7:50:c4:
f1:21:1c:48:27:f7:05:e0:fd:f4:8b:31:af:6c:4b:
d9:51:74:f3:ff:3f:fa:c9:d7:e1:de:66:d3:0e:fa:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:79:CB:DD:9A:5D:38:FF:58:4C:34:E1:7B:7B:8F:DB:C5:30:06:80
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/fHnL3ZpdOP9YTDThe3uP28UwBoA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.24.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:82:08:40:83:43:7f:dc:b2:a7:38:7c:47:52:4d:40:8a:e8:
7d:bd:a5:4d:99:d6:00:a3:04:98:77:b5:bf:2d:e5:de:57:0f:
d4:05:16:7b:aa:57:17:0a:ee:a3:cf:05:27:63:c3:ec:fc:2b:
0b:e5:4f:56:5c:3d:52:3f:48:41:2f:82:e1:17:61:49:02:30:
02:f7:7d:f5:be:03:21:c6:3a:e1:49:b2:62:9a:2d:71:b7:b8:
4e:ae:5a:c7:d5:35:69:53:b4:59:4f:77:1c:a5:44:a3:16:b5:
0c:24:8e:80:82:68:8a:bd:0f:b1:18:aa:75:52:ce:27:1e:c5:
9e:a3:16:02:a3:a6:d7:5a:bf:7b:1b:f0:0d:b2:66:8b:ad:1b:
b3:93:39:47:85:99:98:fe:fb:c0:ac:22:39:44:c7:4d:ae:f2:
81:83:2a:c9:24:d8:e5:87:df:dd:19:24:52:d8:86:e2:0e:60:
69:b8:11:4f:2f:35:e4:a0:6b:c8:c4:d4:11:58:b8:3d:76:5d:
92:7b:82:b4:71:55:3c:60:ae:a3:04:39:5a:8c:cc:ad:64:fc:
15:5a:46:8e:ff:98:e6:dc:25:dc:af:bb:f1:f2:68:5d:2f:59:
2e:db:af:15:b2:70:bc:6b:da:92:47:fb:d5:0b:61:8b:fd:ea:
2c:0c:c5:a8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNDAyMjkw
MTI5NDFaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdDNzlDQkREOUE1RDM4
RkY1ODRDMzRFMTdCN0I4RkRCQzUzMDA2ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMZ+LIe30aC0XCsKmDG6cd5bRUki41mpE1FAf0+GMAHltn81x8
h3arnTqXjJcaoKQmzHAwbKFLqFsUNLAzgbyoV0FkMAVXtj4oM0/z6ljfQ9SuE8kS
aY7JDUeedLSdLmJ0UToxR0qS/Kc8hpNtPxScI7fVOlT49/onmUXjXW2ydmDQutJJ
YpPRiGyDrNFd/44w4VfEPGeuartYvMLyVQdFxuVsH/oZEWr4Q0MwLrHxaeqLrNWC
snOk/CL/Pse8N1Ak6/Gu5RhykNjryFBRkXJ3GkD33ufK/hHnqD0kVudQxPEhHEgn
9wXg/fSLMa9sS9lRdPP/P/rJ1+HeZtMO+l4nAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfHnL3ZpdOP9YTDThe3uP28UwBoAwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L2ZIbkwzWnBkT1A5WVREVGhlM3VQMjhVd0JvQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHTDhgwDQYJKoZIhvcNAQELBQADggEBALSCCECDQ3/csqc4fEdSTUCK6H29
pU2Z1gCjBJh3tb8t5d5XD9QFFnuqVxcK7qPPBSdjw+z8KwvlT1ZcPVI/SEEvguEX
YUkCMAL3ffW+AyHGOuFJsmKaLXG3uE6uWsfVNWlTtFlPdxylRKMWtQwkjoCCaIq9
D7EYqnVSzicexZ6jFgKjptdav3sb8A2yZoutG7OTOUeFmZj++8CsIjlEx02u8oGD
Kskk2OWH390ZJFLYhuIOYGm4EU8vNeSga8jE1BFYuD12XZJ7grRxVTxgrqMEOVqM
zK1k/BVaRo7/mObcJdyvu/HyaF0vWS7brxWycLxr2pJH+9ULYYv96iwMxag=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:52 2025 by rpki-client