Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/3TtmuftEbRz8IAZb4g33ycLLycI.roa
File: 3TtmuftEbRz8IAZb4g33ycLLycI.roa (raw, json)
Hash identifier: QNtWeSyWF0UrHgA7Zhq2TXwONpzJRoA6RTTBb2GQl7k=
Subject key identifier: DD:3B:66:B9:FB:44:6D:1C:FC:20:06:5B:E2:0D:F7:C9:C2:CB:C9:C2
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0191
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3TtmuftEbRz8IAZb4g33ycLLycI.roa
Signing time: Fri 07 Jul 2023 04:12:38 +0000
ROA not before: Fri 07 Jul 2023 04:12:38 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 110.74.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:12:38 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=DD3B66B9FB446D1CFC20065BE20DF7C9C2CBC9C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:80:3d:b4:03:24:42:94:d8:f4:6e:86:32:
24:23:83:b8:2e:87:a7:da:30:6d:b9:53:dd:6b:77:
9b:5d:45:9c:19:68:de:27:8a:f6:9c:6c:4d:5e:1e:
3b:e3:ef:e2:29:56:60:2e:e6:c1:f2:53:ca:13:f2:
1f:a6:89:b6:14:04:28:a7:28:42:21:42:14:83:bc:
9f:8d:a2:60:3f:fe:1c:dc:bd:52:74:ee:1a:99:b5:
96:6f:2b:27:d9:56:88:74:7a:38:02:54:4f:bc:68:
6a:b1:80:1a:32:f5:20:7d:83:24:09:8b:f7:52:09:
8d:b4:8d:cd:a0:46:d8:aa:e8:da:75:fa:09:bd:66:
8e:cb:f8:eb:bc:a4:58:16:e4:11:af:08:d0:30:02:
c0:0d:31:bd:3b:89:29:d8:a5:9a:72:35:54:2b:ea:
64:00:56:1f:6d:37:8e:90:93:b4:ee:1c:9f:b5:c2:
70:7e:4d:75:ba:b8:bb:61:10:2d:3c:68:f4:05:2b:
46:b7:18:8d:fa:75:e6:a1:a2:09:60:5f:f9:51:25:
e1:39:c4:60:08:ce:f7:5f:98:f6:f9:56:e1:d3:51:
a4:21:f4:4a:7f:72:e9:0b:22:03:d3:b3:a0:00:01:
57:31:7f:c2:bd:e4:49:2f:70:c8:79:1e:5a:50:cc:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:66:B9:FB:44:6D:1C:FC:20:06:5B:E2:0D:F7:C9:C2:CB:C9:C2
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3TtmuftEbRz8IAZb4g33ycLLycI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.74.240.0/20
Signature Algorithm: sha256WithRSAEncryption
57:ff:c1:c0:f2:85:c9:73:07:85:24:99:68:8e:39:a5:71:bc:
12:2c:9d:00:1c:52:92:80:98:14:cf:16:92:62:4c:36:8f:8b:
52:36:e4:4e:b6:59:4b:b0:78:a7:39:d0:f6:7b:df:5c:dc:71:
99:84:a5:6f:fc:25:eb:72:1e:67:64:a3:f8:94:c1:cd:bd:4d:
8f:09:6e:eb:ed:32:72:cf:87:c1:39:23:bf:38:3a:07:fd:31:
ca:48:18:8e:d1:38:99:79:5c:e4:98:23:50:62:c0:08:10:44:
ec:3e:66:ab:85:68:23:d4:a3:63:f7:33:02:17:91:1f:b8:86:
4a:93:4e:0d:d0:a4:0c:98:4a:39:fb:39:32:c5:b1:6b:97:67:
a9:70:29:32:fb:48:39:f2:a0:d2:25:04:e3:f5:f4:53:af:df:
e6:9b:6a:63:77:ef:1c:cc:61:44:dd:67:9c:bd:6c:76:e8:b1:
88:58:c0:9f:e0:9c:58:ba:be:1e:96:1b:ba:11:ef:2a:4e:38:
db:10:19:17:f2:72:af:48:a9:6e:a3:ac:3c:28:52:8d:c6:3b:
b1:fb:70:0a:fc:de:cb:67:76:33:e2:b8:53:37:11:ce:00:ac:
88:c3:c4:41:44:ef:69:fc:49:24:38:f8:4f:41:6f:e1:a5:f3:
b1:7c:8b:be
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEyMzhaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEREM0I2NkI5RkI0NDZE
MUNGQzIwMDY1QkUyMERGN0M5QzJDQkM5QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLG4A9tAMkQpTY9G6GMiQjg7guh6faMG25U91rd5tdRZwZaN4n
ivacbE1eHjvj7+IpVmAu5sHyU8oT8h+mibYUBCinKEIhQhSDvJ+NomA//hzcvVJ0
7hqZtZZvKyfZVoh0ejgCVE+8aGqxgBoy9SB9gyQJi/dSCY20jc2gRtiq6Np1+gm9
Zo7L+Ou8pFgW5BGvCNAwAsANMb07iSnYpZpyNVQr6mQAVh9tN46Qk7TuHJ+1wnB+
TXW6uLthEC08aPQFK0a3GI36deahoglgX/lRJeE5xGAIzvdfmPb5VuHTUaQh9Ep/
cukLIgPTs6AAAVcxf8K95EkvcMh5HlpQzNqrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU3TtmuftEbRz8IAZb4g33ycLLycIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzNUdG11ZnRFYlJ6OElBWmI0ZzMzeWNMTHljSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuSvAwDQYJKoZIhvcNAQELBQADggEBAFf/wcDyhclzB4UkmWiOOaVxvBIs
nQAcUpKAmBTPFpJiTDaPi1I25E62WUuweKc50PZ731zccZmEpW/8JetyHmdko/iU
wc29TY8JbuvtMnLPh8E5I784Ogf9McpIGI7ROJl5XOSYI1BiwAgQROw+ZquFaCPU
o2P3MwIXkR+4hkqTTg3QpAyYSjn7OTLFsWuXZ6lwKTL7SDnyoNIlBOP19FOv3+ab
amN37xzMYUTdZ5y9bHbosYhYwJ/gnFi6vh6WG7oR7ypOONsQGRfycq9IqW6jrDwo
Uo3GO7H7cAr83stndjPiuFM3Ec4ArIjDxEFE72n8SSQ4+E9Bb+Gl87F8i74=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:25 2025 by rpki-client