Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/S42XKFLFxOmCWZFMg5G19rGqxy8.roa
File: S42XKFLFxOmCWZFMg5G19rGqxy8.roa (raw, json)
Hash identifier: 6EZ9/SqZX21Kchk205U6i6H+F6TBLEENjYmkUxMwxAQ=
Subject key identifier: 4B:8D:97:28:52:C5:C4:E9:82:59:91:4C:83:91:B5:F6:B1:AA:C7:2F
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 1E
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/S42XKFLFxOmCWZFMg5G19rGqxy8.roa
Signing time: Fri 02 Feb 2024 07:36:54 +0000
ROA not before: Fri 02 Feb 2024 07:36:54 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 9619
IP address blocks: 211.125.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Feb 2 07:36:54 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=4B8D972852C5C4E98259914C8391B5F6B1AAC72F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:33:3b:0d:e6:da:0a:25:57:7a:85:fa:9c:
66:2c:5b:3e:70:c6:0b:c0:90:51:35:29:b5:2c:dc:
85:3c:86:e3:05:93:9a:60:49:94:03:8a:17:35:7a:
26:8d:50:d3:fd:7e:2d:85:98:58:bc:2c:8a:d6:7e:
16:71:52:84:99:89:a9:6a:df:9f:8c:32:84:4e:c8:
46:90:25:dc:8f:8f:27:80:ea:cc:5a:9d:2a:44:fd:
ae:b5:b7:c2:b2:6a:d7:e6:cc:8b:f8:6f:a4:a1:ab:
65:a1:9c:8b:aa:1c:5e:9f:ca:b9:b7:ff:89:6a:f6:
ec:e1:10:6d:ee:29:fd:e8:3a:b1:7e:98:51:bc:b4:
ba:e4:66:f7:49:aa:4a:c5:7a:58:be:23:f1:23:9b:
ca:02:24:40:3c:97:a8:f5:3d:00:ed:91:8c:cd:a8:
15:1f:98:3b:88:66:0f:6c:14:08:e9:32:d3:b5:17:
5d:6a:25:20:6b:cd:7b:97:24:6d:78:d7:31:ee:4d:
bf:d1:79:78:7e:12:d1:c3:40:61:a3:03:07:72:55:
4a:52:15:a9:ee:51:e7:2e:21:88:26:15:63:33:93:
7c:4e:d0:d9:40:09:fc:1d:de:12:37:30:2c:88:7a:
0d:99:4e:6c:01:6b:25:19:d4:9f:20:df:1b:76:2a:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:97:28:52:C5:C4:E9:82:59:91:4C:83:91:B5:F6:B1:AA:C7:2F
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/S42XKFLFxOmCWZFMg5G19rGqxy8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.125.140.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3b:92:c7:07:07:27:2f:21:31:9b:fe:f5:20:76:f7:53:c2:
e4:14:e7:cd:c0:72:ec:50:9b:84:9b:46:3a:72:4d:20:a1:64:
de:2a:a1:32:74:42:7e:8c:3f:ca:f3:b5:fd:56:c7:23:cd:22:
97:01:32:4f:fa:f3:d9:6d:07:f8:a2:19:16:99:d4:e6:b3:33:
e7:38:8a:55:70:62:b3:c7:6c:de:72:51:89:aa:ee:27:8b:9c:
fa:ba:d9:6a:4a:49:ed:64:8b:07:28:a1:78:d0:91:e4:e6:28:
55:b8:0a:a9:c8:1d:d8:38:72:ac:7d:37:f9:fb:3d:67:bb:11:
f9:a2:e9:f4:8c:ea:c0:6d:63:dd:fb:d5:66:66:98:d2:e7:db:
91:f7:9b:7c:76:00:19:c8:af:10:b2:a0:f7:88:81:84:d0:0f:
e9:fc:70:a3:7e:9a:71:fc:b8:b3:87:07:6e:76:fc:fd:54:17:
33:b1:3e:d4:bf:37:17:50:be:00:98:0c:8a:48:51:c4:67:4f:
f0:a3:b8:79:f4:a4:b9:a3:2a:96:b0:23:44:1b:30:3a:c6:73:
14:62:eb:3b:04:bf:90:5f:38:a3:35:14:2e:82:bd:ba:bf:ba:
74:89:2d:fa:44:43:89:49:a3:f9:d5:fb:97:41:bc:33:18:87:
26:ea:28:99
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz
QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI0MDIwMjA3
MzY1NFoXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoNEI4RDk3Mjg1MkM1QzRF
OTgyNTk5MTRDODM5MUI1RjZCMUFBQzcyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALEZMzsN5toKJVd6hfqcZixbPnDGC8CQUTUptSzchTyG4wWTmmBJ
lAOKFzV6Jo1Q0/1+LYWYWLwsitZ+FnFShJmJqWrfn4wyhE7IRpAl3I+PJ4DqzFqd
KkT9rrW3wrJq1+bMi/hvpKGrZaGci6ocXp/Kubf/iWr27OEQbe4p/eg6sX6YUby0
uuRm90mqSsV6WL4j8SObygIkQDyXqPU9AO2RjM2oFR+YO4hmD2wUCOky07UXXWol
IGvNe5ckbXjXMe5Nv9F5eH4S0cNAYaMDB3JVSlIVqe5R5y4hiCYVYzOTfE7Q2UAJ
/B3eEjcwLIh6DZlObAFrJRnUnyDfG3YqiS8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRLjZcoUsXE6YJZkUyDkbX2sarHLzAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm
j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o
N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTUvUzQyWEtGTEZ4T21DV1pGTWc1RzE5ckdxeHk4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANN9jDANBgkqhkiG9w0BAQsFAAOCAQEAczuSxwcHJy8hMZv+9SB291PC5BTn
zcBy7FCbhJtGOnJNIKFk3iqhMnRCfow/yvO1/VbHI80ilwEyT/rz2W0H+KIZFpnU
5rMz5ziKVXBis8ds3nJRiaruJ4uc+rrZakpJ7WSLByiheNCR5OYoVbgKqcgd2Dhy
rH03+fs9Z7sR+aLp9IzqwG1j3fvVZmaY0ufbkfebfHYAGcivELKg94iBhNAP6fxw
o36acfy4s4cHbnb8/VQXM7E+1L83F1C+AJgMikhRxGdP8KO4efSkuaMqlrAjRBsw
OsZzFGLrOwS/kF84ozUULoK9ur+6dIkt+kRDiUmj+dX7l0G8MxiHJuoomQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:53 2025 by rpki-client