Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/J2CTPh6Yaio5pW47-9RYz-IlH3Y.roa
File: J2CTPh6Yaio5pW47-9RYz-IlH3Y.roa (raw, json)
Hash identifier: NxHYCk2f6xXdlIAA4Tn0jfkUybOED6azY3N2KybzE7M=
Subject key identifier: 27:60:93:3E:1E:98:6A:2A:39:A5:6E:3B:FB:D4:58:CF:E2:25:1F:76
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: AE
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/J2CTPh6Yaio5pW47-9RYz-IlH3Y.roa
Signing time: Tue 01 Nov 2022 01:28:10 +0000
ROA not before: Tue 01 Nov 2022 01:28:10 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 10021
IP address blocks: 202.95.220.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Nov 1 01:28:10 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=2760933E1E986A2A39A56E3BFBD458CFE2251F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:50:a0:fe:21:4f:f0:b3:67:ad:84:ec:9c:
9a:bf:e2:f4:71:23:69:38:ad:50:a5:b9:a4:43:3e:
8d:b5:de:5b:63:0b:f1:78:c1:85:6e:88:2e:0f:a4:
e6:b0:b4:8b:66:47:13:a0:fc:68:21:a9:82:b9:a7:
02:19:4e:90:95:5a:8c:04:43:1e:c9:3b:d2:95:ba:
31:d8:46:c5:55:66:0b:68:78:ad:79:9d:33:2b:5d:
40:97:2a:58:fc:12:cf:03:ff:da:df:c8:c4:58:ec:
4f:b8:64:64:81:26:26:0a:b3:81:da:54:68:30:dc:
aa:38:b4:68:e3:3f:b0:d4:4d:cc:f9:4a:25:83:bc:
1e:a0:1b:ab:eb:56:ea:0d:db:7c:94:6d:8d:0d:11:
29:ee:a6:41:59:d1:8d:93:97:7b:83:79:30:1a:d2:
09:48:55:97:9f:c6:60:b1:03:59:7e:60:4e:08:f6:
35:e9:6d:2d:8c:16:5b:b7:e6:56:5b:2c:af:9f:39:
61:cd:54:3e:0e:32:eb:9d:7f:32:c5:f9:79:84:d4:
b5:4c:34:34:27:dc:b3:4a:49:1a:33:20:39:76:79:
51:93:a4:a4:95:bc:86:91:54:4c:b6:fd:fb:a2:95:
67:73:3d:89:fe:fb:93:ab:d9:b6:4c:fa:03:d2:de:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:60:93:3E:1E:98:6A:2A:39:A5:6E:3B:FB:D4:58:CF:E2:25:1F:76
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/J2CTPh6Yaio5pW47-9RYz-IlH3Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.95.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:85:03:82:1a:da:0a:29:07:10:d7:52:cf:ea:90:26:d7:d4:
34:a9:fa:fc:75:21:e8:91:d1:54:36:08:fe:ae:05:4c:b6:c5:
37:03:68:94:9a:24:3d:09:5a:b5:ba:29:a1:86:4e:ee:94:d3:
ba:0b:0a:27:fd:33:50:87:97:8c:2c:35:e8:f4:4f:cd:fd:23:
27:b4:a9:f8:47:6f:cc:0b:d2:70:30:9d:b9:54:51:0a:38:9e:
b9:94:b0:fc:f4:ab:bf:0e:18:5b:a5:f1:d7:d9:6a:52:09:4c:
fe:2c:c9:92:d7:2e:21:c0:26:f5:1d:15:53:0e:88:a2:a0:42:
a7:ec:ff:1b:45:f9:c8:b9:2f:a0:27:4d:c7:fd:4f:7b:24:73:
46:58:3b:e6:12:0a:2c:9a:bf:96:ca:0e:ec:1b:9f:63:30:ba:
9b:ee:5f:c5:69:41:26:5d:71:92:8a:12:69:e3:51:14:68:f5:
96:8e:ab:ab:a2:d3:a5:7e:3b:de:53:69:c1:3d:20:a8:95:6b:
5c:60:1a:1d:48:0e:0a:99:c0:4c:d2:9b:e1:f4:04:4a:88:cc:
70:cf:98:fd:da:33:69:8f:f3:6f:41:41:31:20:e5:3a:7d:29:
89:48:ef:fe:8c:9c:8a:82:20:c7:da:29:46:a5:ac:1d:0e:d3:
28:64:ad:f2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMjExMDEw
MTI4MTBaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI3NjA5MzNFMUU5ODZB
MkEzOUE1NkUzQkZCRDQ1OENGRTIyNTFGNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBz1Cg/iFP8LNnrYTsnJq/4vRxI2k4rVCluaRDPo213ltjC/F4
wYVuiC4PpOawtItmRxOg/GghqYK5pwIZTpCVWowEQx7JO9KVujHYRsVVZgtoeK15
nTMrXUCXKlj8Es8D/9rfyMRY7E+4ZGSBJiYKs4HaVGgw3Ko4tGjjP7DUTcz5SiWD
vB6gG6vrVuoN23yUbY0NESnupkFZ0Y2Tl3uDeTAa0glIVZefxmCxA1l+YE4I9jXp
bS2MFlu35lZbLK+fOWHNVD4OMuudfzLF+XmE1LVMNDQn3LNKSRozIDl2eVGTpKSV
vIaRVEy2/fuilWdzPYn++5Or2bZM+gPS3ggNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJ2CTPh6Yaio5pW47+9RYz+IlH3YwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L0oyQ1RQaDZZYWlvNXBXNDctOVJZei1JbEgzWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALKX9wwDQYJKoZIhvcNAQELBQADggEBAGuFA4Ia2gopBxDXUs/qkCbX1DSp
+vx1IeiR0VQ2CP6uBUy2xTcDaJSaJD0JWrW6KaGGTu6U07oLCif9M1CHl4wsNej0
T839Iye0qfhHb8wL0nAwnblUUQo4nrmUsPz0q78OGFul8dfZalIJTP4syZLXLiHA
JvUdFVMOiKKgQqfs/xtF+ci5L6AnTcf9T3skc0ZYO+YSCiyav5bKDuwbn2Mwupvu
X8VpQSZdcZKKEmnjURRo9ZaOq6ui06V+O95TacE9IKiVa1xgGh1IDgqZwEzSm+H0
BEqIzHDPmP3aM2mP829BQTEg5Tp9KYlI7/6MnIqCIMfaKUalrB0O0yhkrfI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:26 2025 by rpki-client