Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/QzFJG32E4HMidOvnudiNyCW2AWE.roa
File: QzFJG32E4HMidOvnudiNyCW2AWE.roa (raw, json)
Hash identifier: SotttS7duCO0EseIVkCeOQhbZ1N1oez8Hco7G5FyBSs=
Subject key identifier: 43:31:49:1B:7D:84:E0:73:22:74:EB:E7:B9:D8:8D:C8:25:B6:01:61
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: D0
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QzFJG32E4HMidOvnudiNyCW2AWE.roa
Signing time: Tue 01 Aug 2023 01:28:28 +0000
ROA not before: Tue 01 Aug 2023 01:28:28 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 10021
IP address blocks: 202.7.96.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Aug 1 01:28:28 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=4331491B7D84E0732274EBE7B9D88DC825B60161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:50:35:14:18:09:0f:27:1b:71:9b:f6:10:6b:
de:85:4f:ab:f6:02:c7:02:79:cc:35:c0:21:3c:bb:
45:df:52:8d:63:46:17:57:49:25:b3:0f:6a:ef:50:
48:98:0e:2a:07:8e:12:ee:aa:2a:c1:3d:75:20:f8:
11:3b:89:bf:ed:25:65:be:66:9e:d6:e2:ea:1a:68:
82:5a:87:e1:10:2f:de:17:b2:25:6c:35:1b:f4:1d:
1a:b9:49:d3:55:ef:73:b0:99:69:c6:6c:44:34:3c:
6e:d3:7b:e3:fb:1b:a7:fe:8b:21:64:a5:6a:d1:66:
80:4e:9b:66:9d:ab:04:36:76:43:f7:d6:65:78:d9:
59:d2:fb:b9:e0:6e:c2:33:b8:3b:00:54:de:eb:38:
9d:d6:f8:58:3e:db:35:f3:8d:c4:0b:97:44:35:f3:
cc:5b:0d:be:21:ad:26:e8:03:3e:2b:d9:c6:e7:3b:
9b:21:9b:d0:c8:4c:29:02:a7:e3:61:71:b6:14:69:
83:1a:3f:da:7f:61:f8:e0:53:7d:f7:29:de:96:55:
a1:a0:12:90:77:73:ef:01:0d:89:7a:3a:f4:13:79:
32:d7:85:d8:42:70:b2:5a:a7:72:c1:6a:86:58:b0:
7d:1a:9c:d4:87:c8:98:88:62:99:72:72:a0:c3:4c:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:31:49:1B:7D:84:E0:73:22:74:EB:E7:B9:D8:8D:C8:25:B6:01:61
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QzFJG32E4HMidOvnudiNyCW2AWE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.7.96.0/21
Signature Algorithm: sha256WithRSAEncryption
38:24:c9:16:5e:f6:2c:1d:79:bf:f3:c1:bf:12:ec:9c:07:0c:
10:f7:1b:52:40:29:cf:b0:2f:70:be:b7:01:d9:6b:35:10:b9:
d5:a2:93:fb:8f:b2:07:ee:d1:45:2a:9f:cc:2c:0b:22:c3:b3:
cb:6a:6b:48:ea:19:b6:7b:62:6b:d6:4a:d4:28:0f:e4:56:68:
c9:39:3c:e0:ba:74:27:16:e7:02:a8:13:33:01:28:c2:20:32:
b2:01:c9:b1:86:4f:c5:a0:b7:c4:b3:fb:27:90:64:cb:21:5c:
56:77:e8:2b:91:16:7f:cc:d0:d6:8f:9a:ef:e9:f0:9e:e3:9e:
39:b8:6b:76:34:b2:03:a0:a7:cf:3e:6c:11:23:e2:da:65:71:
02:e6:59:4b:f2:24:cb:b1:a8:5e:b7:5f:9c:96:5f:84:cf:7d:
43:98:8c:70:b5:45:b9:d8:16:a5:c5:bc:94:67:33:61:68:c4:
5f:4f:63:78:b4:31:59:72:9e:3f:30:25:fa:e1:ce:dd:33:91:
85:76:58:78:11:5c:c4:67:26:e6:13:e4:89:81:ab:72:56:4f:
51:e2:c9:56:80:6b:cf:f3:1f:55:eb:1b:ca:fa:a5:89:31:86:
1a:ae:3a:b2:70:4e:35:cf:31:d5:ce:f9:51:23:8e:c1:de:6e:
99:69:ea:4c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzA4MDEw
MTI4MjhaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQzMzE0OTFCN0Q4NEUw
NzMyMjc0RUJFN0I5RDg4REM4MjVCNjAxNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoUDUUGAkPJxtxm/YQa96FT6v2AscCecw1wCE8u0XfUo1jRhdX
SSWzD2rvUEiYDioHjhLuqirBPXUg+BE7ib/tJWW+Zp7W4uoaaIJah+EQL94XsiVs
NRv0HRq5SdNV73OwmWnGbEQ0PG7Te+P7G6f+iyFkpWrRZoBOm2adqwQ2dkP31mV4
2VnS+7ngbsIzuDsAVN7rOJ3W+Fg+2zXzjcQLl0Q188xbDb4hrSboAz4r2cbnO5sh
m9DITCkCp+NhcbYUaYMaP9p/YfjgU333Kd6WVaGgEpB3c+8BDYl6OvQTeTLXhdhC
cLJap3LBaoZYsH0anNSHyJiIYplycqDDTDilAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUQzFJG32E4HMidOvnudiNyCW2AWEwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L1F6RkpHMzJFNEhNaWRPdm51ZGlOeUNXMkFXRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPKB2AwDQYJKoZIhvcNAQELBQADggEBADgkyRZe9iwdeb/zwb8S7JwHDBD3
G1JAKc+wL3C+twHZazUQudWik/uPsgfu0UUqn8wsCyLDs8tqa0jqGbZ7YmvWStQo
D+RWaMk5POC6dCcW5wKoEzMBKMIgMrIBybGGT8Wgt8Sz+yeQZMshXFZ36CuRFn/M
0NaPmu/p8J7jnjm4a3Y0sgOgp88+bBEj4tplcQLmWUvyJMuxqF63X5yWX4TPfUOY
jHC1RbnYFqXFvJRnM2FoxF9PY3i0MVlynj8wJfrhzt0zkYV2WHgRXMRnJuYT5ImB
q3JWT1HiyVaAa8/zH1XrG8r6pYkxhhquOrJwTjXPMdXO+VEjjsHebplp6kw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:59 2025 by rpki-client