Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/kzntd0wbMKe3PCZRwXCJC5JeZ-w.roa
File: kzntd0wbMKe3PCZRwXCJC5JeZ-w.roa (raw, json)
Hash identifier: XjffYnrIxMqGJ7jQHurvQb79U9YCPoh7pUya8CIK01o=
Subject key identifier: 93:39:ED:77:4C:1B:30:A7:B7:3C:26:51:C1:70:89:0B:92:5E:67:EC
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 62
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/kzntd0wbMKe3PCZRwXCJC5JeZ-w.roa
Signing time: Wed 01 Dec 2021 01:28:54 +0000
ROA not before: Wed 01 Dec 2021 01:28:54 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 8220
IP address blocks: 27.110.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 01:28:54 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=9339ED774C1B30A7B73C2651C170890B925E67EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:93:4c:cb:e1:8e:6f:30:4c:05:78:48:0d:
d0:d8:fe:11:18:08:72:74:c9:fd:90:b3:50:3e:71:
f5:e9:9c:3b:cd:5e:90:18:81:26:88:44:bb:73:c2:
cd:a7:93:5e:26:36:9b:42:d5:17:9c:67:ed:3a:30:
d8:c3:a8:81:5f:6c:02:a7:f1:c2:79:7f:15:c4:1d:
22:af:d2:38:4f:d9:7c:bb:10:cc:76:af:84:35:25:
e9:2c:2a:fb:b4:67:a8:28:03:4c:10:69:fc:36:58:
32:28:9f:c4:f3:b4:2c:2d:d0:0e:07:49:73:1a:bc:
1c:c5:b0:e2:53:3e:8b:ca:88:a4:2c:be:2b:c1:4e:
42:2a:62:8a:6b:6a:70:a1:e7:06:4d:e9:e3:f1:4b:
62:17:9d:f5:e5:ab:a7:08:62:7e:27:ef:48:44:f6:
d9:2c:b5:a1:c3:eb:41:5d:f0:ff:f8:bf:9b:0e:cf:
b6:d8:1c:5e:3c:cc:f5:86:55:8d:ce:81:59:a9:6d:
cc:93:09:36:a7:2b:eb:c3:6c:33:d2:13:f2:39:bd:
c0:bf:9f:05:fe:40:1f:40:c4:53:b9:42:38:a1:91:
06:70:8c:04:a0:95:28:69:dc:f4:04:81:64:96:4f:
c5:57:b4:a9:d1:87:4e:c5:4c:25:4c:83:3f:9a:10:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:39:ED:77:4C:1B:30:A7:B7:3C:26:51:C1:70:89:0B:92:5E:67:EC
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/kzntd0wbMKe3PCZRwXCJC5JeZ-w.roa
sbgp-ipAddrBlock: critical
IPv4:
27.110.32.0/19
Signature Algorithm: sha256WithRSAEncryption
81:ea:38:b9:24:fa:fc:74:40:d7:4c:20:e8:4e:2a:2c:ef:1e:
5d:29:8e:b8:c7:78:a7:4f:8a:3d:ab:8f:9f:71:17:90:d5:8d:
d9:bd:bc:e5:62:79:39:f1:fb:56:df:00:c5:20:d1:ec:33:3d:
b7:32:a5:57:60:b0:55:a6:75:0b:05:f3:ec:84:e6:ab:bd:51:
f0:00:be:df:a0:a0:91:d7:1b:cb:b2:78:ac:26:8d:14:82:c6:
0c:c4:2b:2c:f7:67:23:56:07:ee:65:bb:8a:45:3b:e2:a7:70:
6d:5d:a3:3b:8d:12:13:48:08:66:77:4b:4e:76:66:69:c7:ea:
af:27:74:87:66:ee:e4:b7:e1:ea:ca:1a:a9:ef:99:2a:45:fc:
ec:63:c5:9a:41:33:f6:14:37:cf:b3:bf:78:89:97:bf:36:e9:
7e:5c:d3:c6:30:79:63:b5:8c:29:72:a0:83:05:8b:8a:c6:51:
f3:f5:f9:eb:1f:4e:0e:1e:53:81:6a:6c:65:3d:3e:4f:4f:68:
d0:a6:a9:0c:e7:13:07:3f:01:94:c9:da:13:15:45:cf:a6:18:
7e:d9:20:53:ad:31:7f:c4:56:3c:00:76:1a:d2:0c:40:dc:f5:
a9:aa:70:9c:09:f1:6e:5c:42:5b:3e:75:84:33:3a:bc:85:3a:
0d:e7:61:32
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MDYx
MERBNjhFOTNFRDUzOEE0OEE0NkM1MjE0MDI0RUQ1NEQwN0Y2MB4XDTIxMTIwMTAx
Mjg1NFoXDTIyMTExNTAxMzAwMVowMzExMC8GA1UEAxMoOTMzOUVENzc0QzFCMzBB
N0I3M0MyNjUxQzE3MDg5MEI5MjVFNjdFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALigk0zL4Y5vMEwFeEgN0Nj+ERgIcnTJ/ZCzUD5x9emcO81ekBiB
JohEu3PCzaeTXiY2m0LVF5xn7Tow2MOogV9sAqfxwnl/FcQdIq/SOE/ZfLsQzHav
hDUl6Swq+7RnqCgDTBBp/DZYMiifxPO0LC3QDgdJcxq8HMWw4lM+i8qIpCy+K8FO
QipiimtqcKHnBk3p4/FLYhed9eWrpwhififvSET22Sy1ocPrQV3w//i/mw7Pttgc
XjzM9YZVjc6BWaltzJMJNqcr68NsM9IT8jm9wL+fBf5AH0DEU7lCOKGRBnCMBKCV
KGnc9ASBZJZPxVe0qdGHTsVMJUyDP5oQl2UCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSTOe13TBswp7c8JlHBcIkLkl5n7DAfBgNVHSMEGDAWgBRAYQ2mjpPtU4pIpGxS
FAJO1U0H9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDY5L1FHRU5wbzZUN1ZPS1NLUnNVaFFDVHRWTkJfWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FHRU5wbzZUN1ZPS1NLUnNVaFFDVHRW
TkJfWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80Njkva3pudGQwd2JNS2UzUENaUndYQ0pDNUplWi13LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBRtuIDANBgkqhkiG9w0BAQsFAAOCAQEA
geo4uST6/HRA10wg6E4qLO8eXSmOuMd4p0+KPauPn3EXkNWN2b285WJ5OfH7Vt8A
xSDR7DM9tzKlV2CwVaZ1CwXz7ITmq71R8AC+36Cgkdcby7J4rCaNFILGDMQrLPdn
I1YH7mW7ikU74qdwbV2jO40SE0gIZndLTnZmacfqryd0h2bu5Lfh6soaqe+ZKkX8
7GPFmkEz9hQ3z7O/eImXvzbpflzTxjB5Y7WMKXKggwWLisZR8/X56x9ODh5TgWps
ZT0+T09o0KapDOcTBz8BlMnaExVFz6YYftkgU60xf8RWPAB2GtIMQNz1qapwnAnx
blxCWz51hDM6vIU6DedhMg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:40 2025 by rpki-client