Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/ZHcIoukYt-Pg5oyX07lq_lwHiBI.roa
File: ZHcIoukYt-Pg5oyX07lq_lwHiBI.roa (raw, json)
Hash identifier: Z6HBYNY3eVt/ZblheV+68NL+y5YX2iKua0tdqTcknYE=
Subject key identifier: 64:77:08:A2:E9:18:B7:E3:E0:E6:8C:97:D3:B9:6A:FE:5C:07:88:12
Certificate issuer: /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial: 0B
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ZHcIoukYt-Pg5oyX07lq_lwHiBI.roa
Signing time: Thu 28 Oct 2021 02:23:02 +0000
ROA not before: Thu 28 Oct 2021 02:23:02 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 131921
IP address blocks: 153.124.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Validity
Not Before: Oct 28 02:23:02 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=647708A2E918B7E3E0E68C97D3B96AFE5C078812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:b8:71:0d:fe:0a:0a:5d:ad:7c:14:be:d1:
57:76:cb:49:eb:65:3f:c9:9f:b2:93:1c:4e:c9:63:
ba:59:6f:80:27:36:34:94:30:93:16:f4:d2:c1:4b:
9c:4d:a7:5f:ac:c8:dd:7b:8f:30:d2:35:9a:80:98:
db:8d:48:d3:b5:c0:a0:5d:f1:18:94:6e:d9:1f:24:
d0:96:97:b9:30:a1:fd:d8:78:2a:6a:f6:17:37:d8:
e0:3b:a4:44:76:ac:6b:68:46:99:7d:c4:0c:86:c7:
1f:42:8b:0a:be:4d:13:47:be:06:37:d6:34:32:cf:
93:d4:37:b9:26:cf:95:6c:ca:77:88:6f:58:d3:4c:
b8:a6:b4:eb:b6:c8:a1:9d:c8:1c:cc:85:4c:7e:11:
92:ae:69:d8:e4:cc:ee:e2:eb:66:bc:8e:89:53:6c:
42:f5:60:56:47:c2:48:c3:0b:43:8a:2c:ec:cc:92:
fe:d5:69:07:6f:54:a4:f2:f4:04:10:5f:21:78:eb:
1c:97:24:0c:3e:a0:67:95:84:01:0c:35:23:bb:41:
55:78:5a:ba:3d:5a:92:d8:85:6b:8b:1a:cf:76:f5:
70:80:81:cb:8a:5f:80:c1:1f:0c:30:1a:03:e6:7b:
f2:77:30:72:f1:15:38:4c:73:84:98:98:8a:9c:be:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:08:A2:E9:18:B7:E3:E0:E6:8C:97:D3:B9:6A:FE:5C:07:88:12
X509v3 Authority Key Identifier:
keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ZHcIoukYt-Pg5oyX07lq_lwHiBI.roa
sbgp-ipAddrBlock: critical
IPv4:
153.124.128.0/20
Signature Algorithm: sha256WithRSAEncryption
05:40:c9:eb:b2:77:b4:36:9d:82:c5:f6:b3:9d:05:b4:6d:7b:
b7:ab:90:84:24:34:ba:b1:71:b6:14:2f:fd:8a:72:e5:0a:ce:
46:d3:bc:f8:e5:c4:e0:eb:35:e4:6e:d0:75:88:ac:47:63:1e:
c1:8e:4d:33:2e:c5:c3:35:87:60:10:98:eb:ac:3c:53:be:7a:
80:1e:2c:a3:2b:f2:a4:6c:3c:a7:32:40:2f:c7:56:a8:1f:fb:
a1:c9:be:b8:c3:1a:1a:ba:f6:98:e4:6d:9c:fd:18:70:e4:f2:
c0:c8:2e:26:06:6f:58:0e:c4:a0:76:35:9b:23:64:7c:be:e6:
f7:4b:30:8a:8f:b5:47:e2:21:2a:a9:6c:41:9f:71:a9:51:9c:
26:3f:3a:37:47:73:7c:31:e8:fc:e7:ca:a5:a6:48:f3:58:e4:
9c:24:4a:d3:da:9e:2b:b9:41:8d:f7:b5:ca:e2:7d:39:03:63:
60:20:cd:e7:85:fa:6b:10:04:99:b9:19:d3:10:ad:45:4c:b1:
b2:88:88:37:a7:ba:9a:bc:2c:8b:f2:97:e4:47:25:95:57:8c:
32:f0:cc:44:b6:2d:1b:e2:6c:bc:36:77:a9:12:3a:42:77:6f:
f0:ee:fb:63:3c:91:5d:43:8a:98:c5:26:88:e7:81:c9:ec:0f:
6a:21:b3:69
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NkQ5
MkNFMjRDRjNGQ0M3NTMyODVDRUJBRjNGRUMxRDcyNTgxQTgxMB4XDTIxMTAyODAy
MjMwMloXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNjQ3NzA4QTJFOTE4QjdF
M0UwRTY4Qzk3RDNCOTZBRkU1QzA3ODgxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMLOuHEN/goKXa18FL7RV3bLSetlP8mfspMcTsljullvgCc2NJQw
kxb00sFLnE2nX6zI3XuPMNI1moCY241I07XAoF3xGJRu2R8k0JaXuTCh/dh4Kmr2
FzfY4DukRHasa2hGmX3EDIbHH0KLCr5NE0e+BjfWNDLPk9Q3uSbPlWzKd4hvWNNM
uKa067bIoZ3IHMyFTH4Rkq5p2OTM7uLrZryOiVNsQvVgVkfCSMMLQ4os7MyS/tVp
B29UpPL0BBBfIXjrHJckDD6gZ5WEAQw1I7tBVXhauj1aktiFa4saz3b1cICBy4pf
gMEfDDAaA+Z78ncwcvEVOExzhJiYipy+Y1ECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRkdwii6Ri34+DmjJfTuWr+XAeIEjAfBgNVHSMEGDAWgBSW2SziTPP8x1MoXOuv
P+wdclgagTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTU0L2x0a3M0a3p6X01kVEtGenJyel9zSFhKWUdvRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2x0a3M0a3p6X01kVEtGenJyel9zSFhK
WUdvRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81NTQvWkhjSW91a1l0LVBnNW95WDA3bHFfbHdIaUJJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJl8gDANBgkqhkiG9w0BAQsFAAOCAQEA
BUDJ67J3tDadgsX2s50FtG17t6uQhCQ0urFxthQv/Ypy5QrORtO8+OXE4Os15G7Q
dYisR2MewY5NMy7FwzWHYBCY66w8U756gB4soyvypGw8pzJAL8dWqB/7ocm+uMMa
Grr2mORtnP0YcOTywMguJgZvWA7EoHY1myNkfL7m90swio+1R+IhKqlsQZ9xqVGc
Jj86N0dzfDHo/OfKpaZI81jknCRK09qeK7lBjfe1yuJ9OQNjYCDN54X6axAEmbkZ
0xCtRUyxsoiIN6e6mrwsi/KX5EcllVeMMvDMRLYtG+JsvDZ3qRI6Qndv8O77YzyR
XUOKmMUmiOeByewPaiGzaQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:10 2025 by rpki-client