Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2acTbhxKe9vUC3pQwI1iDWXBkeg.roa
File: 2acTbhxKe9vUC3pQwI1iDWXBkeg.roa (raw, json)
Hash identifier: tzcyI66dVl55SFw1daVWtsdL+L4E7M0QgN4HxQAYq30=
Subject key identifier: D9:A7:13:6E:1C:4A:7B:DB:D4:0B:7A:50:C0:8D:62:0D:65:C1:91:E8
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 021D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2acTbhxKe9vUC3pQwI1iDWXBkeg.roa
Signing time: Wed 31 Jul 2024 01:29:15 +0000
ROA not before: Wed 31 Jul 2024 01:29:15 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 9824
IP address blocks: 219.100.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Jul 31 01:29:15 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=D9A7136E1C4A7BDBD40B7A50C08D620D65C191E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:cc:83:e2:fb:d3:37:e6:96:f2:a8:f3:9f:
70:90:d7:3c:7d:01:68:7b:2b:20:3f:dc:d7:e6:9b:
2a:d0:80:08:8b:ce:15:d2:b3:89:b5:17:2f:24:97:
b8:6f:9c:12:47:fa:ed:c8:13:7d:29:9a:42:e7:91:
2b:1f:86:ef:47:92:7d:21:a8:68:23:d5:3d:18:1c:
28:af:ec:cb:01:6b:73:0f:00:72:09:41:05:0f:59:
47:b7:68:b0:f5:a6:c2:dc:47:40:b0:a2:96:45:62:
b3:52:57:8e:c2:61:37:5f:cb:ec:5f:b6:bf:0f:6a:
5f:89:45:be:bc:d8:f5:36:81:f7:1c:6d:26:b9:dc:
fe:4b:81:a8:82:2d:58:3e:78:17:33:a1:da:25:11:
a4:b7:74:bb:cb:8c:93:df:12:17:0a:dc:ad:cc:79:
99:80:09:e0:0d:a9:59:37:d9:52:51:5e:de:10:f4:
0b:09:e9:20:73:48:fe:39:94:d4:21:f8:5f:c1:3f:
91:89:a3:e0:46:56:14:45:d6:20:fd:c1:dc:92:37:
f9:cc:6e:d3:ff:d3:ee:ea:45:18:ae:d9:94:f0:ef:
b8:fb:b5:b2:5f:09:fe:f8:eb:be:f4:ad:c9:81:5f:
45:be:27:f2:ab:b3:3e:17:83:b2:c7:b5:fd:e7:77:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:13:6E:1C:4A:7B:DB:D4:0B:7A:50:C0:8D:62:0D:65:C1:91:E8
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2acTbhxKe9vUC3pQwI1iDWXBkeg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.24.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:1a:5a:d2:70:4c:d1:dd:93:c2:8f:d5:ed:f5:66:68:73:63:
84:4b:ca:b6:bb:3c:6f:33:28:4c:42:a8:7d:88:b1:67:17:09:
49:75:8e:90:b8:be:be:69:52:4a:f9:46:ea:ec:8f:b0:15:74:
fe:b4:d3:df:be:91:8c:54:2a:32:f5:e3:64:92:78:00:74:05:
7b:a9:62:fa:cf:d8:7c:f4:3c:e3:e1:a3:e8:38:0d:81:8e:a1:
73:0b:62:54:71:0c:b8:d9:93:89:fe:bc:e8:87:d1:bb:b4:cb:
30:c8:a4:3d:e9:1c:57:81:4f:c5:be:15:53:c7:60:cc:3e:c9:
6f:e3:52:0d:b3:e8:58:54:9c:12:81:0b:fb:e9:6e:f0:65:37:
e0:a0:f6:79:3f:46:0f:83:c3:2a:27:16:0e:e0:b4:3b:3c:8f:
de:8e:54:a5:d4:5f:df:3f:b5:6f:02:5f:5d:24:a8:dd:9d:bc:
be:b0:e7:fe:a3:88:3f:d8:bd:9f:21:67:8e:8e:14:46:ba:77:
90:c7:34:51:52:a4:4f:c4:6f:75:b9:43:2b:5e:92:39:ea:7f:
64:46:19:c2:c2:0d:28:a5:0d:b7:f6:74:ba:47:84:fd:9a:39:
8a:9c:a8:a7:cd:84:3b:44:2a:3e:60:72:5c:ca:7a:ff:8a:30:
01:1a:e4:20
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA3MzEw
MTI5MTVaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5QTcxMzZFMUM0QTdC
REJENDBCN0E1MEMwOEQ2MjBENjVDMTkxRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuLMyD4vvTN+aW8qjzn3CQ1zx9AWh7KyA/3NfmmyrQgAiLzhXS
s4m1Fy8kl7hvnBJH+u3IE30pmkLnkSsfhu9Hkn0hqGgj1T0YHCiv7MsBa3MPAHIJ
QQUPWUe3aLD1psLcR0CwopZFYrNSV47CYTdfy+xftr8Pal+JRb682PU2gfccbSa5
3P5LgaiCLVg+eBczodolEaS3dLvLjJPfEhcK3K3MeZmACeANqVk32VJRXt4Q9AsJ
6SBzSP45lNQh+F/BP5GJo+BGVhRF1iD9wdySN/nMbtP/0+7qRRiu2ZTw77j7tbJf
Cf746770rcmBX0W+J/Krsz4Xg7LHtf3nd/KjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU2acTbhxKe9vUC3pQwI1iDWXBkegwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzJhY1RiaHhLZTl2VUMzcFF3STFpRFdYQmtlZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALbZBgwDQYJKoZIhvcNAQELBQADggEBAEoaWtJwTNHdk8KP1e31ZmhzY4RL
yra7PG8zKExCqH2IsWcXCUl1jpC4vr5pUkr5Rursj7AVdP6009++kYxUKjL142SS
eAB0BXupYvrP2Hz0POPho+g4DYGOoXMLYlRxDLjZk4n+vOiH0bu0yzDIpD3pHFeB
T8W+FVPHYMw+yW/jUg2z6FhUnBKBC/vpbvBlN+Cg9nk/Rg+DwyonFg7gtDs8j96O
VKXUX98/tW8CX10kqN2dvL6w5/6jiD/YvZ8hZ46OFEa6d5DHNFFSpE/Eb3W5Qyte
kjnqf2RGGcLCDSilDbf2dLpHhP2aOYqcqKfNhDtEKj5gclzKev+KMAEa5CA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:10 2025 by rpki-client