Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/LrzMEPcUNHtKQGYGNriI-yXu60I.roa
File: LrzMEPcUNHtKQGYGNriI-yXu60I.roa (raw, json)
Hash identifier: X8Uv6E0qmYmxHy2fj1OkIW5JCUHoU1x0s2Ru3bbsyXM=
Subject key identifier: 2E:BC:CC:10:F7:14:34:7B:4A:40:66:06:36:B8:88:FB:25:EE:EB:42
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 026E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LrzMEPcUNHtKQGYGNriI-yXu60I.roa
Signing time: Sat 31 Aug 2024 01:36:50 +0000
ROA not before: Sat 31 Aug 2024 01:36:50 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 4721
IP address blocks: 110.4.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Aug 31 01:36:50 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=2EBCCC10F714347B4A40660636B888FB25EEEB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:23:ef:3a:8e:ae:a6:5c:89:65:8f:18:df:
67:7b:c7:d4:bb:9c:a2:63:83:b9:74:d0:54:6a:f5:
7d:1f:98:cd:37:ae:f9:72:b7:14:1c:3d:83:ff:15:
b1:d0:ba:38:4e:25:ca:66:d0:ac:2f:f2:8b:33:fd:
aa:02:c2:b4:fd:38:c7:21:23:f0:fd:95:f3:98:8f:
2c:42:c2:f6:8c:dc:38:7d:c9:a8:5f:98:69:a8:94:
b7:7e:a6:b2:f0:24:b6:6c:78:a2:1c:32:b8:d7:04:
7c:19:53:04:b6:40:74:45:de:04:d3:1e:be:d3:81:
d4:fb:7c:df:87:cd:4e:9c:40:09:c3:f0:87:88:15:
a6:e1:a8:74:60:f6:f9:44:e3:a0:ab:3a:21:fc:dd:
ba:d1:1c:30:70:cd:f2:a6:15:66:13:90:e9:dd:ef:
bd:15:43:c9:71:79:ab:bf:22:b8:96:ee:ff:61:4b:
eb:fa:b8:7a:62:57:cb:d7:2c:98:40:82:74:41:91:
b4:3e:ae:ec:d8:74:1c:b6:34:0d:65:07:9f:0c:74:
84:46:3b:5c:60:8d:fc:39:25:af:9e:cf:97:7a:d9:
3d:94:3a:6c:12:ce:1b:95:f3:24:bb:e4:ca:a8:89:
bc:85:e7:6f:37:32:da:59:98:d2:cf:1c:69:0d:85:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BC:CC:10:F7:14:34:7B:4A:40:66:06:36:B8:88:FB:25:EE:EB:42
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LrzMEPcUNHtKQGYGNriI-yXu60I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.4.48.0/20
Signature Algorithm: sha256WithRSAEncryption
42:63:6c:a7:0d:6d:ec:6e:12:69:08:e9:8c:75:00:46:71:0d:
f5:62:12:cb:15:af:b0:7d:1e:39:30:13:e1:4b:5c:d5:ef:79:
91:0d:e4:d0:f1:48:bc:24:1e:6f:80:3a:fb:b3:90:37:cd:a6:
02:2d:d1:4d:be:08:5e:78:56:6b:69:28:d0:df:b8:a9:8f:08:
15:65:e3:f7:72:b1:b2:cb:59:87:22:e2:67:27:15:bf:68:77:
2d:0e:78:b4:96:c8:2d:bc:28:d3:de:60:e6:5d:b5:bb:5b:b6:
0e:2a:3f:75:c3:a2:fe:0c:da:c3:1d:e4:04:5c:1f:28:09:e2:
d1:56:c6:96:01:3e:cf:a4:2c:ef:b3:6d:0f:c2:76:8d:b0:18:
c0:0f:ff:60:47:06:06:b5:ef:75:4a:8f:d9:74:3f:9e:fd:da:
41:fe:de:74:85:ec:ff:59:8c:5e:ec:d8:86:61:4c:03:fe:6d:
74:c2:a1:fc:66:a4:74:4b:4c:80:54:42:62:15:40:be:f4:b7:
d1:06:1d:2c:bc:df:a6:55:51:b1:8c:6d:7c:35:3e:5a:28:cb:
48:5b:13:a4:51:e1:1e:90:f0:e9:89:a3:08:fa:39:8d:9e:28:
08:4f:7a:49:48:1b:89:aa:79:74:28:28:9d:81:8a:5e:51:f9:
5d:c0:bf:88
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTM2NTBaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJFQkNDQzEwRjcxNDM0
N0I0QTQwNjYwNjM2Qjg4OEZCMjVFRUVCNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNDyPvOo6uplyJZY8Y32d7x9S7nKJjg7l00FRq9X0fmM03rvly
txQcPYP/FbHQujhOJcpm0Kwv8osz/aoCwrT9OMchI/D9lfOYjyxCwvaM3Dh9yahf
mGmolLd+prLwJLZseKIcMrjXBHwZUwS2QHRF3gTTHr7TgdT7fN+HzU6cQAnD8IeI
FabhqHRg9vlE46CrOiH83brRHDBwzfKmFWYTkOnd770VQ8lxeau/IriW7v9hS+v6
uHpiV8vXLJhAgnRBkbQ+ruzYdBy2NA1lB58MdIRGO1xgjfw5Ja+ez5d62T2UOmwS
zhuV8yS75MqoibyF5283MtpZmNLPHGkNhcFpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULrzMEPcUNHtKQGYGNriI+yXu60IwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0xyek1FUGNVTkh0S1FHWUdOcmlJLXlYdTYwSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuBDAwDQYJKoZIhvcNAQELBQADggEBAEJjbKcNbexuEmkI6Yx1AEZxDfVi
EssVr7B9HjkwE+FLXNXveZEN5NDxSLwkHm+AOvuzkDfNpgIt0U2+CF54VmtpKNDf
uKmPCBVl4/dysbLLWYci4mcnFb9ody0OeLSWyC28KNPeYOZdtbtbtg4qP3XDov4M
2sMd5ARcHygJ4tFWxpYBPs+kLO+zbQ/Cdo2wGMAP/2BHBga173VKj9l0P5792kH+
3nSF7P9ZjF7s2IZhTAP+bXTCofxmpHRLTIBUQmIVQL70t9EGHSy836ZVUbGMbXw1
Plooy0hbE6RR4R6Q8OmJowj6OY2eKAhPeklIG4mqeXQoKJ2Bil5R+V3Av4g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:41 2025 by rpki-client