Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/1PjqTGPc6GkD7Oypz9v5mACDeMM.roa
File: 1PjqTGPc6GkD7Oypz9v5mACDeMM.roa (raw, json)
Hash identifier: 6auPYHp4soCt3Y9HhTKg+Kqsx9dmv6mSbj2X485JqOw=
Subject key identifier: D4:F8:EA:4C:63:DC:E8:69:03:EC:EC:A9:CF:DB:F9:98:00:83:78:C3
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 3220
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/1PjqTGPc6GkD7Oypz9v5mACDeMM.roa
Signing time: Thu 13 Apr 2023 09:53:08 +0000
ROA not before: Thu 13 Apr 2023 09:53:08 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 7671
IP address blocks: 222.231.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12832 (0x3220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: Apr 13 09:53:08 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=D4F8EA4C63DCE86903ECECA9CFDBF998008378C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:02:2f:7a:01:af:fa:56:70:d7:3f:71:eb:
a4:88:a0:12:08:57:26:5e:6d:43:85:04:5f:91:6a:
bf:9d:f8:87:30:1e:ba:86:27:be:42:f3:27:ff:74:
a0:db:a6:8a:91:e9:4e:d5:2f:cc:1c:67:94:ba:28:
dd:65:ee:72:be:01:5f:3d:89:3d:7e:ca:17:f2:29:
08:c8:c8:45:b3:b1:26:b2:ec:28:0b:26:a8:b6:38:
ef:58:c9:cc:29:4e:ab:5f:98:8e:eb:f4:95:e2:d2:
97:9b:b0:24:14:c3:c2:c7:45:ad:73:56:0f:14:0a:
d9:df:61:51:39:2e:8c:31:6a:84:a3:ea:d1:85:aa:
7e:00:8a:83:ef:fb:90:3a:f8:3b:13:c9:cf:15:6c:
c9:4f:45:7c:8a:13:0b:7a:2b:51:73:4a:91:7a:d4:
b2:aa:e4:09:42:0c:9b:37:97:39:58:e9:a2:e5:16:
e7:f1:99:ee:c8:45:85:91:9a:12:be:1e:24:74:6d:
b8:32:73:c6:d4:86:88:f5:bf:0c:d9:cc:64:05:02:
9f:03:f4:be:19:15:33:8a:bd:b5:e2:db:e8:3e:2e:
24:0a:18:54:47:59:9d:15:f5:1c:92:4d:12:27:87:
fa:05:f8:82:c7:d5:cd:3a:35:1f:ed:a1:27:e2:0c:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:EA:4C:63:DC:E8:69:03:EC:EC:A9:CF:DB:F9:98:00:83:78:C3
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/1PjqTGPc6GkD7Oypz9v5mACDeMM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
222.231.128.0/17
Signature Algorithm: sha256WithRSAEncryption
51:aa:5c:01:b0:1c:fb:a2:0b:f5:d8:5f:e0:57:6e:5f:7b:03:
cc:96:51:a5:f1:a3:96:1a:09:5b:84:13:ff:b7:56:86:a3:09:
f9:16:b7:e7:ff:e0:23:b2:9a:28:50:35:ca:0c:61:a1:f9:26:
4a:81:c5:14:19:3e:78:02:21:59:4d:44:a9:71:f2:d3:31:fe:
6d:cf:6a:5d:4a:fa:9e:2f:89:8d:63:99:ae:a0:05:ef:51:cc:
48:70:97:44:91:98:0e:4d:cf:6f:24:f2:1b:18:b8:92:de:92:
17:91:7a:b3:8c:42:0b:87:3d:58:f0:69:2f:b7:af:06:dc:7e:
b4:87:84:3c:c0:52:1e:2a:d6:e6:73:7e:d8:25:0a:82:cd:71:
39:d2:47:0a:c7:37:e7:62:07:6d:bd:7a:71:6e:14:67:39:93:
36:49:95:7d:22:b6:b4:29:87:53:8f:55:c0:46:9a:25:bf:bb:
10:65:97:42:e5:82:f3:63:52:ea:a1:01:4d:3c:c1:d7:d2:e1:
29:cb:d3:57:76:61:b3:d0:91:73:d2:81:4f:a2:99:ad:79:c5:
d1:b6:86:66:d2:b4:30:b9:ae:c8:36:e4:21:e4:95:24:0c:bc:
a3:2d:57:75:b2:1a:1e:dc:51:d5:3c:44:27:b3:c9:3b:69:81:
9a:30:56:c7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICMiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy
MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yMzA0MTMw
OTUzMDhaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0RjhFQTRDNjNEQ0U4
NjkwM0VDRUNBOUNGREJGOTk4MDA4Mzc4QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3bAIvegGv+lZw1z9x66SIoBIIVyZebUOFBF+Rar+d+IcwHrqG
J75C8yf/dKDbpoqR6U7VL8wcZ5S6KN1l7nK+AV89iT1+yhfyKQjIyEWzsSay7CgL
Jqi2OO9YycwpTqtfmI7r9JXi0pebsCQUw8LHRa1zVg8UCtnfYVE5LowxaoSj6tGF
qn4AioPv+5A6+DsTyc8VbMlPRXyKEwt6K1FzSpF61LKq5AlCDJs3lzlY6aLlFufx
me7IRYWRmhK+HiR0bbgyc8bUhoj1vwzZzGQFAp8D9L4ZFTOKvbXi2+g+LiQKGFRH
WZ0V9RySTRInh/oF+ILH1c06NR/toSfiDIpxAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU1PjqTGPc6GkD7Oypz9v5mACDeMMwHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA
ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi
LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjk5LzFQanFUR1BjNkdrRDdPeXB6OXY1bUFDRGVNTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfe54AwDQYJKoZIhvcNAQELBQADggEBAFGqXAGwHPuiC/XYX+BXbl97A8yW
UaXxo5YaCVuEE/+3VoajCfkWt+f/4COymihQNcoMYaH5JkqBxRQZPngCIVlNRKlx
8tMx/m3Pal1K+p4viY1jma6gBe9RzEhwl0SRmA5Nz28k8hsYuJLekheRerOMQguH
PVjwaS+3rwbcfrSHhDzAUh4q1uZzftglCoLNcTnSRwrHN+diB229enFuFGc5kzZJ
lX0itrQph1OPVcBGmiW/uxBll0LlgvNjUuqhAU08wdfS4SnL01d2YbPQkXPSgU+i
ma15xdG2hmbStDC5rsg25CHklSQMvKMtV3WyGh7cUdU8RCezyTtpgZowVsc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:06 2025 by rpki-client