Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/B9k0DU7dnNKDtD7hYwxrSZCFepg.roa
File: B9k0DU7dnNKDtD7hYwxrSZCFepg.roa (raw, json)
Hash identifier: QXCoCm3rwlE2iwj4OpudPzKnCs34glB8IfojuiYsjGc=
Subject key identifier: 07:D9:34:0D:4E:DD:9C:D2:83:B4:3E:E1:63:0C:6B:49:90:85:7A:98
Certificate issuer: /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial: 44
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/B9k0DU7dnNKDtD7hYwxrSZCFepg.roa
Signing time: Tue 31 Dec 2024 01:28:27 +0000
ROA not before: Tue 31 Dec 2024 01:28:27 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 9354
IP address blocks: 103.131.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Validity
Not Before: Dec 31 01:28:27 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=07D9340D4EDD9CD283B43EE1630C6B4990857A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:e7:d2:d5:df:cc:e7:66:df:9f:43:a6:1b:
dc:d0:bd:69:41:36:d5:a8:b8:66:40:d8:32:25:df:
95:c5:24:b7:b0:2d:8e:d0:d8:41:49:b9:5d:7e:de:
d1:37:07:0e:1a:e8:93:cc:ee:0c:55:19:1d:6b:b7:
23:d8:82:76:ab:cf:a8:90:09:f7:8d:e6:e3:d7:30:
aa:f9:9b:35:a9:68:a7:b7:f2:b1:a6:ca:1c:c3:5f:
41:86:fa:be:79:f5:5b:1b:cd:56:17:af:00:0a:24:
06:7a:38:f7:b0:8f:50:91:1e:01:4a:38:ad:b3:62:
e9:b3:d0:5d:9a:62:36:f7:ee:14:e2:9f:14:75:6a:
60:a8:b1:21:ba:2c:95:d5:f4:26:3f:6f:cf:2f:a8:
2d:7b:0d:c2:4b:79:60:f5:c1:ff:90:a4:9a:3c:20:
66:a7:05:e3:d1:b2:5b:59:19:51:25:1d:8f:64:28:
83:e5:0e:90:2a:36:62:1a:c9:4c:68:70:57:05:00:
71:db:6e:5d:bb:35:5d:c6:1f:46:59:e6:c0:e4:12:
cc:23:6f:cc:44:a7:c9:48:e6:a1:19:e4:69:1c:a5:
30:e4:63:7c:dc:c9:cf:7b:1e:f7:e9:59:31:d4:b7:
d3:bb:54:a9:b9:f3:9b:15:ae:0b:ea:6f:ff:4d:cf:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D9:34:0D:4E:DD:9C:D2:83:B4:3E:E1:63:0C:6B:49:90:85:7A:98
X509v3 Authority Key Identifier:
keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/B9k0DU7dnNKDtD7hYwxrSZCFepg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.120.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:fd:33:c6:6c:61:40:48:c0:f8:46:0d:92:28:04:75:46:ed:
10:c6:78:e1:1a:52:18:89:c8:6b:e9:53:8c:29:75:a3:e7:97:
e9:34:ae:ee:96:43:47:09:62:5b:7e:c5:8a:78:65:fb:ff:99:
f5:bf:e2:54:e6:8c:c7:f7:cb:54:4f:16:36:2f:43:d1:31:79:
bc:4c:d4:49:68:ee:20:91:cb:f9:d3:81:6f:5b:6c:a1:04:dd:
e8:88:11:5f:a0:03:8b:77:fc:f7:f4:ab:0d:cd:70:d5:18:72:
50:d4:29:64:5a:01:6e:2a:c5:1e:56:c0:df:04:40:05:03:51:
5e:d8:b1:59:1e:4d:ae:2a:62:7b:ad:50:d7:0b:fe:6f:df:22:
84:08:73:de:a5:33:da:e8:49:43:fd:cb:a1:6a:44:19:4d:03:
09:71:aa:36:82:56:19:35:eb:52:10:d3:21:da:c2:47:ef:fc:
d2:ef:53:9a:ab:82:3e:90:29:86:5f:42:0c:16:3a:8b:73:ac:
b4:ac:0f:14:c1:27:6a:18:0f:96:bd:ce:6d:f5:70:58:b1:f4:
28:e7:cc:d4:41:56:16:e9:8d:0b:b4:59:c7:cc:b5:28:b7:f7:
7e:df:36:70:9a:3f:dd:55:83:c6:99:ec:f8:63:fc:a9:21:4e:
79:5f:cd:b5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NTA2
MUI3QkE2MTExRjIzMEJEQjYxRTI5NzgxRTQ2RDAxNjVFOTlFMB4XDTI0MTIzMTAx
MjgyN1oXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoMDdEOTM0MEQ0RUREOUNE
MjgzQjQzRUUxNjMwQzZCNDk5MDg1N0E5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALIn59LV38znZt+fQ6Yb3NC9aUE21ai4ZkDYMiXflcUkt7AtjtDY
QUm5XX7e0TcHDhrok8zuDFUZHWu3I9iCdqvPqJAJ943m49cwqvmbNalop7fysabK
HMNfQYb6vnn1WxvNVhevAAokBno497CPUJEeAUo4rbNi6bPQXZpiNvfuFOKfFHVq
YKixIbosldX0Jj9vzy+oLXsNwkt5YPXB/5CkmjwgZqcF49GyW1kZUSUdj2Qog+UO
kCo2YhrJTGhwVwUAcdtuXbs1XcYfRlnmwOQSzCNvzESnyUjmoRnkaRylMORjfNzJ
z3se9+lZMdS307tUqbnzmxWuC+pv/03PALUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQH2TQNTt2c0oO0PuFjDGtJkIV6mDAfBgNVHSMEGDAWgBRVBht7phEfIwvbYeKX
geRtAWXpnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODIyL1ZRWWJlNllSSHlNTDIySGlsNEhrYlFGbDZaNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZRWWJlNllSSHlNTDIySGlsNEhrYlFG
bDZaNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MjIvQjlrMERVN2RuTktEdEQ3aFl3eHJTWkNGZXBnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmeDeDANBgkqhkiG9w0BAQsFAAOCAQEAP/0zxmxhQEjA+EYNkigEdUbtEMZ4
4RpSGInIa+lTjCl1o+eX6TSu7pZDRwliW37Finhl+/+Z9b/iVOaMx/fLVE8WNi9D
0TF5vEzUSWjuIJHL+dOBb1tsoQTd6IgRX6ADi3f89/SrDc1w1RhyUNQpZFoBbirF
HlbA3wRABQNRXtixWR5Nripie61Q1wv+b98ihAhz3qUz2uhJQ/3LoWpEGU0DCXGq
NoJWGTXrUhDTIdrCR+/80u9TmquCPpAphl9CDBY6i3OstKwPFMEnahgPlr3ObfVw
WLH0KOfM1EFWFumNC7RZx8y1KLf3ft82cJo/3VWDxpns+GP8qSFOeV/NtQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:43 2025 by rpki-client