Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/DnFnCfy6v8SIdZzjPehDMKpihQQ.roa
File: DnFnCfy6v8SIdZzjPehDMKpihQQ.roa (raw, json)
Hash identifier: hdu3YOYRr7PcWfzVKijzdLrtUo3oXdE+gawUUAxnP7U=
Subject key identifier: 0E:71:67:09:FC:BA:BF:C4:88:75:9C:E3:3D:E8:43:30:AA:62:85:04
Certificate issuer: /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial: 42
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/DnFnCfy6v8SIdZzjPehDMKpihQQ.roa
Signing time: Wed 31 Jul 2024 01:28:30 +0000
ROA not before: Wed 31 Jul 2024 01:28:30 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 38651
IP address blocks: 114.31.104.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Validity
Not Before: Jul 31 01:28:30 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=0E716709FCBABFC488759CE33DE84330AA628504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:5d:4b:1d:f6:e0:c2:f2:6c:ce:b5:29:25:
11:f8:b6:88:81:94:08:81:38:53:d7:26:5a:2b:bb:
76:80:05:a3:a4:75:a9:fb:98:ee:76:49:03:da:ee:
95:17:16:76:8c:f3:44:23:08:2f:90:20:c4:a9:f0:
ce:f4:54:ab:b6:21:a2:67:76:1c:60:0c:95:64:68:
64:56:0a:2c:ad:9e:1e:e4:7e:1d:59:19:aa:7e:d5:
88:1e:22:f3:db:c8:c7:09:06:dc:2d:1e:04:c1:86:
7d:d0:5c:b3:b2:9d:c4:f5:3b:5d:dc:68:7d:56:d6:
5e:6e:4d:8a:22:e9:bd:55:76:bc:03:a8:45:41:ad:
21:94:87:e9:4c:61:fe:52:00:33:99:25:9b:9f:1a:
b4:11:64:68:40:7b:3d:46:1f:c0:9c:05:7c:3b:62:
76:8f:01:68:37:24:10:91:65:05:6d:26:8e:b8:a5:
0d:67:ec:9c:80:5d:82:33:3e:d9:a1:f8:ce:7d:91:
2b:da:e8:ed:93:c0:9f:0a:48:eb:1d:71:dc:d1:b4:
a5:25:80:df:e3:dc:f0:1d:95:c2:c9:f6:2b:de:1a:
37:b7:66:b8:f0:51:fb:19:9d:26:bb:9a:61:df:e3:
ba:3f:89:64:21:bc:8d:e4:b6:3c:cd:37:70:14:ca:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:71:67:09:FC:BA:BF:C4:88:75:9C:E3:3D:E8:43:30:AA:62:85:04
X509v3 Authority Key Identifier:
keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/DnFnCfy6v8SIdZzjPehDMKpihQQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.31.104.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:17:16:0b:24:93:a4:97:f5:60:a0:5a:75:18:0b:b8:56:07:
c3:f4:e7:78:24:b5:87:36:6d:52:d5:bc:07:b3:c2:46:5e:98:
a8:cc:23:fc:8f:04:72:93:75:b5:d3:a9:3f:b9:0d:d2:26:26:
c4:d6:78:30:3e:f8:ad:0d:32:a4:7a:3c:fe:18:46:29:a5:d0:
e4:b3:0b:73:13:e4:04:27:07:fd:cb:f8:b2:28:04:54:a5:b5:
04:e8:63:31:1d:cf:5c:ec:25:98:2f:97:4a:1d:0f:5b:90:c4:
0f:74:78:ea:ef:a3:b9:6f:e1:7b:07:16:da:dd:72:0d:ce:77:
0e:8d:f5:3d:8a:9b:dd:4b:40:00:0f:70:e9:e0:2e:54:b7:6f:
d6:0c:7b:1b:65:19:cc:d1:c1:87:35:65:b5:d9:97:11:e9:3f:
dd:86:be:9c:6a:f4:19:0d:ae:45:c7:50:9f:13:2f:de:fa:24:
89:df:4c:4c:0f:a2:cc:a6:2b:c8:70:22:36:99:6f:1c:1d:52:
00:a1:0e:29:8f:96:cc:4d:0d:89:70:6e:ba:3d:e6:a2:08:00:
e2:d0:d5:72:bd:a9:ff:1b:a8:52:96:fa:b1:4c:ad:ca:7f:67:
01:05:a3:4c:4f:19:42:23:5a:20:19:c4:19:00:80:82:61:c0:
90:d5:84:47
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RjNF
MzNBQTZGOTJBODM3RkE4OTQ0QUI4MzYyN0QzQjQ0RTBDRjRBMB4XDTI0MDczMTAx
MjgzMFoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMEU3MTY3MDlGQ0JBQkZD
NDg4NzU5Q0UzM0RFODQzMzBBQTYyODUwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKTXXUsd9uDC8mzOtSklEfi2iIGUCIE4U9cmWiu7doAFo6R1qfuY
7nZJA9rulRcWdozzRCMIL5AgxKnwzvRUq7Yhomd2HGAMlWRoZFYKLK2eHuR+HVkZ
qn7ViB4i89vIxwkG3C0eBMGGfdBcs7KdxPU7XdxofVbWXm5NiiLpvVV2vAOoRUGt
IZSH6Uxh/lIAM5klm58atBFkaEB7PUYfwJwFfDtido8BaDckEJFlBW0mjrilDWfs
nIBdgjM+2aH4zn2RK9ro7ZPAnwpI6x1x3NG0pSWA3+Pc8B2Vwsn2K94aN7dmuPBR
+xmdJruaYd/juj+JZCG8jeS2PM03cBTKajUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQOcWcJ/Lq/xIh1nOM96EMwqmKFBDAfBgNVHSMEGDAWgBRfPjOqb5KoN/qJRKuD
Yn07RODPSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTcyL1h6NHpxbS1TcURmNmlVU3JnMko5TzBUZ3owby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1h6NHpxbS1TcURmNmlVU3JnMko5TzBU
Z3owby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NzIvRG5GbkNmeTZ2OFNJZFp6alBlaERNS3BpaFFRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3IfaDANBgkqhkiG9w0BAQsFAAOCAQEAbBcWCySTpJf1YKBadRgLuFYHw/Tn
eCS1hzZtUtW8B7PCRl6YqMwj/I8EcpN1tdOpP7kN0iYmxNZ4MD74rQ0ypHo8/hhG
KaXQ5LMLcxPkBCcH/cv4sigEVKW1BOhjMR3PXOwlmC+XSh0PW5DED3R46u+juW/h
ewcW2t1yDc53Do31PYqb3UtAAA9w6eAuVLdv1gx7G2UZzNHBhzVltdmXEek/3Ya+
nGr0GQ2uRcdQnxMv3vokid9MTA+izKYryHAiNplvHB1SAKEOKY+WzE0NiXBuuj3m
oggA4tDVcr2p/xuoUpb6sUytyn9nAQWjTE8ZQiNaIBnEGQCAgmHAkNWERw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:12 2025 by rpki-client