Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2KQ6ubAd4PgAJ6xXGGDnyZKJ8ok.roa
File: 2KQ6ubAd4PgAJ6xXGGDnyZKJ8ok.roa (raw, json)
Hash identifier: +UX2BqtP+wENBFcMQpKgGsrYNCxjpBoXQ87o8r7txhU=
Subject key identifier: D8:A4:3A:B9:B0:1D:E0:F8:00:27:AC:57:18:60:E7:C9:92:89:F2:89
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: E5
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2KQ6ubAd4PgAJ6xXGGDnyZKJ8ok.roa
Signing time: Fri 01 Sep 2023 01:33:05 +0000
ROA not before: Fri 01 Sep 2023 01:33:05 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2516
IP address blocks: 210.141.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Sep 1 01:33:05 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=D8A43AB9B01DE0F80027AC571860E7C99289F289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e4:72:8d:9d:b1:f4:34:80:58:ec:94:c8:9b:
35:97:3f:ed:47:16:b0:53:da:da:d4:ea:f7:ce:2b:
1a:08:fa:12:75:a9:e7:e9:15:8d:67:37:cb:99:6d:
87:fa:b3:d1:65:2b:17:10:c6:8e:76:c3:45:21:be:
bf:c4:b1:c5:6c:a9:53:3d:4b:42:08:4b:d2:41:56:
47:61:bd:e1:ab:28:9f:3b:32:33:35:66:7b:12:e0:
05:98:01:cd:a1:5e:64:07:01:c4:51:d6:31:d7:5e:
f6:8f:47:d4:dc:3d:43:d5:69:d5:99:f6:b3:4e:64:
1d:11:2c:d6:e2:0c:d9:9d:ad:16:53:23:e0:f1:3f:
ab:78:6f:2c:bd:77:5e:36:91:41:22:bb:d9:ca:a4:
08:59:18:90:4d:d7:e4:a8:74:b1:c0:82:3b:87:d3:
41:e8:70:1f:21:5a:bc:2a:d7:91:16:93:c0:fb:a7:
ec:e1:8f:11:b7:b6:13:f2:1f:f5:e9:25:7a:f0:5d:
7b:38:6f:9f:98:7f:95:5b:24:c7:b5:c5:90:51:e5:
5e:ce:32:a4:fa:5f:1e:ae:4d:06:4c:14:8b:d1:08:
01:8f:d4:99:83:7f:8c:30:8f:f4:de:51:0d:8b:ac:
7c:e6:dd:62:ae:c7:1e:97:0f:57:84:b7:3c:93:60:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:3A:B9:B0:1D:E0:F8:00:27:AC:57:18:60:E7:C9:92:89:F2:89
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2KQ6ubAd4PgAJ6xXGGDnyZKJ8ok.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.141.244.0/23
Signature Algorithm: sha256WithRSAEncryption
92:15:8c:dd:45:93:e0:bf:35:14:3e:f3:d1:0d:a9:39:76:6f:
8a:ed:f1:e4:3f:97:4c:bb:ba:a6:b2:0e:38:a5:4d:a1:b0:45:
f3:a8:11:c8:72:e7:b1:a3:9d:20:59:3e:7e:81:8a:c5:ae:73:
c4:cb:2d:f6:1f:e7:49:f4:bc:7f:34:71:46:c7:0d:41:ac:8b:
43:3f:9e:3e:ca:a2:88:88:18:29:b4:6c:df:29:ff:6b:66:b0:
47:f0:f1:28:6b:7a:e8:ce:a4:cf:f1:4c:03:8b:d9:12:c9:9e:
d2:cb:e6:b1:14:42:6f:79:ac:eb:40:97:05:d7:9a:e1:4f:29:
e2:67:32:01:e1:fc:6f:2e:8f:6c:a4:36:89:d9:db:62:fd:28:
54:f0:e8:9b:df:f6:ee:86:76:9a:e6:fb:24:48:8f:1b:84:57:
1b:e3:b9:a2:23:88:d0:38:b1:9b:ea:89:b6:53:05:43:41:57:
f9:87:9b:88:6b:22:29:86:d3:b9:de:e0:70:11:6f:8d:ce:03:
38:08:1f:f1:17:f4:07:c0:df:44:7f:9e:86:d3:75:54:b3:32:
54:44:0d:fd:7f:4d:45:2e:74:0e:29:90:f7:21:70:f4:87:13:
86:0a:8a:fe:d7:7a:34:5e:83:9d:f9:f1:98:fc:01:5e:5c:41:
d1:66:e5:d0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTMzMDVaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4QTQzQUI5QjAxREUw
RjgwMDI3QUM1NzE4NjBFN0M5OTI4OUYyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDr5HKNnbH0NIBY7JTImzWXP+1HFrBT2trU6vfOKxoI+hJ1qefp
FY1nN8uZbYf6s9FlKxcQxo52w0Uhvr/EscVsqVM9S0IIS9JBVkdhveGrKJ87MjM1
ZnsS4AWYAc2hXmQHAcRR1jHXXvaPR9TcPUPVadWZ9rNOZB0RLNbiDNmdrRZTI+Dx
P6t4byy9d142kUEiu9nKpAhZGJBN1+SodLHAgjuH00HocB8hWrwq15EWk8D7p+zh
jxG3thPyH/XpJXrwXXs4b5+Yf5VbJMe1xZBR5V7OMqT6Xx6uTQZMFIvRCAGP1JmD
f4wwj/TeUQ2LrHzm3WKuxx6XD1eEtzyTYODdAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU2KQ6ubAd4PgAJ6xXGGDnyZKJ8okwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny8yS1E2dWJBZDRQZ0FKNnhYR0dEbnlaS0o4b2su
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB0o30MA0GCSqGSIb3DQEBCwUAA4IBAQCSFYzdRZPgvzUUPvPRDak5
dm+K7fHkP5dMu7qmsg44pU2hsEXzqBHIcuexo50gWT5+gYrFrnPEyy32H+dJ9Lx/
NHFGxw1BrItDP54+yqKIiBgptGzfKf9rZrBH8PEoa3rozqTP8UwDi9kSyZ7Sy+ax
FEJveazrQJcF15rhTyniZzIB4fxvLo9spDaJ2dti/ShU8Oib3/buhnaa5vskSI8b
hFcb47miI4jQOLGb6om2UwVDQVf5h5uIayIphtO53uBwEW+NzgM4CB/xF/QHwN9E
f56G03VUszJURA39f01FLnQOKZD3IXD0hxOGCor+13o0XoOd+fGY/AFeXEHRZuXQ
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:55 2025 by rpki-client