Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/Rf9TGMIXJQv71Na7h-TbskwEu04.roa
File: Rf9TGMIXJQv71Na7h-TbskwEu04.roa (raw, json)
Hash identifier: 2o1LKJvNFi2SDp2QgCkgKmS/eRtonEcW/p3ANCPjjpM=
Subject key identifier: 45:FF:53:18:C2:17:25:0B:FB:D4:D6:BB:87:E4:DB:B2:4C:04:BB:4E
Certificate issuer: /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial: 3D
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/Rf9TGMIXJQv71Na7h-TbskwEu04.roa
Signing time: Mon 19 Apr 2021 04:48:08 +0000
ROA not before: Mon 19 Apr 2021 04:48:08 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 38631
IP address blocks: 43.223.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Validity
Not Before: Apr 19 04:48:08 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=45FF5318C217250BFBD4D6BB87E4DBB24C04BB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:57:7e:ea:c6:ec:93:eb:09:44:45:92:ad:
16:f0:39:bd:f2:54:e0:90:04:d3:25:5d:aa:97:6a:
bc:bb:0a:2a:02:6c:65:f7:16:42:79:f9:73:b0:92:
3c:61:6b:b7:3f:76:68:f6:cd:66:43:60:ed:f9:47:
cd:a8:a3:7b:90:0b:44:67:ec:af:a8:0e:e5:31:a2:
22:7d:64:6d:34:a7:aa:68:c4:1f:b0:66:67:f4:08:
98:14:97:b2:5e:9e:7e:82:89:45:f5:c5:19:41:5d:
5d:73:2f:86:04:cb:cc:c9:b6:72:89:6e:6d:37:18:
04:83:fc:5b:75:bd:d4:f5:17:7b:42:bb:e7:16:ee:
9c:16:c6:5b:6a:10:4f:c3:f7:87:59:82:fb:6a:fa:
f2:a5:08:05:92:b2:92:a1:51:11:3c:9a:c2:73:1d:
0c:9a:c7:c3:87:e9:fe:e4:2f:aa:b6:d0:4b:27:fb:
5e:23:db:df:a7:d1:e7:87:e0:86:45:b0:f9:f9:a7:
73:0d:f8:de:7b:1f:61:2b:61:ab:08:17:43:d8:1a:
8d:dc:11:81:7d:0d:68:b0:74:db:d1:cb:8a:d8:75:
80:10:4c:bb:2e:dc:d7:e7:3d:7f:c4:18:3d:a5:94:
73:4f:67:c6:aa:6f:4d:d5:07:b6:a3:f4:b1:ae:7c:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FF:53:18:C2:17:25:0B:FB:D4:D6:BB:87:E4:DB:B2:4C:04:BB:4E
X509v3 Authority Key Identifier:
keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/Rf9TGMIXJQv71Na7h-TbskwEu04.roa
sbgp-ipAddrBlock: critical
IPv4:
43.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:67:d0:40:8b:b7:fc:1b:1f:98:89:ac:9b:0e:1c:81:80:12:
68:4f:30:98:8f:95:dc:82:1a:d3:ea:2f:9a:9e:28:d5:b9:c5:
df:87:d1:e9:7c:4f:fe:c1:b8:0f:32:7f:e4:4c:ac:39:e3:f9:
4b:8b:83:4a:3b:ef:b5:b7:e2:82:ea:5f:98:5c:ea:87:07:3e:
b6:ad:8d:e2:4d:62:70:30:59:aa:94:f8:a4:a2:08:3c:fd:16:
6e:a3:8d:3c:86:8a:04:44:27:26:30:93:86:e6:2d:61:29:dd:
98:53:50:e7:68:b0:5e:89:a8:31:40:8d:8d:ff:7f:8c:24:14:
73:79:df:a9:b7:14:19:b9:ca:8c:62:b3:77:7e:a2:c5:0c:a6:
da:ee:f5:09:de:f4:db:60:e7:8f:bb:64:53:67:3b:eb:8c:d7:
b6:c8:31:2a:0c:7f:d2:ba:44:7d:7b:8c:c6:96:02:08:2b:38:
14:9c:c3:a3:c3:12:7f:ca:be:9f:d3:8b:ab:b2:2d:c8:8e:76:
bb:27:17:12:52:a8:d3:04:ab:5d:10:08:b9:ef:72:98:ec:8b:
76:a1:16:a6:c4:a1:55:e0:0b:61:dc:43:48:ee:26:ec:15:7a:
db:f6:75:ce:88:6b:28:7a:18:69:69:34:8e:7b:90:ba:a1:a3:
b3:90:0a:c2
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OTA0
RUNCQ0Q4NUYyMkEyRThBRTdFMUY5OTFFODM0NUQwNkE5ODE2MB4XDTIxMDQxOTA0
NDgwOFoXDTIyMDQxNTAxMzAwMVowMzExMC8GA1UEAxMoNDVGRjUzMThDMjE3MjUw
QkZCRDRENkJCODdFNERCQjI0QzA0QkI0RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKcxV37qxuyT6wlERZKtFvA5vfJU4JAE0yVdqpdqvLsKKgJsZfcW
Qnn5c7CSPGFrtz92aPbNZkNg7flHzaije5ALRGfsr6gO5TGiIn1kbTSnqmjEH7Bm
Z/QImBSXsl6efoKJRfXFGUFdXXMvhgTLzMm2colubTcYBIP8W3W91PUXe0K75xbu
nBbGW2oQT8P3h1mC+2r68qUIBZKykqFRETyawnMdDJrHw4fp/uQvqrbQSyf7XiPb
36fR54fghkWw+fmncw343nsfYSthqwgXQ9gajdwRgX0NaLB029HLith1gBBMuy7c
1+c9f8QYPaWUc09nxqpvTdUHtqP0sa58aQcCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBRF/1MYwhclC/vU1ruH5NuyTAS7TjAfBgNVHSMEGDAWgBSZBOy82F8iouiufh+Z
HoNF0GqYFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU4L21RVHN2TmhmSXFMb3JuNGZtUjZEUmRCcW1CWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21RVHN2TmhmSXFMb3JuNGZtUjZEUmRC
cW1CWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NTgvUmY5VEdNSVhKUXY3MU5hN2gtVGJza3dFdTA0LnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDACvfMA0GCSqGSIb3DQEBCwUAA4IBAQBG
Z9BAi7f8Gx+YiaybDhyBgBJoTzCYj5XcghrT6i+anijVucXfh9HpfE/+wbgPMn/k
TKw54/lLi4NKO++1t+KC6l+YXOqHBz62rY3iTWJwMFmqlPikogg8/RZuo408hooE
RCcmMJOG5i1hKd2YU1DnaLBeiagxQI2N/3+MJBRzed+ptxQZucqMYrN3fqLFDKba
7vUJ3vTbYOePu2RTZzvrjNe2yDEqDH/SukR9e4zGlgIIKzgUnMOjwxJ/yr6f04ur
si3Ijna7JxcSUqjTBKtdEAi573KY7It2oRamxKFV4Ath3ENI7ibsFXrb9nXOiGso
ehhpaTSOe5C6oaOzkArC
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:32 2025 by rpki-client