Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/K7TrEYSsa45j37oCPFlIo3OP0DA.roa
File: K7TrEYSsa45j37oCPFlIo3OP0DA.roa (raw, json)
Hash identifier: n2M7yaOM4O94WDG6xA5RT0QbBWX2e7bsZlEo3xNj/9g=
Subject key identifier: 2B:B4:EB:11:84:AC:6B:8E:63:DF:BA:02:3C:59:48:A3:73:8F:D0:30
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 01F9
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/K7TrEYSsa45j37oCPFlIo3OP0DA.roa
Signing time: Sat 01 Mar 2025 01:30:59 +0000
ROA not before: Sat 01 Mar 2025 01:30:59 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 4713
IP address blocks: 211.130.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 1 01:30:59 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=2BB4EB1184AC6B8E63DFBA023C5948A3738FD030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:57:61:2b:b4:42:8e:c0:fa:87:65:5f:8b:
e5:9f:e8:8a:55:4f:6f:7f:25:bb:9b:42:90:35:31:
f0:8a:25:f5:81:af:0b:3e:9a:e2:fb:f2:84:43:4f:
55:e2:17:e6:27:69:56:43:af:d1:42:ea:1c:f1:1c:
8d:f2:60:e8:0d:2b:fe:2b:73:9b:0b:39:80:55:9c:
32:85:b6:bf:87:2d:55:35:76:e0:c0:eb:f7:89:b3:
c9:86:c2:a7:a1:ef:03:41:8b:83:31:de:80:f3:94:
cb:2e:59:ea:07:af:6f:05:25:28:51:75:ca:5d:74:
2c:d8:da:47:93:43:86:1e:17:a3:dc:a6:d3:53:34:
15:5a:f5:61:8d:ee:c0:cb:74:a2:7f:11:31:0d:59:
7f:72:2e:00:39:ac:a8:69:e3:d4:41:ce:19:94:84:
0d:81:96:6b:4d:38:e0:f6:e8:15:44:4e:15:57:af:
a8:00:0a:46:84:0d:78:65:3a:2d:24:03:7a:12:dc:
05:00:49:a1:5b:c5:35:87:28:17:38:1a:e6:02:60:
b5:83:88:84:b0:5b:77:35:4f:f5:03:45:b3:6a:0e:
79:e0:28:d6:89:ff:c6:d6:54:51:d0:83:88:21:89:
35:44:fc:a3:5f:b8:f3:b9:2b:39:7f:b1:11:59:27:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:EB:11:84:AC:6B:8E:63:DF:BA:02:3C:59:48:A3:73:8F:D0:30
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/K7TrEYSsa45j37oCPFlIo3OP0DA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.130.64.0/19
Signature Algorithm: sha256WithRSAEncryption
d8:d1:aa:fc:4d:86:65:9f:fd:ac:b7:c7:75:6a:67:1e:33:2e:
fa:33:30:f2:a5:e9:61:2f:1f:07:d2:b5:0a:2a:d9:20:5c:31:
9a:25:97:69:ab:b8:e6:0f:95:84:36:07:f7:25:eb:16:65:7d:
61:5f:ec:cb:87:80:2e:0a:0a:60:9d:0b:fb:39:eb:2b:ab:1e:
63:f5:36:78:79:58:5a:e3:e9:28:ad:8d:52:f6:05:84:a7:04:
bd:28:71:43:ea:59:4c:6e:6d:fa:70:12:3e:88:14:3b:be:a5:
ce:ea:ac:9f:10:66:14:c7:18:fb:8c:1c:03:51:19:64:25:3a:
b7:83:f5:e6:7b:4f:1e:30:f5:bc:41:9e:f4:06:78:82:82:f3:
d6:48:bd:52:36:51:fb:8e:63:a5:ab:53:1d:14:87:b0:57:a3:
54:b2:9a:60:c1:76:ab:33:a4:aa:89:f7:5e:14:da:55:71:8e:
20:ca:f8:a1:db:f3:0e:48:9e:38:c1:e8:ec:d3:b6:3f:6c:8e:
fc:48:83:43:68:19:fb:81:7c:4a:f2:d3:cc:53:ef:e0:db:cd:
61:5f:3e:ee:e9:67:58:2e:8e:b1:34:86:56:47:cb:ca:54:d5:
54:68:d5:59:a3:fe:9f:86:c7:69:c5:39:0e:1a:57:f7:af:11:
68:33:27:74
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw
MTMwNTlaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJCQjRFQjExODRBQzZC
OEU2M0RGQkEwMjNDNTk0OEEzNzM4RkQwMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCihVdhK7RCjsD6h2Vfi+Wf6IpVT29/JbubQpA1MfCKJfWBrws+
muL78oRDT1XiF+YnaVZDr9FC6hzxHI3yYOgNK/4rc5sLOYBVnDKFtr+HLVU1duDA
6/eJs8mGwqeh7wNBi4Mx3oDzlMsuWeoHr28FJShRdcpddCzY2keTQ4YeF6PcptNT
NBVa9WGN7sDLdKJ/ETENWX9yLgA5rKhp49RBzhmUhA2BlmtNOOD26BVEThVXr6gA
CkaEDXhlOi0kA3oS3AUASaFbxTWHKBc4GuYCYLWDiISwW3c1T/UDRbNqDnngKNaJ
/8bWVFHQg4ghiTVE/KNfuPO5Kzl/sRFZJ4MZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUK7TrEYSsa45j37oCPFlIo3OP0DAwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0s3VHJFWVNzYTQ1ajM3b0NQRmxJbzNPUDBEQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXTgkAwDQYJKoZIhvcNAQELBQADggEBANjRqvxNhmWf/ay3x3VqZx4zLvoz
MPKl6WEvHwfStQoq2SBcMZoll2mruOYPlYQ2B/cl6xZlfWFf7MuHgC4KCmCdC/s5
6yurHmP1Nnh5WFrj6SitjVL2BYSnBL0ocUPqWUxubfpwEj6IFDu+pc7qrJ8QZhTH
GPuMHANRGWQlOreD9eZ7Tx4w9bxBnvQGeIKC89ZIvVI2UfuOY6WrUx0Uh7BXo1Sy
mmDBdqszpKqJ914U2lVxjiDK+KHb8w5InjjB6OzTtj9sjvxIg0NoGfuBfEry08xT
7+DbzWFfPu7pZ1gujrE0hlZHy8pU1VRo1Vmj/p+Gx2nFOQ4aV/evEWgzJ3Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:56:36 2025 by rpki-client