Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1455/vk0KF9Hnes8-XtTxq7QYHqTSjTI.roa
File: vk0KF9Hnes8-XtTxq7QYHqTSjTI.roa (raw, json)
Hash identifier: pfncDLL4IaerOshVST/mbYtNk53kIlpmvbb66EWqDzo=
Subject key identifier: BE:4D:0A:17:D1:E7:7A:CF:3E:5E:D4:F1:AB:B4:18:1E:A4:D2:8D:32
Certificate issuer: /CN=20D7C331FBC35D08554D41BE2E9C3BF04B075FC9
Certificate serial: 02
Authority key identifier: 20:D7:C3:31:FB:C3:5D:08:55:4D:41:BE:2E:9C:3B:F0:4B:07:5F:C9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/vk0KF9Hnes8-XtTxq7QYHqTSjTI.roa
Signing time: Wed 12 Feb 2025 09:32:19 +0000
ROA not before: Wed 12 Feb 2025 09:32:19 +0000
ROA not after: Thu 12 Feb 2026 08:48:04 +0000
asID: 0
IP address blocks: 139.154.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20D7C331FBC35D08554D41BE2E9C3BF04B075FC9
Validity
Not Before: Feb 12 09:32:19 2025 GMT
Not After : Feb 12 08:48:04 2026 GMT
Subject: CN=BE4D0A17D1E77ACF3E5ED4F1ABB4181EA4D28D32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:fe:ce:67:35:d5:da:e4:ab:f9:2f:a5:3b:
0a:c6:ef:4d:4b:03:bc:91:23:82:1a:64:1e:79:bd:
76:10:b0:d2:23:55:35:2b:31:1e:88:79:73:97:6d:
56:1f:46:3b:95:85:85:26:bc:be:04:85:db:77:df:
e4:0c:d1:63:aa:91:8d:ae:c1:c3:81:74:42:b7:dd:
d4:47:cd:67:53:40:cb:78:ca:d6:30:99:ea:73:d6:
91:70:ea:f1:08:0d:60:4c:ca:30:5a:b0:76:e4:3f:
e9:48:95:7d:be:b0:95:5d:31:92:9a:02:63:85:ec:
f7:f1:48:11:3d:80:3d:6d:49:e6:7c:f1:f4:55:29:
db:ce:a6:c9:07:02:39:19:ea:b6:a2:37:b4:a8:6c:
d7:2c:97:77:4f:24:3c:07:45:03:9e:48:d4:de:67:
d3:f9:3f:7f:3b:91:ea:6f:0d:c5:78:92:9c:e6:e6:
9e:39:3d:c2:93:ca:e2:5c:5e:0d:3d:d7:46:78:77:
ea:43:e3:65:6e:bf:ac:c0:8e:c3:92:ca:fa:15:94:
88:31:2a:8f:d3:38:25:fc:8e:77:c1:e6:c9:1a:4d:
2e:96:a0:dc:96:52:ad:8c:dd:d6:e6:72:2c:47:6c:
3e:3b:4d:8a:c4:a5:7c:59:70:66:24:74:b0:f9:0d:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:0A:17:D1:E7:7A:CF:3E:5E:D4:F1:AB:B4:18:1E:A4:D2:8D:32
X509v3 Authority Key Identifier:
keyid:20:D7:C3:31:FB:C3:5D:08:55:4D:41:BE:2E:9C:3B:F0:4B:07:5F:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/vk0KF9Hnes8-XtTxq7QYHqTSjTI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:b2:b6:11:c8:18:fe:35:66:14:15:72:42:e4:a8:db:22:0b:
70:ac:32:26:5a:d6:a0:40:9c:db:4f:3d:e2:63:f7:f0:31:be:
fa:e9:c6:31:d0:34:2b:a3:ee:36:7f:43:59:0f:17:fc:0f:68:
98:ee:40:d3:5b:6c:3a:61:a8:df:73:51:a1:54:26:7c:b4:ac:
a9:5c:7a:88:ab:da:56:ee:fb:c6:d5:6b:aa:87:68:a0:b3:1c:
18:3d:ec:30:a5:0a:ba:f9:1c:0c:0f:00:ef:a9:77:26:6b:92:
7e:10:c4:52:19:5b:f2:a6:96:3c:45:ee:39:92:0e:90:f1:55:
81:c4:87:4b:44:6a:d9:8a:03:b6:ae:2e:7a:d2:e7:d6:5a:a3:
f5:56:69:90:5d:17:f3:50:db:5c:05:3e:57:04:e5:65:dc:2d:
b0:c2:df:b3:8d:da:de:ed:3e:b7:60:40:99:bd:31:83:f7:c7:
ee:bc:62:ad:06:a2:a6:ab:ef:81:7f:6e:c6:5e:fd:55:fd:ba:
3b:9a:3a:16:bf:f5:14:34:3f:3a:01:8f:ea:95:4e:6c:8c:9b:
90:02:f4:51:15:19:7d:a4:bd:2b:a0:39:20:27:45:1a:7a:fb:
70:87:aa:db:00:c8:0b:5d:1a:ee:be:de:4c:d3:36:b3:2a:62:
38:58:fe:c5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMEQ3
QzMzMUZCQzM1RDA4NTU0RDQxQkUyRTlDM0JGMDRCMDc1RkM5MB4XDTI1MDIxMjA5
MzIxOVoXDTI2MDIxMjA4NDgwNFowMzExMC8GA1UEAxMoQkU0RDBBMTdEMUU3N0FD
RjNFNUVENEYxQUJCNDE4MUVBNEQyOEQzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALBI/s5nNdXa5Kv5L6U7CsbvTUsDvJEjghpkHnm9dhCw0iNVNSsx
Hoh5c5dtVh9GO5WFhSa8vgSF23ff5AzRY6qRja7Bw4F0Qrfd1EfNZ1NAy3jK1jCZ
6nPWkXDq8QgNYEzKMFqwduQ/6UiVfb6wlV0xkpoCY4Xs9/FIET2APW1J5nzx9FUp
286myQcCORnqtqI3tKhs1yyXd08kPAdFA55I1N5n0/k/fzuR6m8NxXiSnObmnjk9
wpPK4lxeDT3XRnh36kPjZW6/rMCOw5LK+hWUiDEqj9M4JfyOd8HmyRpNLpag3JZS
rYzd1uZyLEdsPjtNisSlfFlwZiR0sPkN3GsCAwEAAaOCAiUwggIhMB0GA1UdDgQW
BBS+TQoX0ed6zz5e1PGrtBgepNKNMjAfBgNVHSMEGDAWgBQg18Mx+8NdCFVNQb4u
nDvwSwdfyTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTQ1NS9JTmZETWZ2RFhRaFZUVUctTHB3NzhFc0hYOGsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9JTmZETWZ2RFhRaFZUVUctTHB3NzhF
c0hYOGsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTQ1NS92azBLRjlIbmVzOC1YdFR4cTdRWUhxVFNqVEkucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA
ATAFAwMAi5owDQYJKoZIhvcNAQELBQADggEBADeythHIGP41ZhQVckLkqNsiC3Cs
MiZa1qBAnNtPPeJj9/AxvvrpxjHQNCuj7jZ/Q1kPF/wPaJjuQNNbbDphqN9zUaFU
Jny0rKlceoir2lbu+8bVa6qHaKCzHBg97DClCrr5HAwPAO+pdyZrkn4QxFIZW/Km
ljxF7jmSDpDxVYHEh0tEatmKA7auLnrS59Zao/VWaZBdF/NQ21wFPlcE5WXcLbDC
37ON2t7tPrdgQJm9MYP3x+68Yq0Goqar74F/bsZe/VX9ujuaOha/9RQ0PzoBj+qV
TmyMm5AC9FEVGX2kvSugOSAnRRp6+3CHqtsAyAtdGu6+3kzTNrMqYjhY/sU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:11 2025 by rpki-client