Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/6oklst0zAPXz6IH2vDIaJB-kKGQ.roa
File: 6oklst0zAPXz6IH2vDIaJB-kKGQ.roa (raw, json)
Hash identifier: CVhIIOfpa2l88bQGyfPnWSGyIlWDZfNykUILBLUgy+E=
Subject key identifier: EA:89:25:B2:DD:33:00:F5:F3:E8:81:F6:BC:32:1A:24:1F:A4:28:64
Certificate issuer: /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial: 31
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/6oklst0zAPXz6IH2vDIaJB-kKGQ.roa
Signing time: Sat 01 Mar 2025 01:29:33 +0000
ROA not before: Sat 01 Mar 2025 01:29:33 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 18071
IP address blocks: 137.40.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Validity
Not Before: Mar 1 01:29:33 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=EA8925B2DD3300F5F3E881F6BC321A241FA42864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:d5:e6:79:fd:a4:d5:fd:a2:c4:b9:00:04:
b9:ef:dc:c8:1a:1d:46:2f:7d:88:c0:13:09:64:79:
6c:72:e6:ef:be:da:12:84:de:49:66:d6:7b:c1:a2:
fa:e9:82:d7:b4:65:c1:a1:62:2f:89:39:78:82:aa:
16:0d:3f:93:34:96:f2:ce:e9:ac:5a:48:29:5c:9a:
35:c6:81:83:15:fc:6e:88:bd:13:3a:66:fe:ed:38:
46:68:58:c6:ba:d6:ed:d0:46:50:33:5c:24:ea:c7:
c6:44:45:28:0e:c2:5c:20:70:63:b3:3a:8f:da:f2:
02:44:01:13:b4:bf:06:ce:2d:33:6a:8d:95:b9:96:
e3:1d:e6:90:81:ac:0a:fa:bd:4a:98:d6:31:54:1b:
92:9e:a0:13:08:d0:14:81:17:48:36:71:c4:19:13:
27:39:11:e2:f4:2a:a8:06:dd:fb:30:70:ac:9e:4b:
c6:8e:e2:69:ca:4a:36:b0:5b:c6:df:cb:a3:7a:e4:
27:e9:8b:64:69:78:af:ff:4c:73:41:dc:4c:d5:7c:
6d:a8:39:cd:04:a6:14:75:cc:3a:82:06:60:87:24:
9b:84:8f:01:9c:22:e7:65:ff:a4:7c:51:3a:5d:a2:
0d:5d:ba:fe:25:d9:2f:69:d0:1b:62:c3:b9:8e:c2:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:89:25:B2:DD:33:00:F5:F3:E8:81:F6:BC:32:1A:24:1F:A4:28:64
X509v3 Authority Key Identifier:
keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/6oklst0zAPXz6IH2vDIaJB-kKGQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.40.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:d7:be:4d:a3:5b:17:97:9a:09:ee:c9:2e:70:4b:2d:65:2b:
28:53:33:5d:5f:33:a4:b5:86:d3:6a:e3:b9:14:87:7b:7a:a1:
9b:e7:9e:07:18:a4:43:f3:ed:46:35:71:93:96:05:c0:9a:e5:
08:cd:59:dc:9d:8a:af:12:ca:81:c6:24:83:58:48:01:ab:1c:
eb:28:a8:83:07:55:f0:d6:e3:3c:3c:80:1e:c8:29:05:d1:27:
59:1a:37:97:1f:ac:f1:21:55:16:9d:fc:4e:a9:07:19:5d:70:
fc:ca:3a:cc:d2:9e:2b:7e:33:77:94:7e:5a:35:a0:f4:9d:a9:
03:98:a7:64:3a:26:48:39:43:ad:52:e3:5f:32:ec:13:57:10:
6f:c6:d3:ac:cb:4b:a1:5a:35:96:f8:33:7c:8b:96:22:1e:35:
e2:f4:a9:c7:c2:d6:6c:03:fe:d3:f3:6e:37:27:2a:88:07:51:
8b:46:5b:3a:50:40:dc:cb:98:e2:c2:2c:1e:f4:25:9e:d2:b3:
55:36:a1:73:4b:0b:35:c7:63:0e:ee:0c:52:af:c5:98:5b:ed:
a0:c6:e1:af:06:c3:82:26:f6:e5:18:9b:f0:9c:83:4f:06:3b:
5b:c1:ab:8f:81:a3:8b:5d:07:da:e9:20:92:ce:4a:31:02:9c:
8a:17:3f:7c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTkx
Q0I5RjRDNDIyRDNCM0Q2NzUzNzFCMThBOERBRERBRTg3OThEMB4XDTI1MDMwMTAx
MjkzM1oXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoRUE4OTI1QjJERDMzMDBG
NUYzRTg4MUY2QkMzMjFBMjQxRkE0Mjg2NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANiR1eZ5/aTV/aLEuQAEue/cyBodRi99iMATCWR5bHLm777aEoTe
SWbWe8Gi+umC17RlwaFiL4k5eIKqFg0/kzSW8s7prFpIKVyaNcaBgxX8boi9Ezpm
/u04RmhYxrrW7dBGUDNcJOrHxkRFKA7CXCBwY7M6j9ryAkQBE7S/Bs4tM2qNlbmW
4x3mkIGsCvq9SpjWMVQbkp6gEwjQFIEXSDZxxBkTJzkR4vQqqAbd+zBwrJ5Lxo7i
acpKNrBbxt/Lo3rkJ+mLZGl4r/9Mc0HcTNV8bag5zQSmFHXMOoIGYIckm4SPAZwi
52X/pHxROl2iDV26/iXZL2nQG2LDuY7CSycCAwEAAaOCAiUwggIhMB0GA1UdDgQW
BBTqiSWy3TMA9fPogfa8MhokH6QoZDAfBgNVHSMEGDAWgBRxkcufTEItOz1nU3Gx
io2t2uh5jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy9jWkhMbjB4Q0xUczlaMU54c1lxTnJkcm9lWTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jWkhMbjB4Q0xUczlaMU54c1lxTnJk
cm9lWTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTkzNy82b2tsc3QwekFQWHo2SUgydkRJYUpCLWtLR1Eucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA
ATAFAwMAiSgwDQYJKoZIhvcNAQELBQADggEBAD/Xvk2jWxeXmgnuyS5wSy1lKyhT
M11fM6S1htNq47kUh3t6oZvnngcYpEPz7UY1cZOWBcCa5QjNWdydiq8SyoHGJINY
SAGrHOsoqIMHVfDW4zw8gB7IKQXRJ1kaN5cfrPEhVRad/E6pBxldcPzKOszSnit+
M3eUflo1oPSdqQOYp2Q6Jkg5Q61S418y7BNXEG/G06zLS6FaNZb4M3yLliIeNeL0
qcfC1mwD/tPzbjcnKogHUYtGWzpQQNzLmOLCLB70JZ7Ss1U2oXNLCzXHYw7uDFKv
xZhb7aDG4a8Gw4Im9uUYm/Ccg08GO1vBq4+Bo4tdB9rpIJLOSjECnIoXP3w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:34 2025 by rpki-client