Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fbm4Ab0OmciTijVC14LrS5lp_04.roa
File: Fbm4Ab0OmciTijVC14LrS5lp_04.roa (raw, json)
Hash identifier: RjbbJbKOgXIEUn7cRa3JkVKFrA7JgnBNdd/nIKSJHR4=
Subject key identifier: 15:B9:B8:01:BD:0E:99:C8:93:8A:35:42:D7:82:EB:4B:99:69:FF:4E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B05
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fbm4Ab0OmciTijVC14LrS5lp_04.roa
Signing time: Fri 31 Jan 2025 01:34:20 +0000
ROA not before: Fri 31 Jan 2025 01:34:20 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 9605
IP address blocks: 220.159.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2821 (0xb05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 31 01:34:20 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=15B9B801BD0E99C8938A3542D782EB4B9969FF4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:85:36:6d:67:4f:6b:6e:97:fc:00:0b:7d:
a2:01:a5:af:0d:c5:e3:24:21:66:1b:b2:6c:f2:ad:
16:8e:8f:9d:2f:e9:8e:43:63:32:87:cb:8d:a2:bf:
3a:96:f8:bb:25:92:9e:41:0d:bb:c9:9c:f0:5a:f6:
11:13:f6:f1:a1:1d:fb:d3:c6:da:38:12:0e:70:76:
1c:32:ff:19:86:50:95:95:e2:0c:20:f4:d2:80:53:
29:a2:1a:d5:6d:46:7b:b5:2c:5d:e3:9c:c7:2f:72:
9f:37:17:32:e1:0b:df:d2:2d:dc:34:d8:31:ab:af:
74:d6:3b:65:74:18:cb:88:3f:7a:e2:59:24:66:a3:
46:b9:81:97:62:ff:55:4f:1b:2a:ad:a1:15:fb:e5:
6a:fe:89:62:e0:11:d0:95:b0:3d:4a:b7:07:f0:03:
7f:65:d8:3b:90:05:b4:45:03:23:3b:3b:d0:7c:77:
32:ab:53:2f:c1:75:28:cf:e5:80:67:1f:bd:c1:12:
ba:04:1c:41:1c:28:be:93:5b:e8:7d:fc:72:b0:c9:
1e:fa:00:d7:25:66:ed:8d:24:86:13:22:27:c0:ff:
10:ae:9c:9e:4e:7a:29:c6:18:48:f3:bb:cb:0a:3b:
a6:5f:88:8b:ef:be:0d:04:72:88:d0:13:83:ed:57:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:B8:01:BD:0E:99:C8:93:8A:35:42:D7:82:EB:4B:99:69:FF:4E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fbm4Ab0OmciTijVC14LrS5lp_04.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:b7:3c:2e:c8:8b:d8:d7:98:7f:1b:d9:86:45:cd:69:cf:56:
f0:d2:c8:7b:94:59:c2:f1:8a:73:4d:55:26:aa:16:ae:b0:14:
d8:31:c5:9f:ec:bd:31:8d:37:c2:1c:5b:25:0f:f0:8a:9c:40:
aa:88:6e:27:49:06:66:7e:b6:5c:17:c7:1e:28:52:8a:4f:d1:
0d:d5:d2:35:09:29:f9:de:75:85:49:6a:42:d2:a7:5a:4b:8d:
71:cc:b2:e1:5b:d4:1e:07:3f:a8:b9:ae:c9:ec:dd:f2:cf:f1:
62:90:05:38:2f:d8:47:37:15:9b:5a:c2:30:b2:86:72:15:9a:
d0:72:9c:f0:e1:a8:74:af:cf:d5:6f:a4:be:2f:bf:97:57:90:
0c:91:0c:96:1d:89:92:43:43:3a:74:49:26:ba:78:48:ea:44:
43:d8:c6:e5:18:12:7d:1e:94:5e:7a:16:48:13:1b:24:24:ef:
e8:58:07:24:9e:da:ce:e2:a5:52:70:1a:bf:d5:c8:48:42:b1:
01:fa:35:3a:38:42:6a:cf:12:4d:53:4a:2e:e7:ae:74:71:f4:
ee:bc:3a:e3:8d:24:4d:ff:87:5b:fe:61:09:95:c0:84:22:1a:
05:67:b8:c6:fa:89:64:f9:dd:2a:cf:03:8a:2b:be:dc:47:7c:
90:cd:a8:72
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw
MTM0MjBaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE1QjlCODAxQkQwRTk5
Qzg5MzhBMzU0MkQ3ODJFQjRCOTk2OUZGNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDS1oU2bWdPa26X/AALfaIBpa8NxeMkIWYbsmzyrRaOj50v6Y5D
YzKHy42ivzqW+Lslkp5BDbvJnPBa9hET9vGhHfvTxto4Eg5wdhwy/xmGUJWV4gwg
9NKAUymiGtVtRnu1LF3jnMcvcp83FzLhC9/SLdw02DGrr3TWO2V0GMuIP3riWSRm
o0a5gZdi/1VPGyqtoRX75Wr+iWLgEdCVsD1KtwfwA39l2DuQBbRFAyM7O9B8dzKr
Uy/BdSjP5YBnH73BEroEHEEcKL6TW+h9/HKwyR76ANclZu2NJIYTIifA/xCunJ5O
einGGEjzu8sKO6ZfiIvvvg0EcojQE4PtV4RxAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUFbm4Ab0OmciTijVC14LrS5lp/04wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0ZibTRBYjBPbWNpVGlqVkMxNExyUzVscF8wNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHcnzYwDQYJKoZIhvcNAQELBQADggEBAKK3PC7Ii9jXmH8b2YZFzWnPVvDS
yHuUWcLxinNNVSaqFq6wFNgxxZ/svTGNN8IcWyUP8IqcQKqIbidJBmZ+tlwXxx4o
UopP0Q3V0jUJKfnedYVJakLSp1pLjXHMsuFb1B4HP6i5rsns3fLP8WKQBTgv2Ec3
FZtawjCyhnIVmtBynPDhqHSvz9VvpL4vv5dXkAyRDJYdiZJDQzp0SSa6eEjqREPY
xuUYEn0elF56FkgTGyQk7+hYBySe2s7ipVJwGr/VyEhCsQH6NTo4QmrPEk1TSi7n
rnRx9O68OuONJE3/h1v+YQmVwIQiGgVnuMb6iWT53SrPA4orvtxHfJDNqHI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:16:47 2025 by rpki-client