Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/VdV0HcNg9QV66LRVMzZrH54ZnJA.roa
File: VdV0HcNg9QV66LRVMzZrH54ZnJA.roa (raw, json)
Hash identifier: FOkGq2SfNX06Fkj30NRriJbET4Ij2Bj86HrjcMvc9jw=
Subject key identifier: 55:D5:74:1D:C3:60:F5:05:7A:E8:B4:55:33:36:6B:1F:9E:19:9C:90
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 3C
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/VdV0HcNg9QV66LRVMzZrH54ZnJA.roa
Signing time: Sat 01 Mar 2025 01:29:41 +0000
ROA not before: Sat 01 Mar 2025 01:29:41 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 17698
IP address blocks: 122.49.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 1 01:29:41 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=55D5741DC360F5057AE8B45533366B1F9E199C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:18:ef:78:bf:db:20:81:3a:79:70:2b:1c:97:
2d:d3:c8:e8:ea:19:d8:1e:83:01:27:35:b1:db:00:
45:25:2a:08:6e:f2:77:41:e8:31:b4:f4:08:4f:5f:
dd:bf:c0:d0:4f:00:83:3d:ec:a4:39:5f:16:dd:69:
14:43:c7:c0:bf:c2:0c:dd:61:98:a4:7a:b3:c9:0d:
00:c1:86:b9:c9:bb:6c:aa:a5:9e:82:6a:cc:ab:c1:
e3:2e:c9:35:78:84:20:5f:11:4f:ed:f5:92:25:f5:
d7:49:d2:de:c0:ee:5c:d8:2e:95:af:76:2c:e9:bc:
6b:f3:c7:ca:61:db:2a:43:d1:66:c9:d2:9c:d2:68:
df:0b:95:45:0b:40:bc:a3:93:db:d9:a2:1a:9d:6f:
c8:7c:73:bc:42:12:78:f7:8a:86:c6:f4:92:dc:80:
59:01:d7:b1:5c:a6:99:d9:96:6e:f7:7f:97:72:0c:
75:e4:3b:9a:5b:45:a5:ac:a8:79:33:30:ee:ae:ad:
1a:b8:ca:97:7c:d6:ab:80:cd:13:82:d7:8d:05:ee:
6a:14:84:92:78:09:68:b9:e2:dd:f8:8e:d4:95:ae:
14:ac:f0:6d:c0:78:51:4c:07:ad:b1:ce:ce:62:24:
6b:29:d0:16:fd:84:56:a6:57:47:39:68:74:81:8a:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D5:74:1D:C3:60:F5:05:7A:E8:B4:55:33:36:6B:1F:9E:19:9C:90
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/VdV0HcNg9QV66LRVMzZrH54ZnJA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.49.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:06:60:99:a4:89:c3:de:53:6f:1f:95:e1:2f:b1:9e:30:d9:
01:ae:43:3e:22:18:be:54:95:b6:08:8c:60:cb:b3:7e:ce:62:
c4:cf:50:9a:1e:58:73:be:55:e5:fd:f6:b1:76:af:f3:24:30:
0d:13:88:ff:0b:4d:81:44:64:bb:b6:20:4c:39:c8:59:14:11:
e6:64:cd:64:8a:db:90:c5:2b:0e:e0:1e:a0:b8:0b:57:7f:33:
fa:d0:6f:bc:a5:66:c7:08:fb:3e:83:7c:9c:c0:dd:62:2f:a5:
d6:8a:33:7c:79:d2:8c:d7:4b:c8:c1:f0:ee:b7:ae:b1:69:fc:
20:4b:b4:a9:04:a0:62:e5:22:8b:0f:e6:69:2e:1b:a4:ba:1e:
13:6a:c8:a5:9f:3f:bc:f1:77:ac:3d:52:98:31:c7:6e:5c:e1:
44:ed:07:f2:38:b0:c2:46:45:1b:8e:d3:c6:9e:3d:d2:c0:18:
51:f3:23:4c:b2:64:a7:d7:11:ff:a9:89:23:99:35:6a:67:c3:
e1:ea:aa:b5:f6:7c:e1:47:80:fc:af:0f:7d:fa:d1:b8:05:0c:
c0:c0:a3:af:2a:ae:81:a2:f5:5c:dc:6d:88:67:54:e3:70:9a:
ef:03:7c:52:65:b3:ca:5f:62:d4:74:96:5a:1c:6c:31:4c:53:
ec:7c:32:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:40 2025 by rpki-client