Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nAY2DqUlAJCYAVXokaJmL7e1jaQ.roa
File: nAY2DqUlAJCYAVXokaJmL7e1jaQ.roa (raw, json)
Hash identifier: frg5YYUWkiINrlPN57NyME0rD7VmFyV+P1J6/5IA3GE=
Subject key identifier: 9C:06:36:0E:A5:25:00:90:98:01:55:E8:91:A2:66:2F:B7:B5:8D:A4
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 6B
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nAY2DqUlAJCYAVXokaJmL7e1jaQ.roa
Signing time: Tue 01 Apr 2025 01:32:38 +0000
ROA not before: Tue 01 Apr 2025 01:32:38 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 7684
IP address blocks: 157.17.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Apr 1 01:32:38 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=9C06360EA5250090980155E891A2662FB7B58DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:42:37:00:aa:77:fa:e8:65:6e:51:6e:19:
3a:ab:16:90:ce:e0:28:5f:5a:8f:84:b8:41:4a:5a:
4c:92:59:6e:ff:8c:02:ca:26:52:b9:69:0e:94:94:
04:26:37:f6:a7:af:76:b7:75:88:bb:90:23:eb:86:
f8:7f:71:e1:7e:11:fc:86:85:34:c6:1c:33:9d:d2:
c5:26:50:f8:ad:cf:9d:17:20:32:0c:96:d7:18:31:
73:1e:f2:b1:66:39:1b:5d:9e:50:f3:36:22:bc:82:
a1:bb:7d:88:75:67:28:ae:5d:93:7d:0b:37:28:82:
97:08:04:28:00:53:9c:7a:54:08:f1:ec:cf:2e:ad:
95:77:c0:58:28:2b:5a:6d:11:a7:61:a9:33:3d:7c:
80:43:e8:26:15:04:60:eb:b5:8b:48:3d:e8:e1:36:
e7:92:11:a1:d3:cb:2d:0d:13:b2:d3:f3:8c:a2:ce:
78:31:16:e7:c0:4b:87:7f:53:a3:eb:1b:7f:d1:df:
bd:fb:8b:d8:c1:2e:d6:95:7a:64:e3:60:88:6e:a5:
6c:87:e9:05:34:9f:fd:43:e1:02:83:2c:dc:00:05:
2d:2f:e6:f9:f9:9d:cb:45:e7:8e:2f:9a:38:b8:de:
c1:d9:57:42:41:be:b1:ce:b8:f0:f0:26:37:6d:ca:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:06:36:0E:A5:25:00:90:98:01:55:E8:91:A2:66:2F:B7:B5:8D:A4
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nAY2DqUlAJCYAVXokaJmL7e1jaQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.17.88.0/21
Signature Algorithm: sha256WithRSAEncryption
cd:b8:79:db:53:f4:a3:b8:0e:b8:3a:34:1f:fb:64:25:f4:be:
2c:9d:72:9c:68:95:e2:c9:3d:20:22:d2:47:ad:bf:b4:b3:7f:
07:68:91:e2:9c:e7:4c:73:5b:ff:70:63:e8:fe:a9:d4:de:c5:
38:cb:ce:bf:0b:74:ae:40:05:f5:c5:29:1a:bf:9e:68:d4:48:
9b:7e:01:91:9c:08:62:b1:a9:a1:87:7c:1c:07:07:d8:f6:87:
ef:77:f8:54:ac:f0:d9:06:d1:4c:35:94:89:9e:c5:99:88:0a:
e3:ce:be:12:90:0f:ef:45:ac:54:02:3a:f1:0f:64:74:9b:83:
f0:d6:5e:ce:92:a6:cc:f6:a0:b9:0b:d5:34:77:05:61:b0:bd:
d9:96:25:09:e8:3b:0d:a8:d1:57:e9:27:c5:d8:77:33:2f:1a:
44:27:f2:dc:34:0c:9c:21:e8:3a:61:91:52:a3:bd:ca:de:8a:
c2:92:7f:1a:e3:64:d2:33:45:1d:0c:7a:7c:28:3d:fb:ca:a2:
b2:30:7c:64:7d:b4:53:1c:f8:7d:43:48:4d:b7:de:3d:53:be:
d8:32:a1:ae:f3:6c:ba:9a:3a:41:e1:2b:3e:bc:a5:f8:16:1d:
42:13:85:60:72:5b:87:1c:2d:ce:9e:45:c3:49:72:e4:a5:03:
b8:d6:9c:43
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0
NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTI1MDQwMTAx
MzIzOFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoOUMwNjM2MEVBNTI1MDA5
MDk4MDE1NUU4OTFBMjY2MkZCN0I1OERBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMypQjcAqnf66GVuUW4ZOqsWkM7gKF9aj4S4QUpaTJJZbv+MAsom
UrlpDpSUBCY39qevdrd1iLuQI+uG+H9x4X4R/IaFNMYcM53SxSZQ+K3PnRcgMgyW
1xgxcx7ysWY5G12eUPM2IryCobt9iHVnKK5dk30LNyiClwgEKABTnHpUCPHszy6t
lXfAWCgrWm0Rp2GpMz18gEPoJhUEYOu1i0g96OE255IRodPLLQ0TstPzjKLOeDEW
58BLh39To+sbf9HfvfuL2MEu1pV6ZONgiG6lbIfpBTSf/UPhAoMs3AAFLS/m+fmd
y0Xnji+aOLjewdlXQkG+sc648PAmN23Ksi0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBScBjYOpSUAkJgBVeiRomYvt7WNpDAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75
+5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo
M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjQ3L25BWTJEcVVsQUpDWUFWWG9rYUptTDdlMWphUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAOdEVgwDQYJKoZIhvcNAQELBQADggEBAM24edtT9KO4Drg6NB/7ZCX0
viydcpxoleLJPSAi0ketv7SzfwdokeKc50xzW/9wY+j+qdTexTjLzr8LdK5ABfXF
KRq/nmjUSJt+AZGcCGKxqaGHfBwHB9j2h+93+FSs8NkG0Uw1lImexZmICuPOvhKQ
D+9FrFQCOvEPZHSbg/DWXs6Spsz2oLkL1TR3BWGwvdmWJQnoOw2o0VfpJ8XYdzMv
GkQn8tw0DJwh6DphkVKjvcreisKSfxrjZNIzRR0MenwoPfvKorIwfGR9tFMc+H1D
SE233j1Tvtgyoa7zbLqaOkHhKz68pfgWHUIThWByW4ccLc6eRcNJcuSlA7jWnEM=
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:17:52 2025 by rpki-client