Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/sPFlJ3n3LRabnYpTysqgp3U1nz4.roa
File: sPFlJ3n3LRabnYpTysqgp3U1nz4.roa (raw, json)
Hash identifier: OrLCOvrzm7+Z3eqaDsHVr9d9eUBX1p6f3jPgj4p+pHM=
Subject key identifier: B0:F1:65:27:79:F7:2D:16:9B:9D:8A:53:CA:CA:A0:A7:75:35:9F:3E
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 01FC
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/sPFlJ3n3LRabnYpTysqgp3U1nz4.roa
Signing time: Sat 01 Mar 2025 01:31:01 +0000
ROA not before: Sat 01 Mar 2025 01:31:01 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 4713
IP address blocks: 58.88.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 1 01:31:01 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=B0F1652779F72D169B9D8A53CACAA0A775359F3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:36:06:b9:0e:06:94:db:ab:93:14:5e:69:
de:a6:5b:31:95:bb:d3:66:82:dd:3e:10:07:0e:08:
fd:af:b7:7e:a6:78:66:2c:f6:f9:32:ed:4c:52:47:
80:c4:2d:a6:bb:87:a7:1e:59:32:af:8d:94:22:e3:
00:21:9a:3f:bd:80:bf:b8:fe:fe:6f:dc:09:d2:73:
6b:35:ad:13:8a:43:72:16:ab:84:27:4d:6a:24:18:
fd:c4:76:ac:fc:71:19:26:95:47:91:a8:79:73:ea:
0e:a0:e8:dc:05:98:de:24:5b:40:93:ea:1f:a7:4a:
c3:91:36:da:2a:f3:93:b4:62:57:33:6c:0a:96:10:
f8:65:48:61:e4:eb:c1:8a:61:8e:03:d5:9a:eb:ed:
95:07:03:cc:f1:bc:75:e7:05:b2:42:af:cf:7d:e6:
6a:00:b1:e1:0f:76:94:83:59:c0:9d:95:88:bb:8e:
3a:49:4b:00:af:59:ed:86:76:37:bf:61:99:ed:6b:
49:2a:35:2f:fd:17:1d:8c:2d:ea:88:0a:7d:97:5e:
61:14:e6:d4:06:d5:d0:c9:15:f8:79:33:fb:d1:bb:
a7:8e:c3:e2:33:f7:54:34:20:cc:91:a3:f0:e5:68:
f6:ca:70:6d:dc:e2:7e:ad:b5:b7:60:66:25:45:fb:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F1:65:27:79:F7:2D:16:9B:9D:8A:53:CA:CA:A0:A7:75:35:9F:3E
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/sPFlJ3n3LRabnYpTysqgp3U1nz4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.88.0.0/13
Signature Algorithm: sha256WithRSAEncryption
2e:61:7e:a0:81:29:e8:41:6a:8f:d5:ef:d3:de:c4:dc:5e:11:
16:83:c1:05:7c:19:68:2c:26:db:bf:b0:8b:11:55:15:5f:22:
de:88:d1:cc:1e:04:bc:c1:c5:33:ad:50:b3:fe:1f:b3:2c:4c:
a7:72:b1:6e:ca:ce:09:97:70:25:09:56:d9:fd:9c:f6:9e:1e:
36:05:0f:bf:6b:fd:07:46:f1:ba:d2:d1:12:aa:8a:f6:ae:3a:
f2:b1:b1:3d:b7:6a:a0:18:e5:40:ba:f9:b7:a2:7c:61:88:bb:
3b:44:9c:37:6d:63:ad:53:dd:69:d3:52:8f:b9:6c:d4:63:cc:
f0:0e:b9:d9:db:4c:e8:a9:c1:6f:34:49:30:78:a8:8d:3b:32:
61:e8:96:1c:1e:e0:8f:c9:1b:a1:aa:cd:d1:a3:0e:32:d2:29:
da:7e:2a:1a:65:c6:ee:f2:dd:e8:61:64:3d:5b:3e:a9:5c:c8:
8a:bc:ae:06:05:98:42:6e:20:19:29:97:df:a3:be:bc:fc:e5:
91:c6:85:ae:aa:8f:2e:1c:f9:6d:8a:de:ab:8e:fa:3e:b5:96:
35:f1:05:0e:61:d6:08:b1:dc:8b:19:3f:43:57:f5:6e:5e:e5:
20:e3:20:a4:aa:8d:da:5d:f9:b3:68:9d:d3:18:67:dc:7e:d3:
a0:e7:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:34:34 2025 by rpki-client