Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/NlUgNdMty2YZz2yr4Lyab0hgU5g.roa
File: NlUgNdMty2YZz2yr4Lyab0hgU5g.roa (raw, json)
Hash identifier: pL4E0kkvjubxZW+sm2wUNZ4YUHHkVOALTedQ0xgfRC8=
Subject key identifier: 36:55:20:35:D3:2D:CB:66:19:CF:6C:AB:E0:BC:9A:6F:48:60:53:98
Certificate issuer: /CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Certificate serial: 50
Authority key identifier: DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/NlUgNdMty2YZz2yr4Lyab0hgU5g.roa
Signing time: Fri 31 Jan 2025 01:32:12 +0000
ROA not before: Fri 31 Jan 2025 01:32:12 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 2504
IP address blocks: 192.50.24.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 18:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Validity
Not Before: Jan 31 01:32:12 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=36552035D32DCB6619CF6CABE0BC9A6F48605398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:45:bc:d8:ab:31:c7:cc:6c:a9:63:12:a3:cb:
1c:4e:4c:cc:80:63:da:0f:79:de:60:d2:cc:4d:08:
c9:42:39:57:c6:48:f9:10:d4:fa:7e:86:1c:e9:23:
06:98:b4:01:4d:10:a6:d7:46:30:36:86:2e:ab:f1:
0b:c4:7c:7e:07:ee:c4:4c:f5:72:db:fe:dd:90:42:
59:e0:27:a7:83:64:89:e9:b3:9a:6a:2f:8d:77:75:
83:0b:4b:ef:da:cc:3a:e0:d3:51:2b:42:10:9d:04:
f9:04:81:ae:a3:16:bc:8d:b2:3e:ea:de:0e:ed:f1:
2a:bb:e5:98:7f:01:c4:b8:b0:1a:3f:d0:2e:ca:5a:
47:c9:be:3c:f7:24:db:eb:d8:51:89:5b:c1:92:b8:
97:ac:fd:4c:c1:c3:c2:d2:c0:83:a7:9b:d4:36:b7:
7e:56:e5:c3:22:e3:ca:38:db:55:c7:36:2c:fe:2c:
df:3e:fb:19:25:11:0c:e2:98:ee:d8:02:c4:87:f4:
0b:79:87:f1:73:a7:2e:83:a6:91:52:7c:8d:06:38:
5d:e2:94:fa:84:7e:2f:e5:89:64:92:10:bb:5b:7d:
af:a8:57:5c:a3:a4:56:b0:6c:cd:8a:dd:e9:3c:c8:
ef:d7:47:4d:22:ea:35:fe:04:39:60:14:f5:77:7a:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:55:20:35:D3:2D:CB:66:19:CF:6C:AB:E0:BC:9A:6F:48:60:53:98
X509v3 Authority Key Identifier:
keyid:DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/NlUgNdMty2YZz2yr4Lyab0hgU5g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.50.24.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:81:1c:7c:00:ba:f9:c4:5b:96:e9:59:54:37:4b:42:0f:8a:
20:29:95:56:16:7d:37:6a:a1:72:28:d0:68:4f:03:70:31:79:
9d:af:52:05:d8:14:88:f9:de:27:2e:67:40:93:c8:f4:65:73:
23:f8:8e:77:ba:bc:6f:46:9b:b1:69:eb:e3:2c:f0:4d:1a:0d:
2a:d9:d6:c8:89:25:44:07:01:d9:9a:ba:50:ff:97:d2:bf:ca:
49:d6:c9:c2:2a:53:4d:88:61:59:ee:5a:1e:35:58:8e:13:2d:
53:b4:b7:a7:51:26:60:3f:e8:17:ef:0f:02:36:f9:64:fe:0a:
73:7a:6a:68:1f:65:80:1f:84:89:22:19:01:67:fe:87:5a:9c:
15:83:1f:d5:0e:e5:6b:05:df:07:f0:64:e2:e0:09:69:95:36:
5a:f3:2d:ff:df:a8:5b:7b:d7:f4:59:78:48:0e:20:dc:e0:2d:
43:ad:a2:7e:1a:2a:62:ff:40:a0:78:56:02:79:47:15:7d:42:
e5:0e:1d:11:a5:df:81:e4:16:78:5c:12:0c:fb:98:fa:1c:b8:
0e:42:c8:cb:5a:a1:f2:39:65:b3:36:f4:5e:4e:a8:f4:72:e5:
f0:2d:24:12:4a:3d:c0:82:ed:40:e9:fd:b7:11:ef:a7:bd:db:
1a:5d:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:06:53 2025 by rpki-client