Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/zEfVSLA6W_ogjqkTwfH3n0Yg2Xc.roa
File: zEfVSLA6W_ogjqkTwfH3n0Yg2Xc.roa (raw, json)
Hash identifier: xVqL4eK/PEn0AJ3ejadbtmQdejI7TJmRQH+RrjrP4A8=
Subject key identifier: CC:47:D5:48:B0:3A:5B:FA:20:8E:A9:13:C1:F1:F7:9F:46:20:D9:77
Certificate issuer: /CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803
Certificate serial: 14
Authority key identifier: DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/zEfVSLA6W_ogjqkTwfH3n0Yg2Xc.roa
Signing time: Fri 04 Apr 2025 07:42:15 +0000
ROA not before: Fri 04 Apr 2025 07:42:15 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 131926
IP address blocks: 104.251.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803
Validity
Not Before: Apr 4 07:42:15 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=CC47D548B03A5BFA208EA913C1F1F79F4620D977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:e6:12:22:e5:ab:ad:7c:10:4c:ed:eb:7f:
f5:ca:3f:72:bf:9e:03:58:cb:27:fd:16:bf:a9:df:
3f:b9:07:bb:46:65:67:ac:1c:66:00:3e:1d:0d:c1:
4a:67:6b:b5:03:0e:72:28:1a:84:9b:1c:8e:dd:60:
88:aa:ef:17:00:77:99:41:94:a5:e2:bf:e4:bc:58:
8e:f5:4c:d8:f1:df:a3:9e:39:ca:f1:be:bd:19:a7:
db:2e:9a:5b:8c:da:48:08:22:57:45:07:6c:60:0b:
44:2d:ee:fe:cd:27:6a:96:1c:77:c3:b5:ec:90:36:
26:30:30:9a:02:ac:f2:81:06:ac:78:a2:99:c0:3a:
0a:0b:d5:5d:4b:55:a0:e4:00:7b:15:18:cd:4f:eb:
73:67:d9:24:5b:1d:55:53:e0:fa:35:c1:60:5e:bc:
6d:e9:c4:a0:ce:24:9d:33:ae:1a:dc:45:12:f4:d2:
6f:ff:0b:53:57:a2:1a:d9:d9:06:fc:b3:73:33:0a:
65:d6:95:ac:91:95:c3:94:d0:de:0d:29:dc:71:94:
f3:ea:47:25:ad:29:10:e8:45:c1:e7:83:17:49:92:
6a:f9:6f:73:5d:5f:0c:ed:ea:08:af:48:06:11:72:
6c:59:5b:de:e6:87:56:3b:d8:9f:a7:b4:db:72:45:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:47:D5:48:B0:3A:5B:FA:20:8E:A9:13:C1:F1:F7:9F:46:20:D9:77
X509v3 Authority Key Identifier:
keyid:DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/zEfVSLA6W_ogjqkTwfH3n0Yg2Xc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
104.251.144.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:81:d3:ed:3c:43:81:42:14:d1:c6:6c:0e:7d:a7:62:28:aa:
1a:f3:fc:d0:8e:b6:26:84:a5:28:b5:ca:ab:ff:95:30:cc:61:
82:3a:1c:3f:35:a4:58:88:95:f9:4a:b2:9a:c5:eb:02:d6:d4:
41:e4:e1:a4:92:7b:ff:01:fb:88:45:77:95:6b:3c:98:81:4e:
f2:10:1e:95:54:e1:61:99:ed:8b:5d:94:79:8e:81:7d:89:23:
31:2d:ef:dd:ab:77:e1:be:30:52:d2:d7:d9:bc:22:3e:25:cb:
20:98:4d:5c:41:60:79:35:c6:60:d3:47:cf:f4:eb:fb:ab:21:
cb:f4:7d:e2:b5:75:79:75:de:3b:ce:98:33:65:69:5e:90:a9:
89:01:19:9d:24:ac:40:21:19:f8:ca:83:3e:2b:d0:38:a8:06:
37:37:c9:1d:2d:65:f5:db:02:f8:33:9b:03:ea:86:d2:b7:d4:
7e:97:52:c5:92:e2:ef:ed:87:0a:3d:54:ce:7f:1b:17:5d:83:
09:cf:86:5e:25:50:63:04:be:83:2e:76:a1:fa:82:53:36:a0:
7c:a0:2c:13:3a:29:30:e5:c4:15:fd:a2:58:22:97:26:70:2b:
87:91:86:85:b6:40:7f:e8:46:1e:f5:b5:b9:e8:6c:ea:31:b2:
ad:1d:49:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:33:51 2025 by rpki-client