Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/OxODi93r4da5Y1SIT13HXVTXiUQ.roa
File: OxODi93r4da5Y1SIT13HXVTXiUQ.roa (raw, json)
Hash identifier: iy3QEIsTQU8yxrGYZjdULVS3nCBnPKPLAN86cW71uEM=
Subject key identifier: 3B:13:83:8B:DD:EB:E1:D6:B9:63:54:88:4F:5D:C7:5D:54:D7:89:44
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: 5D
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/OxODi93r4da5Y1SIT13HXVTXiUQ.roa
Signing time: Mon 01 Jul 2024 06:13:20 +0000
ROA not before: Mon 01 Jul 2024 06:13:20 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 38631
IP address blocks: 119.235.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Jul 1 06:13:20 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=3B13838BDDEBE1D6B96354884F5DC75D54D78944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:f4:20:ef:77:d3:c9:51:e9:a8:9e:be:2c:
ea:13:99:7e:a3:f7:8f:40:a9:65:f9:c5:51:b7:55:
22:d0:f3:c0:66:8e:e7:6f:a8:6a:ce:cf:30:6c:97:
1f:04:ed:05:97:9c:ec:25:45:e8:06:a8:06:ee:1e:
31:97:b1:08:c1:35:ba:1f:ba:b3:49:e1:ae:60:fd:
79:c4:4f:e0:b9:8a:7a:f5:cb:9b:7f:91:71:b6:c1:
b2:e3:32:3f:6b:79:e3:af:57:12:2d:d2:7b:30:cd:
cd:b1:4a:72:63:83:fa:89:a8:ed:8d:40:33:34:bf:
4a:8d:7f:ac:d2:65:1a:9b:7f:72:75:67:72:eb:c3:
26:16:e9:bc:c6:79:10:f1:eb:3e:52:70:23:e0:88:
fe:12:68:86:b3:78:e6:8c:4a:74:2c:6d:4a:4b:01:
3e:c7:34:d2:b1:1c:37:26:39:42:76:74:11:d5:df:
2c:60:8e:ab:f6:de:16:7a:ff:d6:68:38:a0:be:b7:
c4:f9:34:80:ec:c8:89:06:42:ff:71:cf:b9:00:92:
0d:17:d5:2d:b3:ba:63:88:da:ab:d6:21:59:bd:58:
a2:59:41:c6:b4:d4:2b:98:54:e1:bc:6d:c7:d4:8e:
7a:80:20:9f:dc:50:92:56:61:47:9d:93:c1:85:b1:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:83:8B:DD:EB:E1:D6:B9:63:54:88:4F:5D:C7:5D:54:D7:89:44
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/OxODi93r4da5Y1SIT13HXVTXiUQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.235.232.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f5:23:12:c0:a9:95:73:06:bd:be:97:6a:99:48:2e:5d:b4:
d3:d6:dc:e7:d9:30:06:ce:e2:8d:91:b2:51:1c:3a:03:fb:d4:
e2:ca:b2:e5:34:1e:56:1f:14:81:7f:01:2a:91:0a:fa:6a:ef:
88:2f:db:1d:a3:e1:d4:9e:ef:cd:02:5b:e6:99:16:70:49:09:
ce:a4:5a:b7:d7:94:ac:54:d0:35:eb:1f:05:92:49:ec:14:52:
a3:fd:cc:1d:f1:ae:84:57:93:76:4e:2a:61:b1:61:aa:47:20:
47:f1:0d:6c:24:3a:c4:d3:3c:16:d6:0a:d1:00:71:f8:92:c2:
52:e6:76:2a:0a:03:0a:e8:34:56:0d:1b:6a:89:08:50:bd:f7:
33:7f:06:db:e1:d4:cc:ff:c0:62:94:5b:20:5c:a9:64:7e:2d:
ba:53:63:12:bf:d2:6d:00:f1:1e:5f:61:2a:db:da:3b:3a:27:
79:f5:98:07:95:76:95:d2:9d:62:f9:0c:ae:2c:56:0e:3f:ad:
82:0d:c1:ca:2c:5c:79:58:e8:f2:10:e8:f8:a0:a8:1e:b8:87:
5c:2e:77:d0:d5:9c:f8:52:09:4b:7c:99:fd:c0:a5:ee:eb:78:
6f:fb:fc:9c:df:ae:f5:1a:9c:61:57:c3:6c:04:f2:29:94:17:
e4:db:47:09
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF
NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTI0MDcwMTA2
MTMyMFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoM0IxMzgzOEJEREVCRTFE
NkI5NjM1NDg4NEY1REM3NUQ1NEQ3ODk0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK5h9CDvd9PJUemonr4s6hOZfqP3j0CpZfnFUbdVItDzwGaO52+o
as7PMGyXHwTtBZec7CVF6AaoBu4eMZexCME1uh+6s0nhrmD9ecRP4LmKevXLm3+R
cbbBsuMyP2t5469XEi3SezDNzbFKcmOD+omo7Y1AMzS/So1/rNJlGpt/cnVncuvD
JhbpvMZ5EPHrPlJwI+CI/hJohrN45oxKdCxtSksBPsc00rEcNyY5QnZ0EdXfLGCO
q/beFnr/1mg4oL63xPk0gOzIiQZC/3HPuQCSDRfVLbO6Y4jaq9YhWb1YollBxrTU
K5hU4bxtx9SOeoAgn9xQklZhR52TwYWxNq0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQ7E4OL3evh1rljVIhPXcddVNeJRDAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY
guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X
WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE2L094T0RpOTNyNGRhNVkxU0lUMTNIWFZUWGlVUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAB36+gwDQYJKoZIhvcNAQELBQADggEBAGT1IxLAqZVzBr2+l2qZSC5d
tNPW3OfZMAbO4o2RslEcOgP71OLKsuU0HlYfFIF/ASqRCvpq74gv2x2j4dSe780C
W+aZFnBJCc6kWrfXlKxU0DXrHwWSSewUUqP9zB3xroRXk3ZOKmGxYapHIEfxDWwk
OsTTPBbWCtEAcfiSwlLmdioKAwroNFYNG2qJCFC99zN/Btvh1Mz/wGKUWyBcqWR+
LbpTYxK/0m0A8R5fYSrb2js6J3n1mAeVdpXSnWL5DK4sVg4/rYINwcosXHlY6PIQ
6PigqB64h1wud9DVnPhSCUt8mf3Ape7reG/7/JzfrvUanGFXw2wE8imUF+TbRwk=
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:36:08 2025 by rpki-client