Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/tc9YL4JAXC3NqASONMQz7PScN58.roa
File: tc9YL4JAXC3NqASONMQz7PScN58.roa (raw, json)
Hash identifier: FdZIpga27RivdGUq73NDukdkrlhxwjwgigUav316iRI=
Subject key identifier: B5:CF:58:2F:82:40:5C:2D:CD:A8:04:8E:34:C4:33:EC:F4:9C:37:9F
Certificate issuer: /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial: 5D
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/tc9YL4JAXC3NqASONMQz7PScN58.roa
Signing time: Tue 01 Apr 2025 01:29:42 +0000
ROA not before: Tue 01 Apr 2025 01:29:42 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 7687
IP address blocks: 160.246.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Validity
Not Before: Apr 1 01:29:42 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=B5CF582F82405C2DCDA8048E34C433ECF49C379F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:fb:c9:7f:87:a5:60:14:f2:21:0d:c0:47:
8e:a7:6a:a7:69:40:bc:56:ae:40:1a:57:45:b2:1b:
d1:89:90:8c:aa:32:e8:1d:16:8c:b3:f2:d7:07:fb:
26:23:ac:c3:3d:0d:e8:54:a1:d4:68:a2:9c:29:a8:
d2:0f:58:a6:6b:96:25:ff:2e:6b:7c:cf:5a:62:81:
30:5d:16:09:3c:d7:f9:ab:39:42:14:70:eb:a9:73:
70:d4:ed:ad:67:da:b5:30:24:bf:72:78:6e:8a:e5:
15:6e:67:c0:43:f0:0b:a4:01:2a:1b:04:88:09:3b:
0a:12:86:ec:e2:41:c0:d5:02:be:c6:91:e3:e5:67:
58:aa:0f:65:86:cc:92:f0:73:f7:50:01:f6:3b:13:
7a:eb:f2:7b:10:14:70:9a:30:b7:9f:2f:06:57:9c:
01:7b:70:13:15:a5:ac:31:3d:9f:c8:59:d2:a5:68:
4a:00:98:bb:f3:63:88:c0:3c:47:76:fa:95:84:f5:
14:45:1b:e2:b1:8f:13:74:70:3c:b1:0b:d2:ca:f9:
95:7a:09:39:e4:df:9b:8d:13:c2:9f:50:85:2e:00:
97:92:26:20:c4:80:f0:39:b5:3d:03:21:72:48:e5:
9f:8d:6d:5d:fd:9e:d2:09:87:49:23:7d:06:13:64:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CF:58:2F:82:40:5C:2D:CD:A8:04:8E:34:C4:33:EC:F4:9C:37:9F
X509v3 Authority Key Identifier:
keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/tc9YL4JAXC3NqASONMQz7PScN58.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.246.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9b:c0:12:a5:c1:4e:9d:db:ab:ee:50:ab:5d:73:19:c7:97:70:
05:b7:16:9d:9f:1d:a9:84:b3:71:11:1e:b6:1e:6d:c4:55:ef:
5d:af:9b:2a:9a:ef:9f:ad:48:c4:6c:d3:12:d2:49:b4:6d:d2:
e7:e3:3d:a2:5a:98:ae:ce:e8:65:e1:a1:30:cd:1f:1b:de:fd:
83:c6:12:ee:24:94:1b:02:fd:57:33:b6:20:42:d2:85:c8:49:
3d:b2:ad:6c:f4:1d:cf:4b:fd:67:19:76:50:a8:8f:68:49:41:
10:c4:b2:fb:6b:c2:dc:90:61:2e:10:a9:89:5d:c2:d2:83:2c:
98:1d:3c:3d:e1:47:63:6e:f1:9c:e4:18:b1:7e:f2:2f:01:db:
ca:9d:06:7b:77:d4:2b:6a:10:7e:db:98:32:7c:73:30:94:1b:
64:49:a2:37:14:1f:e5:e7:38:0c:49:cf:57:f3:ba:2d:24:fb:
ff:3b:39:e2:f0:98:a0:1f:d2:b8:94:64:9f:fa:15:41:6c:56:
c3:de:ec:cf:fc:db:e4:86:c3:c1:96:82:d8:c7:27:6e:f8:67:
cd:ae:ed:0d:c7:cd:ca:d8:8b:1b:77:f4:46:ca:8f:84:7e:a0:
95:98:4e:34:45:3f:7d:5f:0b:df:4d:1b:3e:3a:ff:05:d5:8d:
c7:a0:3a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:10:48 2025 by rpki-client