Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/jHsOoHuXG5eeWqiRxrHSb7OD9dY.roa
File: jHsOoHuXG5eeWqiRxrHSb7OD9dY.roa (raw, json)
Hash identifier: s/2RSNAIirXXklAkljgOyA/QYsu3QUcDCfAHsSr/6WE=
Subject key identifier: 8C:7B:0E:A0:7B:97:1B:97:9E:5A:A8:91:C6:B1:D2:6F:B3:83:F5:D6
Certificate issuer: /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial: 0E
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/jHsOoHuXG5eeWqiRxrHSb7OD9dY.roa
Signing time: Thu 16 Jan 2025 01:38:38 +0000
ROA not before: Thu 16 Jan 2025 01:38:38 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 59108
IP address blocks: 211.14.224.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Validity
Not Before: Jan 16 01:38:38 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=8C7B0EA07B971B979E5AA891C6B1D26FB383F5D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6a:e3:75:b6:41:f7:a7:c9:3d:f4:cc:9c:8f:
a3:c2:48:c8:99:6a:81:eb:65:ed:7a:b6:46:2b:5f:
f9:dc:f9:7d:db:4c:32:e7:4f:a5:36:ae:7a:97:bf:
54:82:a2:d2:2c:8f:8d:3b:8d:eb:bd:d7:ae:1c:3b:
8d:2e:62:6a:61:ce:5a:80:b9:6e:0e:fe:59:90:25:
03:7a:06:77:7a:4b:f6:de:6b:a0:95:47:20:13:e3:
ec:6d:db:f7:ec:cb:ff:2d:2c:40:79:b5:d0:1e:c6:
92:a9:d0:bb:30:78:7f:79:be:2d:83:9a:e1:af:e8:
71:44:50:a0:9c:26:3d:32:20:90:08:91:82:2c:38:
7e:cf:fa:15:eb:1d:e7:db:ce:2b:38:b8:7b:21:b6:
a9:85:ad:97:a5:d0:f4:ec:8c:fd:9b:01:a5:27:97:
d6:60:35:f8:48:63:b2:49:29:02:f9:58:ca:f2:0b:
88:f4:86:74:eb:f4:96:9b:24:d4:2e:16:62:fb:94:
40:bd:72:a6:8a:fc:55:4c:34:7c:20:c3:70:6f:58:
04:a0:7c:80:87:20:bf:82:dd:84:60:ac:15:63:63:
ae:99:d9:60:26:60:7c:06:d0:ab:dd:ee:97:f5:8c:
b8:55:dd:ff:d3:ce:44:9a:4e:89:25:55:99:08:e5:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:0E:A0:7B:97:1B:97:9E:5A:A8:91:C6:B1:D2:6F:B3:83:F5:D6
X509v3 Authority Key Identifier:
keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/jHsOoHuXG5eeWqiRxrHSb7OD9dY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:2d:4a:c6:ae:43:87:7b:de:10:8a:ae:9e:c8:57:ab:cf:b2:
1f:5b:47:bf:f6:21:9f:ae:d1:28:8f:b5:af:97:f1:cd:6d:bd:
08:8e:99:bc:e3:4c:f7:01:f9:65:f3:44:66:8c:9c:09:eb:6a:
2b:ec:a1:67:9c:d1:82:ef:45:da:6e:3f:16:e0:9f:38:08:cc:
92:56:18:34:62:7e:8b:53:50:cb:26:3d:50:90:7d:3f:c0:a8:
fe:37:17:67:05:d5:e5:ca:d8:30:cc:3f:80:e0:a4:0f:68:3a:
3b:48:ea:2d:d0:31:59:1c:0b:da:8f:55:1c:cc:e7:53:ae:6b:
bc:d2:20:0f:34:1d:d4:3c:d1:a0:1a:50:a0:a9:89:ad:aa:e1:
ad:15:d0:0a:16:45:ad:c7:2b:7a:a4:ee:6f:ef:99:e7:d3:28:
65:d9:31:11:eb:af:49:37:2b:ac:e7:21:77:31:f5:74:e3:4e:
04:3e:fb:76:0d:0c:81:17:f5:15:6c:25:4f:2c:99:8e:c0:7e:
a7:7b:ee:03:3d:16:03:88:4b:0e:f0:61:cd:57:91:49:82:87:
9a:3b:37:6e:91:da:92:c6:2a:3a:16:ae:01:8f:97:5f:f5:d7:
6a:f2:cc:ef:dc:13:1d:ee:a8:0b:56:1a:a8:1a:d9:39:ec:9c:
23:e2:27:62
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTRC
MDE1RUM5QTBBNUMwM0Q4ODc5NDY5Q0RBN0M3QzRCOUE2QzEwMB4XDTI1MDExNjAx
MzgzOFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoOEM3QjBFQTA3Qjk3MUI5
NzlFNUFBODkxQzZCMUQyNkZCMzgzRjVENjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPFq43W2QfenyT30zJyPo8JIyJlqgetl7Xq2Ritf+dz5fdtMMudP
pTauepe/VIKi0iyPjTuN673Xrhw7jS5iamHOWoC5bg7+WZAlA3oGd3pL9t5roJVH
IBPj7G3b9+zL/y0sQHm10B7GkqnQuzB4f3m+LYOa4a/ocURQoJwmPTIgkAiRgiw4
fs/6Fesd59vOKzi4eyG2qYWtl6XQ9OyM/ZsBpSeX1mA1+EhjskkpAvlYyvILiPSG
dOv0lpsk1C4WYvuUQL1ypor8VUw0fCDDcG9YBKB8gIcgv4LdhGCsFWNjrpnZYCZg
fAbQq93ul/WMuFXd/9PORJpOiSVVmQjlzT8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSMew6ge5cbl55aqJHGsdJvs4P11jAfBgNVHSMEGDAWgBRZSwFeyaClwD2IeUac
2nx8S5psEDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjcxL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1YWJCQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1
YWJCQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNzEvakhzT29IdVhHNWVlV3FpUnhySFNiN09EOWRZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBdMO4DANBgkqhkiG9w0BAQsFAAOCAQEArC1Kxq5Dh3veEIqunshXq8+yH1tH
v/Yhn67RKI+1r5fxzW29CI6ZvONM9wH5ZfNEZoycCetqK+yhZ5zRgu9F2m4/FuCf
OAjMklYYNGJ+i1NQyyY9UJB9P8Co/jcXZwXV5crYMMw/gOCkD2g6O0jqLdAxWRwL
2o9VHMznU65rvNIgDzQd1DzRoBpQoKmJrarhrRXQChZFrccreqTub++Z59MoZdkx
EeuvSTcrrOchdzH1dONOBD77dg0MgRf1FWwlTyyZjsB+p3vuAz0WA4hLDvBhzVeR
SYKHmjs3bpHaksYqOhauAY+XX/XXavLM79wTHe6oC1YaqBrZOeycI+InYg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:55:23 2025 by rpki-client