Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8Jd0f1_37Lsiw9YJVGdFycX2iHA.roa
File: 8Jd0f1_37Lsiw9YJVGdFycX2iHA.roa (raw, json)
Hash identifier: tPdf8/fcEOCDxD61jIo1gx5X7FZ03NAZew+f2F5ZfzU=
Subject key identifier: F0:97:74:7F:5F:F7:EC:BB:22:C3:D6:09:54:67:45:C9:C5:F6:88:70
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0456
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8Jd0f1_37Lsiw9YJVGdFycX2iHA.roa
Signing time: Tue 01 Apr 2025 01:42:24 +0000
ROA not before: Tue 01 Apr 2025 01:42:24 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:6c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:42:24 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=F097747F5FF7ECBB22C3D609546745C9C5F68870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:a7:f0:4c:ae:d5:56:0b:1e:6c:f5:29:23:
12:2e:ed:ee:88:1e:21:89:34:17:25:ab:2d:96:ef:
8c:c1:f9:12:08:74:82:9f:b3:3d:63:80:95:dc:e5:
91:e6:33:9a:b5:cb:a6:aa:16:b5:4a:51:cc:32:6d:
2d:e0:c2:2b:a4:bb:47:b4:f1:55:e5:1f:3a:a6:bc:
cf:e4:6d:b4:d6:d4:a8:e2:99:66:d8:92:9e:30:7d:
ca:01:04:ae:45:c1:46:63:76:94:ae:b2:da:6b:e1:
3c:2a:1d:76:11:2a:84:72:f9:37:25:59:f8:22:27:
b6:44:17:63:34:d8:af:e7:78:51:43:62:91:05:a3:
ea:07:d8:40:c8:51:ec:84:91:ae:41:be:02:c3:99:
c0:b9:59:6e:42:56:3a:16:6c:11:63:94:43:a4:48:
67:d4:d7:46:98:26:ba:0d:a4:d1:45:92:70:7b:bf:
1f:b4:5f:46:29:cc:3d:60:ae:79:d0:e9:d0:7e:4a:
04:92:d6:96:db:14:71:91:3f:54:7c:0d:50:25:72:
66:30:89:05:43:d2:a0:0d:5e:d9:54:28:10:21:af:
f2:23:b0:b7:0a:92:b2:ab:91:a8:e0:96:b9:0a:a2:
ff:85:3a:20:99:f7:ee:f1:7f:ec:73:a4:fd:91:d4:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:74:7F:5F:F7:EC:BB:22:C3:D6:09:54:67:45:C9:C5:F6:88:70
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8Jd0f1_37Lsiw9YJVGdFycX2iHA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:6c00::/40
Signature Algorithm: sha256WithRSAEncryption
79:20:c6:3a:b2:1e:b0:65:d6:d6:5a:bd:22:e7:f6:12:c6:02:
61:35:66:a4:97:5a:4e:44:d9:be:b1:a5:23:e5:28:12:51:f3:
91:8c:bc:36:14:1b:dc:60:bb:16:55:f9:ff:57:f4:91:f6:52:
0c:7d:82:cf:46:bd:29:07:d9:0e:57:b2:ed:1e:47:c5:a8:14:
0a:22:9d:5b:9a:22:d9:cc:08:50:57:37:04:42:cd:53:b7:c2:
bf:55:44:9d:1c:f5:55:e2:d8:02:72:79:c5:9e:19:6a:79:22:
76:c3:23:46:ca:99:09:77:a1:b2:e8:0d:c4:77:1b:1a:9f:63:
0a:72:dc:6b:87:38:be:11:df:66:10:0f:03:16:f9:25:af:94:
c5:b6:af:b0:8d:2a:34:ba:f1:fd:8f:c1:f0:d9:f9:0e:88:81:
a9:b5:5d:84:af:cf:32:16:d3:5c:a0:5a:83:82:0d:88:e0:ad:
df:9c:45:12:c5:d9:28:64:7c:c1:73:6f:7c:e7:74:a0:81:b2:
f5:6c:ff:fc:74:fd:89:40:9b:4c:06:80:1f:0f:1d:63:34:24:
d3:9a:13:a9:03:79:76:2b:b3:a8:bc:5b:f6:7b:09:3c:45:c8:
5b:93:ae:69:a7:ef:c5:f6:f9:fe:ec:2a:76:03:04:95:ac:f9:
08:ba:61:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTQyMjRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYwOTc3NDdGNUZGN0VD
QkIyMkMzRDYwOTU0Njc0NUM5QzVGNjg4NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC97afwTK7VVgsebPUpIxIu7e6IHiGJNBclqy2W74zB+RIIdIKf
sz1jgJXc5ZHmM5q1y6aqFrVKUcwybS3gwiuku0e08VXlHzqmvM/kbbTW1KjimWbY
kp4wfcoBBK5FwUZjdpSustpr4TwqHXYRKoRy+TclWfgiJ7ZEF2M02K/neFFDYpEF
o+oH2EDIUeyEka5BvgLDmcC5WW5CVjoWbBFjlEOkSGfU10aYJroNpNFFknB7vx+0
X0YpzD1grnnQ6dB+SgSS1pbbFHGRP1R8DVAlcmYwiQVD0qANXtlUKBAhr/IjsLcK
krKrkajglrkKov+FOiCZ9+7xf+xzpP2R1Lt9AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU8Jd0f1/37Lsiw9YJVGdFycX2iHAwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS84SmQwZjFfMzdMc2l3OVlKVkdkRnljWDJpSEEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa2wwDQYJKoZIhvcNAQELBQADggEBAHkgxjqyHrBl1tZavSLn
9hLGAmE1ZqSXWk5E2b6xpSPlKBJR85GMvDYUG9xguxZV+f9X9JH2Ugx9gs9GvSkH
2Q5Xsu0eR8WoFAoinVuaItnMCFBXNwRCzVO3wr9VRJ0c9VXi2AJyecWeGWp5InbD
I0bKmQl3obLoDcR3GxqfYwpy3GuHOL4R32YQDwMW+SWvlMW2r7CNKjS68f2PwfDZ
+Q6Igam1XYSvzzIW01ygWoOCDYjgrd+cRRLF2ShkfMFzb3zndKCBsvVs//x0/YlA
m0wGgB8PHWM0JNOaE6kDeXYrs6i8W/Z7CTxFyFuTrmmn78X2+f7sKnYDBJWs+Qi6
YSw=
-----END CERTIFICATE-----
Generated at Mon Apr 14 15:05:23 2025 by rpki-client