Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B-20sjCaHFEXz4czksbLv6TE9pc.roa
File: B-20sjCaHFEXz4czksbLv6TE9pc.roa (raw, json)
Hash identifier: lYJMoAHMxogaQthacsTC2iULewo8VlFsNRIKR8nMcM4=
Subject key identifier: 07:ED:B4:B2:30:9A:1C:51:17:CF:87:33:92:C6:CB:BF:A4:C4:F6:97
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 04C3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B-20sjCaHFEXz4czksbLv6TE9pc.roa
Signing time: Tue 01 Apr 2025 01:52:53 +0000
ROA not before: Tue 01 Apr 2025 01:52:53 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:a600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:52:53 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=07EDB4B2309A1C5117CF873392C6CBBFA4C4F697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:1a:de:89:68:5d:bb:b6:b6:14:e0:7d:6a:
cc:0f:dd:95:85:1b:27:24:42:e3:d3:78:9d:57:8f:
d3:16:d0:73:6d:70:75:9c:cd:69:05:16:17:aa:45:
64:c2:19:44:f8:bf:af:2e:57:48:a9:83:1b:0c:aa:
68:a1:d4:02:24:14:e6:8a:fb:4d:69:05:36:3b:f1:
79:c5:b5:9d:5e:4d:7f:de:1d:f0:70:9e:a8:a7:9b:
70:c7:8c:3f:b5:0f:64:eb:0f:bf:1f:4b:e9:16:46:
a9:15:d5:84:93:34:48:01:31:53:16:92:ce:22:75:
a6:0c:46:64:22:df:f0:e2:8a:3a:bd:a2:1e:20:69:
03:72:b0:bb:f9:00:85:11:85:30:c0:b1:83:39:ef:
61:c2:50:a4:bc:03:da:32:08:c9:d0:5e:89:13:a7:
17:ff:d7:44:b7:c6:ea:4c:40:f3:13:8c:a7:90:58:
0d:1b:a6:48:a9:4a:16:3b:c3:18:eb:3c:76:d8:c3:
f6:5a:b9:b3:cd:e1:38:fd:59:fa:e4:54:9b:4f:00:
71:4f:04:10:bf:ee:2f:2a:85:f4:87:fc:50:04:6e:
d6:e1:06:10:55:7f:ac:fc:cc:00:5f:79:e5:63:fd:
4b:dc:a6:e3:f2:08:74:e5:bf:32:60:14:83:fc:d3:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:B4:B2:30:9A:1C:51:17:CF:87:33:92:C6:CB:BF:A4:C4:F6:97
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B-20sjCaHFEXz4czksbLv6TE9pc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:a600::/40
Signature Algorithm: sha256WithRSAEncryption
8a:45:b7:ab:96:73:4d:3c:25:87:99:16:62:99:0a:1e:6a:02:
20:f2:8e:b0:15:a7:42:b3:20:b8:66:e3:be:df:47:09:3b:e6:
43:f4:09:b7:1f:b9:f0:8a:da:a1:b3:14:f1:6f:23:d3:e5:95:
bb:af:48:40:c3:d2:c0:bf:e6:ed:d6:2a:95:d4:c0:6f:b7:3b:
c6:f4:b2:4d:40:71:9d:f3:17:c1:fe:d5:98:18:1e:cd:28:3e:
09:1c:3a:18:a1:ca:32:2e:d7:75:41:ce:d7:72:b1:e7:54:47:
6e:15:fb:5e:b7:6b:29:b0:2d:47:6a:36:2b:50:a7:f2:ff:1e:
35:f6:29:c5:54:ad:4d:bb:a1:96:2e:0e:89:90:2d:43:28:b6:
eb:1d:9e:c4:0f:35:ca:67:a8:a2:45:26:d1:e3:bd:bd:8b:12:
59:78:86:64:87:1f:2a:f2:da:ea:a8:3c:dc:c6:6f:be:6f:ec:
96:da:5c:b4:bc:19:1b:de:e5:a2:dc:ea:24:12:99:99:89:bc:
eb:17:d2:5b:c7:db:5b:d8:83:55:2c:f1:ee:98:68:88:34:8a:
7e:60:21:dd:cf:8f:54:0c:25:a7:d2:d3:78:24:ea:26:14:2c:
d7:54:7d:c2:3a:80:dd:ed:f3:45:ca:59:b5:ff:4d:f5:2d:48:
82:9f:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:56:56 2025 by rpki-client