Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FISFkyed90FN1fqowV-Sy_MDC8M.roa
File: FISFkyed90FN1fqowV-Sy_MDC8M.roa (raw, json)
Hash identifier: 7Ur3R/ltXKgqarLKWyNRi71B65ntk1gWRnUbSe34PqE=
Subject key identifier: 14:84:85:93:27:9D:F7:41:4D:D5:FA:A8:C1:5F:92:CB:F3:03:0B:C3
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 03F6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FISFkyed90FN1fqowV-Sy_MDC8M.roa
Signing time: Tue 01 Apr 2025 01:32:08 +0000
ROA not before: Tue 01 Apr 2025 01:32:08 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:9c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1014 (0x3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:32:08 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=14848593279DF7414DD5FAA8C15F92CBF3030BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:6f:13:cb:a2:78:49:a9:3c:33:aa:23:f4:
6d:a0:8a:32:bf:27:9d:98:1d:cf:24:0f:92:3e:ff:
c8:12:2d:d0:75:5b:75:81:f3:73:25:10:8d:1c:18:
fa:b3:23:72:1e:55:bf:ca:6e:2b:4b:3d:63:94:fe:
d2:44:fb:4f:b8:69:94:e2:90:17:c6:62:dd:2f:46:
9b:a3:6a:e4:4d:7d:6b:9a:41:1e:b3:b8:e9:63:8b:
83:d3:70:d2:e8:70:e4:6e:19:2c:44:b1:fa:92:b1:
e3:ea:a7:f4:ed:cd:55:10:af:33:6d:64:b8:bf:8d:
c1:4d:6a:9b:06:84:fe:90:cc:db:82:2c:5d:ab:4f:
de:32:ba:85:c9:84:f1:0b:8b:20:ce:c8:f4:1a:06:
7f:7e:03:31:cd:9e:48:1c:35:ff:19:cb:a6:f7:f5:
41:7e:11:21:cb:af:aa:8f:9f:54:89:3d:0d:bf:4a:
8c:e8:c7:31:34:6c:6f:3e:e6:e1:20:f6:5f:da:0a:
6b:fb:d0:f0:87:7f:28:7c:19:6e:31:7a:94:ad:00:
24:ed:5f:6b:38:c1:2e:6f:5b:84:54:97:9a:7c:26:
ee:73:63:53:e2:78:9e:00:01:74:d8:ee:9c:ff:de:
21:cc:4c:78:5c:5b:61:20:72:df:0f:0b:21:ce:32:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:84:85:93:27:9D:F7:41:4D:D5:FA:A8:C1:5F:92:CB:F3:03:0B:C3
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FISFkyed90FN1fqowV-Sy_MDC8M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:9c00::/40
Signature Algorithm: sha256WithRSAEncryption
7d:79:97:9b:77:40:38:7c:f2:b1:ce:55:a9:8e:e1:5a:73:f7:
d0:91:77:05:2c:ca:d4:01:95:e7:38:cd:27:63:9a:39:5c:99:
39:0b:dc:a0:25:8a:f6:e9:e4:1e:05:4d:6b:f2:52:40:10:2a:
5f:50:17:01:88:00:c4:e6:0f:45:ac:85:5b:89:69:c6:33:14:
4d:9c:ab:75:25:07:71:fe:3c:fb:bf:d7:5b:50:94:25:a4:c9:
77:38:db:92:e5:66:45:a3:43:64:ba:36:a8:1f:39:59:65:ea:
78:99:eb:e1:5b:95:7d:01:2a:16:ee:c7:91:56:17:4f:a3:1f:
98:ae:45:88:d9:be:69:1d:ed:be:09:6a:87:d2:b5:c0:b7:e4:
dc:5a:2f:86:61:60:18:e0:54:d1:2b:e3:6d:76:e0:af:06:d2:
ed:65:e6:57:cb:bf:df:99:5a:7d:32:78:39:61:e4:00:75:f4:
db:c0:74:5c:69:59:95:cd:14:97:bb:8f:de:82:2f:59:35:91:
99:f9:21:e1:a8:55:25:06:56:cf:55:66:c4:8f:2a:4d:2c:19:
e8:89:cb:4e:50:c6:b9:a2:40:c1:c1:b5:f1:eb:d5:1a:31:8a:
f8:ef:75:b9:22:ad:35:15:39:10:2e:e3:56:70:92:89:69:71:
54:a1:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:59:23 2025 by rpki-client