Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LRIIp1GTenmGnWHkOe-wh4aiPco.roa
File: LRIIp1GTenmGnWHkOe-wh4aiPco.roa (raw, json)
Hash identifier: THBXthXmIVJ0J+pH6oTOZhp5XjF08I2/EGvwpxhrIQM=
Subject key identifier: 2D:12:08:A7:51:93:7A:79:86:9D:61:E4:39:EF:B0:87:86:A2:3D:CA
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0447
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LRIIp1GTenmGnWHkOe-wh4aiPco.roa
Signing time: Tue 01 Apr 2025 01:39:34 +0000
ROA not before: Tue 01 Apr 2025 01:39:34 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:c400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:39:34 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=2D1208A751937A79869D61E439EFB08786A23DCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:d1:b6:cb:a6:93:cf:a6:7b:c5:5e:ca:76:
95:f5:f1:da:09:8e:90:a3:5e:25:a6:fc:a5:d3:d0:
e6:a3:33:ed:1c:d5:ec:d0:fe:8d:8a:91:6a:09:8e:
14:2c:24:64:3c:33:09:27:64:df:ad:6a:f5:f8:98:
d8:e7:1b:91:df:12:0d:92:6f:d5:01:a0:8a:72:d3:
9e:15:65:65:07:d1:3f:01:f3:d7:db:3b:5c:a8:f1:
8e:e1:36:99:92:c7:38:5f:5a:94:5a:a5:84:26:60:
f9:9e:60:2d:48:78:a8:21:6e:5d:2e:3b:70:ce:e7:
a9:7c:4d:33:ad:11:15:9a:33:54:bb:9d:e7:dd:78:
ef:8b:8e:aa:33:99:bd:46:a2:b5:0e:15:73:a4:5d:
08:8d:73:3d:1f:57:ed:6a:65:5c:3d:47:8d:1c:4d:
2a:a8:c7:e5:e2:b9:89:0f:bf:0d:f1:03:61:87:e9:
5f:82:02:a3:8d:45:53:86:e4:86:15:cd:18:cb:9a:
b5:fd:cb:20:c9:98:cb:a0:d9:6b:29:0a:49:00:4d:
da:5c:b0:46:95:36:8c:53:3e:9c:fb:37:51:27:e1:
9d:da:87:71:a7:0a:de:44:e5:fd:ec:b7:ba:d7:60:
62:f0:69:8e:c0:ae:fa:1c:e3:1b:44:ac:b8:fc:9c:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:12:08:A7:51:93:7A:79:86:9D:61:E4:39:EF:B0:87:86:A2:3D:CA
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LRIIp1GTenmGnWHkOe-wh4aiPco.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:c400::/40
Signature Algorithm: sha256WithRSAEncryption
7f:11:d3:91:2a:ef:7a:5c:0b:e4:f9:a5:16:fd:c7:b1:c5:a0:
a2:00:d2:2d:ff:0e:97:a1:6c:d5:e2:70:d5:7a:06:ef:ec:c9:
eb:84:e2:f0:d6:f3:2a:c4:fb:90:35:40:9b:c2:63:fa:7c:f0:
81:e2:33:10:9f:ee:f5:49:b0:a5:16:0a:c9:0d:71:1a:0e:a4:
63:60:a7:42:0d:6f:02:7b:f1:0e:b3:c5:10:d1:f5:46:23:30:
9a:8d:df:87:9a:cc:0a:36:a2:ae:88:69:2f:1b:48:b7:5e:d6:
c2:c0:9f:45:ad:7f:d4:ff:ab:fb:e9:0b:d7:4f:e2:48:d2:67:
88:60:ed:a5:ff:7e:34:a3:fe:f1:be:d5:1e:5b:3d:a0:04:32:
37:cd:7e:3b:9a:a4:55:15:4b:cf:e0:72:90:8a:fd:b0:40:f3:
41:de:fb:e4:c9:1d:22:b6:33:1a:28:3e:9d:6d:00:1a:47:c4:
43:3f:05:7d:a0:3e:16:dd:0e:47:38:32:08:3d:8f:b1:50:16:
ff:cf:c1:15:e1:25:38:b9:a2:c2:b4:ef:4f:a2:71:51:ec:6b:
b1:5d:3a:25:5b:a4:ae:6e:b6:07:e0:d1:8b:f7:46:70:f4:92:
6b:be:2d:1d:14:12:58:7d:b3:56:07:41:51:e3:f4:18:6c:df:
a3:0a:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:05:38 2025 by rpki-client