Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YQFqAirPz5OclpjS7I878oC7ZSc.roa
File: YQFqAirPz5OclpjS7I878oC7ZSc.roa (raw, json)
Hash identifier: AwXSyniLY00qPSz7sCkr+KVvaAm7OMl8H/fgkZV3Si0=
Subject key identifier: 61:01:6A:02:2A:CF:CF:93:9C:96:98:D2:EC:8F:3B:F2:80:BB:65:27
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0420
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YQFqAirPz5OclpjS7I878oC7ZSc.roa
Signing time: Tue 01 Apr 2025 01:35:37 +0000
ROA not before: Tue 01 Apr 2025 01:35:37 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:8400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:35:37 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=61016A022ACFCF939C9698D2EC8F3BF280BB6527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:49:7d:76:c6:a8:3b:9c:7e:f0:59:9e:37:
49:a8:7b:d7:f5:16:35:f8:0a:ff:5e:23:70:35:e2:
8a:c1:58:c7:00:bb:e6:fc:4d:7d:c1:ea:9e:79:75:
08:70:37:d8:24:45:2c:5c:ae:3c:04:a2:7e:16:f0:
ab:6b:dd:c8:ea:ef:1b:fd:5c:6b:ea:85:f6:23:9f:
0e:ce:48:50:80:8c:93:3f:02:16:56:0a:a6:91:89:
27:97:5a:df:81:60:5a:b6:73:e8:a6:b2:4d:9c:83:
47:1d:be:0e:cf:81:eb:61:51:6e:fb:a5:3e:eb:75:
a4:25:ca:99:d7:1d:dc:fe:81:3e:6b:a4:bd:95:d8:
ad:cb:f6:f9:b7:6d:f3:ea:38:e9:4e:70:98:49:74:
7b:79:69:8b:eb:a6:e0:2d:4f:32:4e:d1:cf:a1:3f:
d6:c4:eb:1d:ad:94:f3:82:0f:a0:6d:f2:b8:69:ea:
da:f0:97:ca:82:da:8e:9e:d4:0c:06:c4:c6:ac:f1:
52:8a:40:e6:0e:f1:98:e2:cc:a9:9b:a2:3b:8d:77:
f8:bf:ee:9d:01:2f:62:d7:80:91:c6:62:b2:1d:f6:
60:40:e4:d0:37:8f:47:74:ab:4b:b5:64:38:aa:72:
2e:7e:1a:b0:65:38:de:8a:b9:86:30:b0:5a:a7:72:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:01:6A:02:2A:CF:CF:93:9C:96:98:D2:EC:8F:3B:F2:80:BB:65:27
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YQFqAirPz5OclpjS7I878oC7ZSc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:8400::/40
Signature Algorithm: sha256WithRSAEncryption
42:9d:02:5b:dd:d2:12:ac:80:52:4e:e2:5b:ad:0c:39:1d:99:
64:25:87:79:8b:a5:28:56:66:82:e0:64:28:08:90:37:4d:ea:
0f:a1:22:5e:20:c0:a2:d1:d7:0b:23:b7:7e:15:65:c9:22:81:
ab:ab:fe:f4:37:af:f8:12:e4:d0:1a:28:72:f8:f1:d5:37:9c:
55:e6:c0:76:d9:3a:99:34:e4:ab:7a:92:78:7f:d3:00:9b:c0:
4c:ef:66:4f:e9:1a:74:bf:53:53:c4:c4:9d:83:48:c9:ef:e8:
a7:09:2a:1e:b7:26:24:04:d3:e4:63:d9:ff:e9:64:91:fe:2e:
21:c9:2c:c7:d6:63:c4:7c:39:03:b6:8b:7a:7f:0a:a1:de:7d:
ab:79:bb:c3:7b:24:18:ea:c9:93:ba:6e:db:64:7b:35:95:05:
d4:dd:fa:43:53:4e:36:92:3d:66:23:71:ea:be:e8:b6:d7:2b:
33:17:20:e0:92:1c:2c:8c:c8:c5:d0:f3:5d:f3:a6:15:78:30:
01:b5:68:ad:02:6e:76:09:6e:c1:4e:bd:52:ba:66:32:9a:56:
65:1d:7d:49:da:8a:ce:54:08:b1:ae:e8:0b:a3:aa:bc:f3:92:
a5:86:33:1e:7f:84:c1:af:19:ba:1c:ae:68:4d:ce:b6:0c:fc:
38:b2:f2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:52:48 2025 by rpki-client