Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a2pmvSDqVL97tVEIrfGyRLfqsT0.roa
File: a2pmvSDqVL97tVEIrfGyRLfqsT0.roa (raw, json)
Hash identifier: zXBdlcyOx8QzFkREjeRyx058zhgDvFc6I6dIt5rkhpU=
Subject key identifier: 6B:6A:66:BD:20:EA:54:BF:7B:B5:51:08:AD:F1:B2:44:B7:EA:B1:3D
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0411
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a2pmvSDqVL97tVEIrfGyRLfqsT0.roa
Signing time: Tue 01 Apr 2025 01:35:31 +0000
ROA not before: Tue 01 Apr 2025 01:35:31 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:9700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041 (0x411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:35:31 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=6B6A66BD20EA54BF7BB55108ADF1B244B7EAB13D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:8a:0c:7e:f4:c4:3a:6b:9a:8c:e6:64:e9:
3a:02:3c:b9:9e:73:17:48:64:36:fb:2d:7a:74:e9:
51:a4:a8:30:59:85:fc:21:27:a9:04:b1:59:bf:64:
f4:9d:13:1a:cc:36:3f:fb:ba:31:eb:f8:6a:54:2b:
cb:db:33:34:88:2e:a2:a1:fc:e0:e4:18:f5:4f:09:
c9:32:39:39:ce:f8:4b:26:a4:59:82:d9:18:c8:f0:
21:d0:9f:18:4a:b8:56:06:eb:61:6c:5c:b0:d3:60:
10:22:c8:5d:2e:17:8a:81:14:1f:a2:d3:51:46:48:
d4:95:c3:f1:02:2f:66:7f:88:6b:7a:06:49:8b:1e:
a2:26:9a:25:cc:d0:4d:1f:0c:8d:d1:3a:ce:17:ac:
31:66:77:c6:7b:41:7c:8a:a8:e7:99:30:9c:aa:a9:
88:71:ec:ed:18:5a:36:a4:f3:8b:ff:8e:9b:ba:1a:
ed:84:79:6e:dd:62:62:4f:a9:d1:1f:6c:1c:4b:d2:
a6:f2:5e:7e:60:52:49:4b:4a:55:3c:78:18:4c:c3:
c1:c5:d4:76:d5:7e:8b:39:08:e3:c9:4f:0b:78:b2:
55:41:e2:f6:4f:dc:bb:86:16:2e:01:d9:fb:6f:52:
54:17:f6:95:2e:5e:93:65:13:d7:6e:8a:70:3b:cd:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6A:66:BD:20:EA:54:BF:7B:B5:51:08:AD:F1:B2:44:B7:EA:B1:3D
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a2pmvSDqVL97tVEIrfGyRLfqsT0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:9700::/40
Signature Algorithm: sha256WithRSAEncryption
78:d8:27:6a:27:7e:ad:f7:ab:3f:e6:cc:3b:02:5a:6c:83:92:
70:97:85:b2:30:d1:8c:af:21:8f:bb:c2:94:a2:9c:48:68:ae:
36:12:3d:c0:30:80:b9:e5:73:55:1b:5b:29:46:4e:5f:f6:f8:
f7:3d:ad:3c:d4:63:f9:5d:32:e6:3e:11:9c:4f:c4:b7:da:1a:
6b:03:16:fd:56:15:4b:3d:46:8b:cb:72:98:89:38:45:84:2a:
3e:7f:5c:a4:5d:fa:f6:75:98:e6:61:d1:91:ab:75:ec:da:8c:
b6:12:3e:57:20:74:77:dc:54:ca:b2:91:a5:4d:b1:8f:7f:6d:
9f:64:f4:19:77:b9:e4:29:85:84:1e:e8:eb:a8:96:a4:56:28:
65:03:b4:1f:ce:68:67:34:cb:c0:81:e3:ab:e2:fc:f2:f6:f1:
e5:04:5c:d8:d8:8f:af:5e:fd:c6:13:1e:01:9c:e4:d9:1d:2b:
f7:b9:bd:e5:6b:96:d2:8b:7e:3f:f4:16:e6:45:ec:01:b0:4d:
74:8b:fe:cf:1e:4f:c8:65:99:22:34:b4:3d:d2:37:f8:b1:b9:
6d:55:de:9a:eb:2a:89:d5:04:56:c0:40:88:a8:91:66:70:74:
82:fc:b3:83:49:28:ff:86:cc:d9:f7:46:6a:d6:eb:6a:54:8f:
f5:7f:99:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:55:21 2025 by rpki-client