Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pmEqHa2oOeh44xRZK46XCII24Ik.roa
File: pmEqHa2oOeh44xRZK46XCII24Ik.roa (raw, json)
Hash identifier: uVJq6a8zIBEkcrSL98fY6wC6VjdX5HzqtkYDym3rqY0=
Subject key identifier: A6:61:2A:1D:AD:A8:39:E8:78:E3:14:59:2B:8E:97:08:82:36:E0:89
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 03A5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pmEqHa2oOeh44xRZK46XCII24Ik.roa
Signing time: Mon 17 Jun 2024 09:04:34 +0000
ROA not before: Mon 17 Jun 2024 09:04:34 +0000
ROA not after: Sun 15 Jun 2025 01:30:03 +0000
asID: 9605
IP address blocks: 240a:61:8e00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933 (0x3a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Jun 17 09:04:34 2024 GMT
Not After : Jun 15 01:30:03 2025 GMT
Subject: CN=A6612A1DADA839E878E314592B8E97088236E089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:69:98:32:8e:f3:29:48:03:d3:73:25:bb:
d1:b8:57:5f:d3:33:d9:7f:a7:82:c2:6e:1a:1d:6b:
26:6c:76:b5:f7:0c:20:4f:eb:91:0e:69:62:39:a0:
d9:f4:d9:e8:5d:67:7c:63:46:25:47:7b:79:0d:20:
97:8e:34:98:45:38:97:30:7b:a0:7e:69:c2:8b:44:
c4:fe:0f:d9:94:3d:18:54:22:a6:54:d7:60:11:85:
9d:5e:c4:e1:db:f4:e7:e4:14:d9:c3:80:cd:ba:38:
ab:7b:67:ef:ac:ee:e1:1c:97:c0:88:bc:36:c1:06:
78:84:0d:c5:bd:2b:67:a7:e9:ac:85:f1:ae:cc:d1:
23:6a:3f:a9:59:89:ff:46:ba:5a:1d:67:2f:10:01:
81:bd:81:5c:2a:f0:c1:0b:43:f9:9b:f5:c5:d8:b4:
18:24:f1:7c:d9:11:8f:13:a1:4e:f1:30:02:ec:0e:
d2:bb:0c:2b:92:ad:f7:80:72:2f:58:6f:28:8e:bf:
30:eb:35:c7:ce:a1:e4:eb:21:81:4a:e2:47:ae:00:
2c:6c:ab:83:4a:57:91:24:3c:88:89:36:0a:c7:7e:
87:9a:61:f4:0f:b1:5e:a9:31:d4:0d:b6:e8:a4:04:
40:b3:f3:5c:39:7f:62:44:ae:5c:4f:93:cc:29:03:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:61:2A:1D:AD:A8:39:E8:78:E3:14:59:2B:8E:97:08:82:36:E0:89
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pmEqHa2oOeh44xRZK46XCII24Ik.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:61:8e00::/48
Signature Algorithm: sha256WithRSAEncryption
72:a6:37:73:8d:ef:b5:91:27:01:d5:43:a0:81:e1:64:1d:7a:
c0:ab:ce:55:5c:13:8a:02:c1:04:00:cd:c5:e2:9a:05:5b:2f:
be:fe:06:b8:ea:d6:59:25:68:2a:b8:af:ef:d9:17:0a:18:6d:
cc:63:26:05:54:1c:56:8f:48:6b:62:e0:54:89:2a:2d:e3:25:
e9:06:02:9e:5e:10:35:57:4d:f9:23:6f:45:31:50:db:58:af:
df:f0:cf:28:c7:ef:a1:1c:84:2d:20:84:1e:b1:b6:a9:6b:f4:
4e:02:9f:ab:00:b7:23:fd:67:6c:89:7b:95:cf:ff:b2:0d:de:
2c:ec:b1:73:ac:96:58:49:7f:dc:04:3d:18:85:3d:70:16:d2:
b9:a7:4d:5c:6c:59:41:5e:2a:7d:9d:53:c7:d3:b9:d5:f4:91:
e3:f6:5d:8f:bb:25:27:f2:65:a7:61:e7:2a:c9:00:25:8d:66:
15:6d:3a:90:f3:2c:a1:5e:87:f9:4b:75:75:ec:65:45:30:8a:
27:a0:f4:5b:05:7d:a8:f0:65:ac:cb:2e:0a:09:7b:54:66:36:
61:72:15:b5:d7:49:11:df:cc:a4:6c:bc:1c:c5:3b:08:d1:bc:
24:ee:38:b2:ad:d8:00:23:ab:a6:e0:bc:3d:74:f5:64:f1:24:
a7:0f:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:05:43 2025 by rpki-client