Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r5Ea5dHi6pn1O4EEbaBbAWvxE-c.roa
File: r5Ea5dHi6pn1O4EEbaBbAWvxE-c.roa (raw, json)
Hash identifier: wUAtFNkgfYRq97JgImIK+P/b6mU7Xn9Ya08rc4QhpTY=
Subject key identifier: AF:91:1A:E5:D1:E2:EA:99:F5:3B:81:04:6D:A0:5B:01:6B:F1:13:E7
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 03E7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r5Ea5dHi6pn1O4EEbaBbAWvxE-c.roa
Signing time: Tue 01 Apr 2025 01:32:01 +0000
ROA not before: Tue 01 Apr 2025 01:32:01 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:f600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 18:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:32:01 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=AF911AE5D1E2EA99F53B81046DA05B016BF113E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:3a:5c:41:8d:88:e5:11:e0:96:af:58:3a:
2f:13:76:05:1b:63:b7:e3:2a:b3:a1:2c:9f:d9:69:
15:62:66:72:7a:a0:0a:6f:06:44:b5:2c:62:d1:3c:
d7:ae:a2:96:4d:3b:7c:da:a5:71:f2:d0:8c:e6:91:
31:c0:e3:c9:ec:e1:08:09:bf:1c:b9:c5:43:38:0a:
47:bb:c5:72:14:de:cc:58:7e:f7:26:28:08:bc:05:
6e:f5:4c:79:66:02:2e:cc:7f:c4:00:42:c9:2e:e6:
08:53:f4:6a:39:9e:34:7e:03:1c:f4:e9:ec:7e:c5:
80:8b:6a:4e:a6:a3:11:6e:49:3a:25:ca:1d:7e:7f:
38:ff:9f:65:12:c2:be:b5:e7:5e:d7:55:44:f4:de:
09:fd:e9:1a:98:f3:c6:45:1e:51:d4:b6:11:09:53:
e5:a6:a7:7b:07:4f:d0:13:b1:64:6a:f8:5a:55:16:
cf:67:e3:14:6b:fc:cc:86:f6:6c:f9:1a:be:d2:ce:
76:d5:d2:af:81:58:75:3e:9d:2d:7a:20:cf:bf:5d:
18:24:cb:b3:c2:f8:54:ef:72:9d:0b:c7:36:c6:4f:
1d:b1:86:ca:99:86:f4:7a:87:66:5c:8c:a5:11:a5:
36:dc:27:f5:6f:bf:21:79:36:94:ba:3d:a8:73:f6:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:1A:E5:D1:E2:EA:99:F5:3B:81:04:6D:A0:5B:01:6B:F1:13:E7
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r5Ea5dHi6pn1O4EEbaBbAWvxE-c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:f600::/40
Signature Algorithm: sha256WithRSAEncryption
34:71:f0:4c:ba:c2:9e:5e:8c:94:45:b2:2f:5b:f1:e5:8e:2a:
69:f8:a2:23:94:fb:15:23:76:8b:6d:8d:a2:a5:5d:b4:ae:4a:
72:11:03:f7:d9:21:fc:61:70:eb:7d:87:b8:a7:5f:de:a8:b2:
a8:56:50:1d:90:65:96:08:5f:93:e7:e2:13:41:9b:58:de:42:
ba:c8:1c:83:bc:4a:92:94:0a:b0:f4:bb:ee:fb:62:a3:30:ab:
d3:25:ee:e2:18:96:5a:7c:35:0e:32:00:cb:ab:fa:e5:b1:82:
70:e3:95:40:20:a6:cd:8a:b2:95:35:a6:bf:cf:cb:60:ae:b4:
a7:bf:8f:e2:e7:4f:6c:91:51:fc:98:8e:4a:e7:71:36:5d:35:
5e:93:21:de:fe:cd:36:81:e8:12:0a:0e:b1:ec:10:d5:f7:ef:
72:14:8f:d0:0f:50:dd:e1:e5:eb:20:8d:be:93:ab:a6:ac:6d:
ac:0c:d4:ae:4e:1b:c9:74:4f:6b:83:61:16:eb:b5:86:02:30:
80:bb:1c:bf:a7:65:c0:ca:d9:01:0b:61:e8:07:54:09:be:52:
f5:b6:e7:4d:a5:bf:4f:87:b1:1a:6d:c0:ef:ed:26:2b:02:58:
41:dc:54:91:92:30:4e:87:a7:a0:92:0b:7e:59:22:d0:d9:e3:
48:38:f3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:49:44 2025 by rpki-client