Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t8sPylhxPHTUMqjzhrDoDjXOVFM.roa
File: t8sPylhxPHTUMqjzhrDoDjXOVFM.roa (raw, json)
Hash identifier: M+hw4rvT0Q5F3LtvdX7J4hIH/vbH3VyLA82LDa5vxB4=
Subject key identifier: B7:CB:0F:CA:58:71:3C:74:D4:32:A8:F3:86:B0:E8:0E:35:CE:54:53
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0437
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t8sPylhxPHTUMqjzhrDoDjXOVFM.roa
Signing time: Tue 01 Apr 2025 01:39:28 +0000
ROA not before: Tue 01 Apr 2025 01:39:28 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:70:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 15:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:39:28 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=B7CB0FCA58713C74D432A8F386B0E80E35CE5453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e4:d8:2b:5e:0e:11:1f:5c:c1:e3:b9:ae:f5:
35:c4:0c:ce:4b:a2:2f:32:36:34:40:78:55:ce:07:
5d:83:33:70:48:28:20:22:d2:e5:49:ec:8f:11:fc:
6d:6a:d5:6e:7c:5d:f4:8c:52:af:eb:0a:aa:94:05:
f3:94:2f:69:58:5d:67:25:6b:dd:bd:d1:61:32:44:
4c:52:eb:33:40:31:c3:02:4d:77:5a:ef:b9:0f:7b:
7f:37:92:10:be:f7:a7:38:30:72:72:f1:b3:13:6e:
db:62:16:50:09:a2:f7:13:55:bc:f4:01:8d:1b:d7:
49:97:b0:e9:7f:a8:79:34:f5:2b:a5:f2:35:02:79:
58:3f:0b:bc:7f:d5:5d:05:a5:f6:64:07:f9:30:ea:
a4:75:cf:c6:c0:66:0e:38:fb:87:7a:12:91:f3:60:
6a:be:8a:e8:8a:7a:55:ee:91:17:2e:b3:63:1d:0e:
84:56:ea:70:19:24:2d:fa:d6:cc:f7:ba:f7:0c:02:
80:a1:50:d0:bc:e4:83:8b:ee:a4:2a:35:2c:d4:e2:
28:84:0b:32:c0:7d:ca:cd:68:c8:e2:48:e1:64:56:
ed:1e:a5:2f:46:77:18:fa:06:5b:8d:c4:01:fe:31:
54:63:45:16:21:53:43:ee:50:ba:03:5e:ca:01:e5:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:0F:CA:58:71:3C:74:D4:32:A8:F3:86:B0:E8:0E:35:CE:54:53
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t8sPylhxPHTUMqjzhrDoDjXOVFM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:70:9::/48
Signature Algorithm: sha256WithRSAEncryption
59:a4:98:63:da:09:01:01:b9:ac:ce:38:9d:66:92:9b:d6:9e:
99:39:6e:1c:fb:b9:9e:17:18:d3:a3:de:a6:7a:c5:c7:eb:85:
75:a2:2b:24:e2:9c:60:ea:28:17:7e:57:f8:7d:3a:0d:f3:4e:
90:05:ca:01:52:2b:cd:d2:70:2e:98:84:7f:ca:a2:9d:05:c8:
8d:2b:94:e5:37:3a:b4:46:9a:1f:19:f5:bf:8e:83:09:7c:df:
a5:72:4f:24:c5:6e:7e:53:e5:0d:0f:91:67:3e:7b:73:3d:79:
8b:cc:3b:60:73:e6:86:4b:59:85:d3:36:13:f2:fe:4d:d9:d5:
35:34:af:ca:30:24:d2:eb:df:b7:74:71:7a:36:d9:81:34:06:
85:61:20:3e:ea:57:6e:97:41:69:49:6e:44:31:ed:27:2e:27:
5c:e5:a0:4b:fb:c9:88:5e:91:e9:5f:c2:46:cc:2e:c8:5c:d7:
54:c8:b6:a3:41:f9:ab:4d:41:a1:b5:37:6e:48:fc:15:7f:37:
c7:c9:8d:cd:0d:93:0f:05:d7:1f:51:b7:50:a6:30:81:db:63:
29:b2:e3:95:c3:22:bf:48:5d:b3:3d:c2:ff:74:15:e8:88:45:
ae:08:0d:f7:69:2c:9e:68:14:de:01:d6:3b:27:8c:cf:fa:02:
e8:2b:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:55:07 2025 by rpki-client