Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vUxq-ng-GeDhyjlVzKQkm4epHsw.roa
File: vUxq-ng-GeDhyjlVzKQkm4epHsw.roa (raw, json)
Hash identifier: Mc1Aix2F7PerTRUUwwl98EurlX6aX22mc8GeSTTywXg=
Subject key identifier: BD:4C:6A:FA:78:3E:19:E0:E1:CA:39:55:CC:A4:24:9B:87:A9:1E:CC
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0439
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vUxq-ng-GeDhyjlVzKQkm4epHsw.roa
Signing time: Tue 01 Apr 2025 01:39:29 +0000
ROA not before: Tue 01 Apr 2025 01:39:29 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:6f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:39:29 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=BD4C6AFA783E19E0E1CA3955CCA4249B87A91ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:50:aa:3e:f0:2e:90:71:a6:9c:89:89:ec:
e4:2b:75:23:41:3c:12:ec:79:51:33:a4:62:cb:f6:
bc:95:4e:6b:82:3a:a1:29:fc:7c:ce:57:83:77:30:
31:f7:7a:8e:ac:88:1d:6f:7e:e5:34:f0:9b:ed:d2:
a1:1a:bf:9d:a0:83:ff:90:16:ec:ac:66:a6:a9:e9:
fc:cf:8f:d6:e7:15:f6:d7:63:32:0a:56:d6:2e:07:
b6:80:4a:12:42:c9:c7:3c:28:8d:95:c3:8d:13:0b:
02:fb:27:ab:44:e7:65:c4:e6:3e:bb:6e:42:1d:5f:
48:33:dd:0b:7f:fe:97:7e:c1:72:fa:b8:e5:16:33:
26:0e:1f:17:10:f0:bf:e5:2b:f1:98:7e:d3:f5:50:
04:13:91:b3:cf:cd:58:5d:eb:08:16:ca:38:c8:2a:
cc:a0:3c:e3:4e:21:91:aa:c5:8c:3a:6d:98:c3:c7:
32:04:b3:03:33:d9:4b:6a:4c:b7:48:c3:5a:9b:f1:
a1:8c:b3:04:e5:96:08:4c:fa:a1:36:13:6e:cb:c9:
95:8b:3d:ee:66:64:78:d8:02:fd:05:8d:ba:8c:b1:
b1:f4:16:90:29:62:1b:3d:1a:66:e5:42:eb:db:c3:
67:0b:0f:f2:fd:dc:cc:b1:00:c2:91:55:92:89:97:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4C:6A:FA:78:3E:19:E0:E1:CA:39:55:CC:A4:24:9B:87:A9:1E:CC
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vUxq-ng-GeDhyjlVzKQkm4epHsw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
1f:ef:df:d6:a7:da:87:c7:83:49:cc:4d:18:77:17:6c:3b:9e:
0d:2b:b1:ab:0b:b7:b8:14:8d:ae:d8:b4:01:a1:49:f4:98:c3:
d0:70:e9:d2:af:35:15:28:99:33:53:c6:fe:ba:e0:90:4a:2b:
b7:3d:db:fe:f7:62:a0:ef:79:2b:61:22:75:ef:83:09:f1:d7:
b7:69:40:20:1f:d5:e2:ec:93:2c:73:ca:00:da:ba:d7:fa:2a:
2e:16:f6:39:84:b5:4d:3c:47:81:89:e4:5e:86:63:46:0a:72:
df:06:98:c5:b4:e4:1e:52:24:43:0f:9c:97:e4:ad:b3:69:3b:
bf:1f:5a:01:88:98:c9:ce:a2:8c:d4:9e:1e:3b:a6:03:2f:e2:
ff:a2:4b:53:4d:1a:b0:2d:95:4d:2c:29:f2:41:73:f1:08:a4:
9f:17:66:6b:df:ee:b3:84:bb:86:90:8f:70:74:af:c5:1a:82:
6d:bd:7c:15:06:50:ba:7f:45:93:a0:f4:20:be:37:b5:b1:fb:
73:72:7e:c3:b9:a2:2f:e9:d4:c9:65:1f:e3:77:98:83:0d:38:
aa:85:b8:91:50:ea:c8:c1:02:db:70:fa:ec:af:9a:67:2e:c6:
ca:e8:35:73:68:1c:35:82:fd:7b:71:9e:7c:c6:1b:74:31:83:
3c:38:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:13:09 2025 by rpki-client