Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wjPfzpfgj68L-YCiaHRDXthvhqQ.roa
File: wjPfzpfgj68L-YCiaHRDXthvhqQ.roa (raw, json)
Hash identifier: 8j7DJiu74r/+hXnh8BOsW4vWE6bYMIid4bVTUvRhR4s=
Subject key identifier: C2:33:DF:CE:97:E0:8F:AF:0B:F9:80:A2:68:74:43:5E:D8:6F:86:A4
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 03F0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wjPfzpfgj68L-YCiaHRDXthvhqQ.roa
Signing time: Tue 01 Apr 2025 01:32:05 +0000
ROA not before: Tue 01 Apr 2025 01:32:05 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:cc00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1008 (0x3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:32:05 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=C233DFCE97E08FAF0BF980A26874435ED86F86A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:dd:b9:17:18:48:34:08:67:bc:45:53:ab:
ac:87:b6:12:53:c8:b6:b1:67:59:1c:f6:ad:7e:44:
87:de:86:8c:83:69:96:1c:eb:70:4c:f2:4c:f2:09:
38:18:af:61:4a:a7:9c:b8:a9:34:48:61:9e:72:43:
82:46:a1:86:a0:82:f8:49:bb:ac:14:bf:cd:66:3a:
a3:80:ee:63:a6:27:08:55:1c:36:32:45:ff:e4:58:
da:2c:b2:e0:36:05:d3:e9:26:19:cb:5e:bf:53:5a:
23:3f:b8:58:06:85:1a:4a:78:b3:90:ce:f2:e8:6c:
df:84:a0:e4:a1:c8:bb:88:bb:8a:d9:4f:c3:46:40:
b6:52:6b:c1:a7:26:4c:72:17:63:f6:3b:84:0f:88:
a6:d9:c8:85:c4:d5:7b:f2:52:43:ad:85:71:1d:1d:
ec:3c:5d:2c:9f:a9:24:d2:3e:06:65:77:9e:c1:a9:
fe:79:ef:68:d7:a6:13:b5:d1:11:db:7e:9d:dc:05:
95:1d:00:12:16:e8:7a:66:da:f2:9f:b0:79:de:67:
b4:5a:cf:1e:1b:8e:57:2a:62:b9:bf:5d:4e:2a:98:
99:12:c1:06:81:b8:c3:af:75:6f:36:46:be:08:62:
e1:aa:5c:47:2f:0f:f2:e8:78:d3:bd:9e:3a:d1:86:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:DF:CE:97:E0:8F:AF:0B:F9:80:A2:68:74:43:5E:D8:6F:86:A4
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wjPfzpfgj68L-YCiaHRDXthvhqQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:cc00::/40
Signature Algorithm: sha256WithRSAEncryption
80:33:dc:d4:b6:dc:e7:c0:4b:9d:d5:bd:32:c6:0d:b3:f5:a1:
51:12:1b:a8:b1:10:9d:c5:16:07:78:9a:58:99:79:8f:21:ef:
7b:0f:c3:a0:15:c1:7e:5e:a1:ad:6e:85:b4:ce:01:68:a6:0e:
6a:38:18:16:20:ad:b4:e0:36:a7:ea:48:63:e5:44:28:85:92:
eb:fb:55:dd:01:5f:bb:6e:57:51:27:67:c2:25:59:ac:4f:5c:
fa:35:75:8c:99:41:01:87:8d:94:f9:c0:53:34:29:47:fb:03:
ba:3f:81:91:12:22:45:87:ec:10:88:3e:e9:00:e4:b9:94:a8:
50:de:64:20:80:0e:41:3b:03:e8:67:6e:06:2e:e0:4f:c7:dc:
a6:f4:cb:c1:02:c3:32:6c:c6:76:13:64:57:01:46:f8:ab:df:
af:3d:ec:f3:39:f7:67:60:9a:7d:2b:f4:bb:a4:68:ab:89:64:
f8:e6:1a:69:58:7c:69:1b:83:26:e0:cf:20:8f:8a:ff:58:96:
e8:33:a9:58:be:27:78:f5:7e:57:30:28:29:8e:88:f1:8c:81:
82:5f:e7:09:d2:96:87:28:ee:70:28:f4:d9:fb:f3:b6:4a:72:
2d:c3:2f:d1:fb:89:8c:39:c8:4f:0a:a8:5b:d4:ae:72:ce:42:
ef:85:fc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:05:25 2025 by rpki-client