Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30236/eo-e9dmTO9o6OKtGdLCKdxKvD-c.roa
File: eo-e9dmTO9o6OKtGdLCKdxKvD-c.roa (raw, json)
Hash identifier: Hkr8flNkFopiq2h3TYfaDU+Ay+74Hby1TZ+Kp6oJVBg=
Subject key identifier: 7A:8F:9E:F5:D9:93:3B:DA:3A:38:AB:46:74:B0:8A:77:12:AF:0F:E7
Certificate issuer: /CN=9D5A540C122FD0C70CE511170044FF6580D7631B
Certificate serial: 02
Authority key identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/eo-e9dmTO9o6OKtGdLCKdxKvD-c.roa
Signing time: Wed 05 Mar 2025 12:44:54 +0000
ROA not before: Wed 05 Mar 2025 12:44:54 +0000
ROA not after: Thu 05 Mar 2026 12:32:31 +0000
asID: 9607
IP address blocks: 2404:c700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D5A540C122FD0C70CE511170044FF6580D7631B
Validity
Not Before: Mar 5 12:44:54 2025 GMT
Not After : Mar 5 12:32:31 2026 GMT
Subject: CN=7A8F9EF5D9933BDA3A38AB4674B08A7712AF0FE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d7:c1:a7:47:9c:9b:4d:39:0b:53:03:e2:8a:
fb:a7:b8:9a:a6:9b:f1:42:49:e6:b7:11:07:5f:91:
b5:53:5d:ff:46:c4:4a:a6:55:6b:52:95:f5:15:82:
27:05:fa:2f:3a:bd:a3:f0:f2:82:ea:40:81:76:0a:
1e:1d:31:13:74:52:0c:dc:5c:69:70:8e:ce:a9:3e:
0e:f6:e8:86:38:32:d1:0c:ae:68:dc:03:ee:b1:ab:
69:f2:3c:fd:cc:73:0b:96:40:6c:7c:92:b9:91:d4:
ee:a9:e3:36:5c:a6:ce:fc:58:16:22:7b:9d:c5:f8:
6e:65:a1:70:ef:cf:0d:38:36:55:42:88:4c:b5:fb:
97:f2:12:67:bc:fb:b7:9b:39:23:56:df:ef:fb:bd:
1e:d7:93:ef:6d:22:4b:a0:d5:97:2d:d7:5a:21:df:
95:1c:77:b1:cf:93:0b:d5:cc:c1:97:74:64:b8:0c:
a6:06:79:1c:98:b4:69:10:63:4a:7a:38:95:e3:ee:
61:c8:61:0d:1c:ff:26:47:44:f7:8a:ee:c2:e2:68:
09:b0:a7:c0:67:dd:bf:c4:10:54:d7:de:2f:9b:29:
9f:d3:e3:cf:2d:cb:30:d4:64:d3:9b:b7:9f:2d:6c:
39:38:7c:f4:1f:21:5d:50:02:a9:e3:93:54:7f:94:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8F:9E:F5:D9:93:3B:DA:3A:38:AB:46:74:B0:8A:77:12:AF:0F:E7
X509v3 Authority Key Identifier:
keyid:9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/eo-e9dmTO9o6OKtGdLCKdxKvD-c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:c700::/32
Signature Algorithm: sha256WithRSAEncryption
ac:92:ac:bc:73:d0:63:39:49:70:6a:20:9a:cc:e9:45:01:1d:
01:8d:d8:ee:f0:ee:a1:66:9d:6c:d7:f7:84:0d:2c:0e:c0:c4:
8b:e7:1a:e3:84:fe:35:88:29:ef:05:01:cd:a9:b1:62:fc:8f:
64:74:e3:53:76:31:1f:64:96:a0:95:66:fd:26:d5:23:85:35:
1b:d1:3c:25:68:18:03:13:1e:78:fd:30:e5:5b:7c:21:35:21:
53:05:ed:a4:b9:5f:40:c7:f8:7b:3d:a2:9a:58:23:68:a5:9c:
c2:b2:ac:9c:b0:a1:2a:ad:ef:7e:ed:4c:02:f5:5c:5e:b7:60:
5b:08:9a:ab:76:e1:a3:30:95:5c:49:a1:af:05:1d:c2:9c:b0:
4a:f2:32:2f:1d:55:d5:7c:fc:c7:0a:19:42:20:9f:67:42:bb:
e7:48:19:fe:ed:76:0f:79:62:44:cf:a5:c5:f1:5d:19:85:f3:
30:f0:40:26:72:ce:0d:15:17:b6:9d:f0:36:1c:5c:8b:36:47:
38:01:d1:15:eb:df:9c:0b:4a:19:b6:cd:cf:c6:a6:80:d2:4b:
12:99:6d:0d:ea:24:bc:56:41:d8:a3:f8:f8:ea:f8:c8:f3:01:
eb:33:8c:77:91:a6:76:e5:a7:be:49:6a:a5:9d:7b:99:1d:ed:
32:60:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:43:04 2025 by rpki-client