Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30306/FNpGwCVgmVBB8d64kRQqXP3cXmk.roa
File: FNpGwCVgmVBB8d64kRQqXP3cXmk.roa (raw, json)
Hash identifier: PO9sUR6Q8FJM6ivCdRyjKuwKU96RtctOCkNCKmYm1bw=
Subject key identifier: 14:DA:46:C0:25:60:99:50:41:F1:DE:B8:91:14:2A:5C:FD:DC:5E:69
Certificate issuer: /CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B
Certificate serial: 10
Authority key identifier: 9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/FNpGwCVgmVBB8d64kRQqXP3cXmk.roa
Signing time: Wed 28 Aug 2024 06:46:58 +0000
ROA not before: Wed 28 Aug 2024 06:46:58 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 15830
IP address blocks: 2402:3000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B
Validity
Not Before: Aug 28 06:46:58 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=14DA46C02560995041F1DEB891142A5CFDDC5E69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:9f:c3:07:e4:f1:50:50:1f:29:63:2c:67:
43:b6:33:64:ab:13:4a:15:50:3d:7a:46:50:8b:d9:
0c:33:dd:bb:98:e3:3a:b1:0a:b0:84:79:79:ec:7c:
e0:d8:af:7d:ce:5a:59:67:aa:0d:3d:11:91:eb:a1:
7a:d5:d8:05:27:b8:98:f5:cd:3a:4b:ca:9b:a6:a7:
e7:f6:f3:d0:0b:d0:1e:eb:7f:6b:31:78:ed:e3:53:
3c:c1:c9:f6:fb:84:2f:23:ad:39:f5:64:9c:12:05:
75:01:a5:a8:dc:79:59:65:84:98:11:92:95:ce:31:
20:7d:b4:a5:1f:89:29:0c:ea:11:34:2e:ab:66:61:
28:46:d9:d8:5e:ed:0f:22:8f:1b:6a:95:83:9f:50:
80:19:eb:1b:52:c2:7c:c7:8c:91:e7:90:f9:e3:ee:
cb:0b:08:36:da:a3:d9:38:89:7a:19:6a:2c:b3:70:
a0:00:78:34:2d:9c:12:5f:4c:87:48:ce:4f:23:4b:
54:1f:8e:bd:de:56:9e:e8:a9:91:c4:0b:57:41:f3:
9f:95:69:93:9d:da:bf:66:95:ef:5d:95:37:32:7f:
76:67:00:50:60:c1:28:ca:4e:95:39:21:07:7f:4e:
e5:6c:e1:bf:c3:62:0a:ca:21:75:ca:46:6e:81:2f:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DA:46:C0:25:60:99:50:41:F1:DE:B8:91:14:2A:5C:FD:DC:5E:69
X509v3 Authority Key Identifier:
keyid:9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/FNpGwCVgmVBB8d64kRQqXP3cXmk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:3000::/32
Signature Algorithm: sha256WithRSAEncryption
1f:50:01:a2:93:8b:23:71:0c:37:a0:aa:a9:94:58:86:9e:e6:
8a:6e:b0:83:30:44:41:fb:1d:77:cf:b3:66:c7:b3:45:e4:31:
43:74:4e:4f:72:6f:c2:0e:68:a4:53:88:f6:aa:9b:29:0f:47:
91:f3:43:ca:36:b9:92:61:67:80:b6:02:60:d3:8c:29:fb:38:
1d:2a:51:c8:a3:73:f3:c7:77:f7:76:89:b7:5a:5d:f7:8e:b9:
83:de:61:d2:dd:57:31:79:6f:23:a9:aa:9b:ef:a4:8d:09:74:
41:75:70:86:e1:1c:1b:f6:96:76:e8:b6:86:77:b9:ca:f6:1b:
47:b4:4b:b1:f4:e8:93:07:92:2f:de:8b:47:de:aa:75:72:3d:
da:cd:6b:b8:95:2e:1b:a7:2f:46:55:7d:8f:7e:4d:52:31:74:
83:0b:9f:17:13:c0:5e:ab:90:15:83:73:8d:4e:d1:61:80:46:
23:d9:a1:2e:98:2e:9d:76:05:97:d8:16:a5:52:0e:5d:d3:23:
e3:ba:ec:6a:f4:08:aa:38:e4:88:97:07:3a:00:82:02:12:11:
bc:80:fd:54:62:c6:9b:cf:eb:7e:82:8d:c2:59:2a:7d:b1:8b:
e9:b2:85:36:74:c6:a7:3d:7e:46:fd:ea:49:22:00:6c:b0:bd:
1c:b3:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:45:29 2025 by rpki-client