Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30359/24qM09NdTdNTYYec820kwWlvXns.roa
File: 24qM09NdTdNTYYec820kwWlvXns.roa (raw, json)
Hash identifier: Vtt59R6rDihpCFOBrfuOpd+7dJW08/RTv5xHIueKTZo=
Subject key identifier: DB:8A:8C:D3:D3:5D:4D:D3:53:61:87:9C:F3:6D:24:C1:69:6F:5E:7B
Certificate issuer: /CN=675815DB7349C2ACFBC48AA75306520050C26248
Certificate serial: 39
Authority key identifier: 67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/24qM09NdTdNTYYec820kwWlvXns.roa
Signing time: Sun 30 Jun 2024 01:31:45 +0000
ROA not before: Sun 30 Jun 2024 01:31:45 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 55898
IP address blocks: 2405:8500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675815DB7349C2ACFBC48AA75306520050C26248
Validity
Not Before: Jun 30 01:31:45 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=DB8A8CD3D35D4DD35361879CF36D24C1696F5E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:5a:65:d7:cc:9c:8e:77:92:98:c9:ec:14:
74:4e:d0:0a:e4:b9:47:3d:59:64:b8:7e:c2:b2:d2:
f3:bf:67:96:16:e1:33:6a:00:52:63:42:9a:b8:07:
da:67:6b:09:36:cc:a6:fb:74:11:69:d9:00:bb:78:
28:97:6e:44:2a:8c:f8:6a:f4:f8:cc:4f:44:4a:4c:
1c:d5:5c:02:7f:1b:2b:8e:55:48:53:d9:96:d8:77:
fc:85:d1:aa:fa:1f:ae:c1:ae:f4:f8:c2:00:a9:84:
7e:fb:50:20:e5:da:9e:70:0e:e5:04:9c:66:64:1b:
32:7f:cd:44:ba:6f:6e:3c:1c:84:3f:19:0e:0f:bb:
f6:1b:f7:1b:33:f4:6f:81:d8:1b:fa:f2:9b:36:de:
43:24:0a:93:b0:fc:2f:28:68:ae:8a:b1:d0:ae:29:
92:6b:03:9a:53:2a:30:b6:46:51:b4:07:dd:61:68:
c6:93:fa:15:3b:5f:d2:1d:1d:73:21:6d:be:0d:df:
5d:46:6a:82:04:4c:86:3d:95:c7:9b:12:4d:44:b7:
e1:83:74:60:7a:3c:0d:3d:1b:1a:c1:83:32:f6:fc:
d7:db:c9:7a:79:4d:ed:7f:12:d9:4b:a5:3a:d1:d7:
db:de:38:c9:29:9b:e2:67:f6:a2:44:25:44:94:9f:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:8C:D3:D3:5D:4D:D3:53:61:87:9C:F3:6D:24:C1:69:6F:5E:7B
X509v3 Authority Key Identifier:
keyid:67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/24qM09NdTdNTYYec820kwWlvXns.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:8500::/32
Signature Algorithm: sha256WithRSAEncryption
a5:6b:f1:63:98:15:02:14:60:19:19:8c:e5:04:24:fe:4d:75:
af:97:90:23:33:ab:2e:74:2d:44:c2:d2:4a:c8:c6:1f:ad:24:
d1:ff:61:80:31:88:84:92:8e:b4:2e:45:fd:22:3b:68:0f:85:
0d:28:6c:36:b9:c0:13:2f:9f:b2:5c:4a:21:73:3f:56:49:ad:
3e:b6:a9:2a:14:df:93:e4:d1:37:25:2f:32:a9:0f:4c:9a:0e:
a3:0c:bd:c8:0c:2f:36:c0:80:07:a0:56:c7:88:f1:02:f8:5d:
d1:f9:b3:3d:66:c0:01:a8:ec:74:b3:6e:4b:c8:c9:5b:96:3d:
d3:c6:ae:2e:14:0d:67:f0:13:a3:ec:71:d8:d0:c3:11:c6:f2:
6f:5e:53:69:75:9a:71:cb:af:75:2b:6c:bd:37:4a:ce:b4:64:
3a:3c:02:6a:d9:9f:19:ee:8a:ce:20:7f:51:ab:e7:57:f8:94:
de:9e:08:ed:f2:11:1c:bd:97:e1:91:44:50:1c:a8:70:4c:5f:
01:d3:81:ba:47:c3:fc:1e:a7:3c:b2:e5:23:a6:17:ee:72:41:
d2:4d:9e:c6:de:5d:cb:7e:da:b5:95:c7:44:e4:dd:df:96:6c:
20:7c:de:00:11:e3:0f:60:0b:db:ca:dd:3c:03:21:be:ed:0c:
a9:18:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:59:54 2025 by rpki-client