Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30400/k2aH9fPLLYVbhtfsb91XKqSdQkg.roa
File: k2aH9fPLLYVbhtfsb91XKqSdQkg.roa (raw, json)
Hash identifier: 0P5nXKKPr5dzwgpMm8+0dSyrPd7s/wfh9hFSGhCqLyI=
Subject key identifier: 93:66:87:F5:F3:CB:2D:85:5B:86:D7:EC:6F:DD:57:2A:A4:9D:42:48
Certificate issuer: /CN=0DEDB24B5E5CDA80EA9BD8D00BE27AA0804EA808
Certificate serial: 2E
Authority key identifier: 0D:ED:B2:4B:5E:5C:DA:80:EA:9B:D8:D0:0B:E2:7A:A0:80:4E:A8:08
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/k2aH9fPLLYVbhtfsb91XKqSdQkg.roa
Signing time: Fri 31 Jan 2025 01:29:05 +0000
ROA not before: Fri 31 Jan 2025 01:29:05 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 63784
IP address blocks: 2406:ab40::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/De2yS15c2oDqm9jQC-J6oIBOqAg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/De2yS15c2oDqm9jQC-J6oIBOqAg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DEDB24B5E5CDA80EA9BD8D00BE27AA0804EA808
Validity
Not Before: Jan 31 01:29:05 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=936687F5F3CB2D855B86D7EC6FDD572AA49D4248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:71:a0:a9:6b:c9:d2:34:aa:eb:bd:66:82:
f9:df:22:1e:f6:c2:c3:92:ef:7e:c8:ce:fa:ca:36:
93:c9:06:9a:92:e4:25:98:41:a6:25:b1:d5:c6:21:
60:ce:9e:35:44:e9:c1:a8:8e:0e:b2:72:6c:46:eb:
05:7f:c6:d0:9c:b8:36:9a:2d:c9:9c:17:0b:67:73:
34:d5:40:25:5b:fe:6e:63:a9:3f:fb:a0:8f:58:0e:
01:38:8f:68:32:74:53:44:61:1a:df:6a:22:10:d0:
3e:bc:05:15:2b:de:72:3b:b6:ed:82:18:99:54:a8:
16:5a:2a:56:32:1d:8e:86:3e:0a:97:e4:cf:40:53:
db:d2:c7:d2:b4:37:c1:56:e5:40:68:92:94:83:26:
1c:cb:10:cc:c6:c6:ac:52:58:ca:f5:94:a7:7e:c8:
19:c2:d2:2d:09:4e:4e:e1:62:40:ba:26:59:66:e1:
7f:f9:e2:fc:ce:35:14:f0:51:2f:99:c1:53:5e:25:
6b:f4:c6:2e:17:e0:56:e7:67:ec:c2:33:be:6d:48:
d9:bf:14:08:6e:84:e3:64:4b:a2:87:b8:f9:ff:12:
c2:91:ca:2a:7e:f2:1f:ed:d8:51:18:41:cf:cc:66:
5e:cd:69:70:57:e2:9f:46:4c:48:44:70:16:c5:64:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:87:F5:F3:CB:2D:85:5B:86:D7:EC:6F:DD:57:2A:A4:9D:42:48
X509v3 Authority Key Identifier:
keyid:0D:ED:B2:4B:5E:5C:DA:80:EA:9B:D8:D0:0B:E2:7A:A0:80:4E:A8:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/De2yS15c2oDqm9jQC-J6oIBOqAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/k2aH9fPLLYVbhtfsb91XKqSdQkg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:ab40::/28
Signature Algorithm: sha256WithRSAEncryption
45:85:99:ba:ff:d5:57:11:f7:b1:67:58:f7:8f:16:53:8d:8c:
bf:ca:1a:f4:e8:d8:80:88:69:89:2d:de:aa:b0:50:6e:29:3a:
af:b8:ae:50:63:28:ed:7d:4c:5b:e6:d5:4d:0b:d7:79:67:85:
97:b5:41:60:65:5a:c7:7a:c0:a6:c0:34:c2:32:35:f8:6e:75:
2e:08:26:4c:68:f5:7c:8d:e9:05:b4:c5:68:af:8b:e1:a0:cc:
4a:ac:28:c1:16:5c:e9:aa:ff:9a:14:f9:9c:02:e9:c2:84:41:
16:de:f8:20:fe:53:85:de:b8:80:82:86:93:1f:b9:43:ef:01:
c8:56:8f:30:d3:8c:ba:d0:49:e9:ce:92:51:63:ee:38:2b:e2:
45:ce:12:86:f1:a1:ca:20:31:dd:c5:77:b9:b1:db:fc:1a:ae:
a8:f0:bd:2e:31:53:62:94:8d:76:7a:2d:e3:87:8e:2c:58:31:
72:13:b8:33:f4:17:8a:c5:c0:78:85:46:55:80:bd:bd:3d:aa:
30:b6:22:79:4d:df:48:aa:1d:c3:79:28:c9:1c:3f:b9:3f:97:
6b:dc:92:99:3e:fb:c3:29:6d:60:b1:8b:6e:24:7d:4f:ba:d3:
9f:b7:39:47:c6:be:7a:f7:20:21:20:75:dd:22:67:6d:2c:c3:
0d:7b:5a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:19:40 2025 by rpki-client