Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/QKA7n4yLVChzi9n0j5puNfnhaqE.roa
File: QKA7n4yLVChzi9n0j5puNfnhaqE.roa (raw, json)
Hash identifier: e6esoYtShcO0fojBkDYs5CMrE7eJ+gSFfdFkPqPUNA4=
Subject key identifier: 40:A0:3B:9F:8C:8B:54:28:73:8B:D9:F4:8F:9A:6E:35:F9:E1:6A:A1
Certificate issuer: /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial: 36
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/QKA7n4yLVChzi9n0j5puNfnhaqE.roa
Signing time: Fri 31 Jan 2025 01:33:05 +0000
ROA not before: Fri 31 Jan 2025 01:33:05 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 151381
IP address blocks: 2401:d20:2000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Validity
Not Before: Jan 31 01:33:05 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=40A03B9F8C8B5428738BD9F48F9A6E35F9E16AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:9c:5e:7e:65:c3:6f:ea:94:f4:36:93:12:
06:15:8c:a5:60:73:f2:bc:e5:29:54:da:95:66:ad:
32:3e:4e:c5:32:21:fb:bb:44:c5:76:09:13:ce:78:
90:a3:6d:d6:7e:a9:66:e2:ec:63:de:5a:ba:60:04:
e1:e1:73:df:fe:b0:20:eb:eb:42:a3:94:e0:79:30:
57:e3:1c:81:89:8e:7e:5d:e7:1d:69:ea:ad:1c:53:
fc:f0:35:a8:b3:1e:f6:fc:02:a6:2b:d4:d1:39:a0:
cf:f7:a2:0d:68:39:d7:55:ef:00:50:2c:53:06:d9:
2c:65:f8:7c:e6:f7:33:2c:06:8c:ea:fd:b1:47:4a:
ea:8f:59:f1:10:0e:00:ca:e9:eb:8b:6a:5b:db:9d:
96:65:e9:04:31:ee:5e:11:69:97:2c:dd:ba:ad:23:
ed:3a:81:50:ed:7c:1e:9a:96:33:37:7c:47:8d:c7:
60:78:8b:26:fb:0c:4b:ba:be:6e:b5:02:d2:ce:c7:
53:6d:5a:c9:a1:8c:58:73:88:8c:85:aa:19:62:0e:
bb:6a:1f:ce:78:55:35:ed:30:39:4a:cf:0a:b9:96:
5b:6c:49:04:83:2e:a8:f9:93:81:78:f5:3a:1f:c9:
e1:0b:d4:c4:7f:c5:82:6c:7e:c5:c9:40:79:f3:4a:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A0:3B:9F:8C:8B:54:28:73:8B:D9:F4:8F:9A:6E:35:F9:E1:6A:A1
X509v3 Authority Key Identifier:
keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/QKA7n4yLVChzi9n0j5puNfnhaqE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:d20:2000::/36
Signature Algorithm: sha256WithRSAEncryption
98:80:92:2e:74:60:47:67:5a:45:42:25:58:78:ff:a5:81:7a:
ac:e0:47:15:86:8a:e6:ad:8a:dd:df:90:ff:dc:c1:49:6e:66:
7c:b3:d6:11:36:e7:ac:8e:56:d9:5a:01:15:40:39:37:b5:e4:
7c:70:f0:39:27:99:70:b4:15:19:e1:b3:40:c7:d9:68:1f:05:
b3:72:99:58:b5:f0:10:b7:47:b9:3a:d0:8b:5d:20:49:19:ad:
ca:41:c8:4b:3b:56:2d:a3:c8:82:bb:50:d3:b7:df:b4:82:f1:
74:3b:56:0d:6f:ff:a1:91:fa:bb:a7:32:fc:24:24:67:0c:d3:
38:c2:63:d8:6b:4f:36:1c:47:2c:d1:4a:80:9a:3f:c5:62:66:
84:a5:22:04:16:38:7a:be:ae:0c:35:71:f7:f5:d4:00:e6:87:
a3:ca:2b:1b:fc:96:fa:1e:90:88:21:aa:6a:82:04:23:fd:fc:
1b:e3:3e:7d:1c:f0:26:be:fe:a4:64:75:15:b6:3c:90:52:07:
d4:74:19:b8:57:80:0d:2c:fa:55:96:53:70:24:6b:ae:08:e3:
d8:43:3f:96:63:27:03:35:39:a8:ed:d9:09:a8:86:fc:79:2f:
21:2c:54:9a:a5:96:b6:ea:98:c4:d7:04:f6:a7:8a:15:a2:99:
7a:a2:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:45:25 2025 by rpki-client