Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5jx7wFJscpRNEytCwZy9skQwb0s.roa
File: 5jx7wFJscpRNEytCwZy9skQwb0s.roa (raw, json)
Hash identifier: DfBW8OoCHpPHR8I0g6TJokEbWthEb4N5IH9L8EQGRsE=
Subject key identifier: E6:3C:7B:C0:52:6C:72:94:4D:13:2B:42:C1:9C:BD:B2:44:30:6F:4B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0CEF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5jx7wFJscpRNEytCwZy9skQwb0s.roa
Signing time: Tue 01 Apr 2025 02:11:29 +0000
ROA not before: Tue 01 Apr 2025 02:11:29 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 110.163.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3311 (0xcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:11:29 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=E63C7BC0526C72944D132B42C19CBDB244306F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:5f:49:32:9c:4e:e9:bc:35:2e:b9:6b:f5:
da:c8:03:1f:1a:b2:c9:4e:5c:2c:45:f3:03:41:7e:
79:e5:6a:7c:24:c0:49:a0:c4:c0:3a:b0:df:11:a0:
14:e0:70:f0:32:24:23:c3:f6:a9:88:18:98:99:35:
01:6b:aa:2a:b4:84:fd:e4:11:ff:22:da:b9:a6:a7:
4e:7b:d1:07:32:85:90:b9:35:e8:0c:ed:ae:92:c1:
16:30:d0:cb:e1:05:b1:ba:76:1a:72:3e:a3:fb:f7:
77:86:8c:70:f6:ea:2d:ec:fd:b1:90:5f:39:d2:6f:
ee:be:c4:ab:d4:4c:1d:6f:f3:18:f2:32:69:c6:71:
e9:29:b2:1b:1e:70:69:76:82:89:38:ab:f1:d4:41:
c4:68:5a:68:90:28:37:e6:d3:40:73:02:00:64:71:
85:5a:4d:df:56:bc:ae:e2:55:94:0d:9c:f1:66:b2:
9d:38:91:d1:2d:de:69:94:45:56:bf:1e:75:38:67:
a2:5b:85:ea:8a:39:c8:fa:71:fe:2b:6b:3e:ff:74:
51:1e:36:bd:67:fd:76:01:01:55:21:ab:58:96:ed:
18:da:c6:5d:52:99:d9:48:60:43:cd:50:5a:8a:07:
6c:af:a5:8c:b0:8f:fe:2b:b3:15:4c:ac:a7:bc:d7:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:7B:C0:52:6C:72:94:4D:13:2B:42:C1:9C:BD:B2:44:30:6F:4B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5jx7wFJscpRNEytCwZy9skQwb0s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.163.12.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:14:a7:f8:76:0f:26:36:7b:04:19:45:18:30:85:e2:8e:a7:
ae:61:22:85:e0:2b:8f:fe:f6:c1:a5:fe:81:44:5e:ef:26:ed:
5a:57:53:db:5b:c5:9e:7c:f7:60:f4:91:d3:5d:24:db:44:90:
6d:35:22:46:ef:d4:80:20:d3:0b:06:1f:19:dc:59:5a:70:60:
8c:17:42:68:ad:7e:2f:3b:0a:31:22:29:93:55:09:8b:1c:c8:
25:d5:cb:e7:15:3e:f8:f7:10:5d:ba:58:da:d0:a3:72:e3:1f:
74:89:7a:67:07:a2:1b:a6:eb:56:22:8c:ad:ea:3f:f3:3f:35:
ee:4e:2f:ca:b5:e7:ab:ba:fa:2b:a2:64:46:b7:2d:08:4e:f3:
72:09:35:c4:82:db:1b:bc:fa:f1:48:15:b7:7f:9c:51:17:d2:
50:c9:21:69:31:89:e2:87:c0:62:70:e8:c2:0b:41:8e:f5:48:
4f:be:f7:e8:0c:de:55:1b:ab:b3:8f:e3:cd:80:c5:24:8a:82:
3d:3d:2d:03:55:a1:c7:a6:0e:15:52:04:07:ee:8e:30:8e:a0:
bb:6b:6e:29:e1:d7:93:9e:98:14:9c:d7:98:87:b8:d9:5a:72:
bd:bd:22:d1:87:a7:bf:91:ed:c4:3b:99:2b:55:01:2d:07:93:
b4:cb:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:30:55 2025 by rpki-client