Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Al37W4KoDlqCyXnJjmaMZpw49Nc.roa
File: Al37W4KoDlqCyXnJjmaMZpw49Nc.roa (raw, json)
Hash identifier: g2Zet37EA1XKbMmz/biur379KQ/sju0yR1ktCPR5x1o=
Subject key identifier: 02:5D:FB:5B:82:A8:0E:5A:82:C9:79:C9:8E:66:8C:66:9C:38:F4:D7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B8E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Al37W4KoDlqCyXnJjmaMZpw49Nc.roa
Signing time: Tue 01 Apr 2025 01:39:45 +0000
ROA not before: Tue 01 Apr 2025 01:39:45 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 110.163.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 14:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2958 (0xb8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:39:45 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=025DFB5B82A80E5A82C979C98E668C669C38F4D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:40:cc:06:b8:41:31:99:95:0a:3f:22:eb:
c7:24:23:b5:c9:54:88:32:fc:ff:cc:d8:a2:cb:48:
52:12:f2:7b:89:d1:9b:b4:fc:e5:2d:c1:d8:26:ff:
94:f6:3c:ba:74:d9:74:ea:dd:86:d4:84:53:a2:c8:
df:61:ef:9c:10:28:5e:ca:84:7c:66:d1:07:5d:c9:
e6:1f:52:0b:c4:14:a4:4a:29:50:ea:20:7a:bf:95:
1f:23:22:df:af:68:75:a2:df:fc:44:44:66:7b:5b:
d1:88:b5:d5:84:ff:a2:07:23:1f:ae:ef:0e:49:58:
61:5a:85:79:f1:43:01:7b:33:97:e1:7f:4b:a2:4c:
2e:1a:ea:05:79:a8:08:9d:a8:a9:4b:20:e5:6a:75:
7b:d7:2b:3f:88:d6:af:09:6f:34:e5:d0:f9:27:f7:
0d:f2:65:e7:0f:f6:db:e9:e5:9a:90:28:87:ca:e9:
07:8c:81:c3:82:9e:ea:62:78:27:00:4c:ac:46:68:
1f:ef:01:2b:9f:98:d5:fb:76:40:08:50:bf:4c:25:
44:65:df:5b:c4:19:66:0f:46:8c:62:f4:a3:bf:2e:
c3:ad:ef:ce:a7:b8:71:49:ab:b9:2d:5d:18:4a:34:
cf:2a:b2:9a:6f:4e:4c:47:42:73:a4:e0:0f:7d:b9:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:FB:5B:82:A8:0E:5A:82:C9:79:C9:8E:66:8C:66:9C:38:F4:D7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Al37W4KoDlqCyXnJjmaMZpw49Nc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.163.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2e:a2:83:1b:e3:4b:41:90:8f:f6:f5:d8:10:ec:b5:87:1c:
94:05:83:fe:32:7a:dc:84:4b:bb:e6:76:25:a1:b1:09:86:93:
54:30:20:a0:1b:f7:83:d0:04:41:a9:80:07:f9:9a:f5:4b:8f:
80:2a:74:b8:5b:79:25:35:88:2d:8f:c4:bb:7b:dd:68:e2:bf:
33:6d:76:58:eb:01:51:5f:d4:a9:ea:b1:78:45:22:4a:a5:01:
aa:bd:da:8c:7a:9f:ee:3b:c1:0a:57:c9:b7:fe:3f:81:12:7a:
e2:56:48:92:75:07:cd:85:0d:c7:51:99:e6:23:3b:ee:73:05:
e9:41:61:3f:d8:a9:fc:43:fd:03:16:12:a2:61:8b:21:3d:4d:
1f:48:00:4a:a7:53:6d:5b:51:ac:f1:aa:36:28:d4:82:95:8d:
23:01:ee:43:dd:a6:05:71:7e:dd:58:a8:92:af:e2:c5:f4:ac:
1d:91:32:b9:21:9e:ce:c8:86:97:76:d6:01:f6:d5:ac:fd:c2:
75:3b:82:12:d7:48:ec:05:d6:64:65:bb:ef:0c:56:80:bd:ae:
a6:23:d8:c5:e1:7b:54:16:30:5f:a4:59:24:3b:d0:b1:6b:4a:
8a:79:cb:ad:84:11:d3:1d:dc:23:4f:9f:78:87:df:0f:ab:d2:
c3:04:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:58 2025 by rpki-client