Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FsHKbBWpA6k-h29_oegiBbYAwOs.roa
File: FsHKbBWpA6k-h29_oegiBbYAwOs.roa (raw, json)
Hash identifier: H/x1jmWZxANvOUWh4hBvPtn/PQJpk7i2PLvNNAuO95w=
Subject key identifier: 16:C1:CA:6C:15:A9:03:A9:3E:87:6F:7F:A1:E8:22:05:B6:00:C0:EB
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 6C
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FsHKbBWpA6k-h29_oegiBbYAwOs.roa
Signing time: Wed 02 Apr 2025 07:12:35 +0000
ROA not before: Wed 02 Apr 2025 07:12:35 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 160.249.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Apr 2 07:12:35 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=16C1CA6C15A903A93E876F7FA1E82205B600C0EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:fa:13:28:a1:09:66:0f:10:e5:aa:28:2f:
68:ee:18:03:43:24:d4:1e:dc:db:24:51:19:db:2e:
03:44:36:bb:2a:8f:f6:c4:6a:b8:24:79:33:55:ac:
96:37:70:2a:b9:42:76:ac:5f:01:dd:04:e7:de:77:
7b:b6:a9:c9:e9:ee:a3:15:e9:27:5c:b5:f1:3a:be:
3e:84:51:34:b9:39:fe:cb:9c:45:02:73:08:8a:a8:
ec:f6:0a:f0:7b:c1:da:6b:c6:ed:ee:14:0b:07:b6:
d5:94:4f:55:91:15:6b:c3:79:37:3f:a6:bd:c9:2d:
8a:f3:2a:c3:02:ea:e7:c7:bb:4f:5a:d9:74:07:ae:
20:aa:88:b3:15:fe:81:48:16:dd:fd:b2:41:a6:6b:
8a:a9:f0:65:21:2a:fe:54:79:a2:47:b6:74:6d:5f:
bd:16:9a:47:26:59:07:cf:45:40:81:de:3a:cf:1f:
57:b1:db:49:87:41:4f:92:05:4d:d8:ac:96:38:e6:
44:c6:fe:66:56:1a:23:55:0e:7d:f5:0d:22:cf:a5:
d2:f0:43:e8:68:3b:da:06:8e:0e:ac:37:b8:91:28:
27:b7:d3:83:fb:d5:03:83:76:da:fd:f7:24:0a:cd:
de:3c:98:4d:35:c1:e2:ef:20:5b:90:b1:ab:44:c2:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C1:CA:6C:15:A9:03:A9:3E:87:6F:7F:A1:E8:22:05:B6:00:C0:EB
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FsHKbBWpA6k-h29_oegiBbYAwOs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.249.95.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fb:fd:8b:3c:39:65:95:bb:b7:d6:2a:42:12:9d:79:be:93:
31:ec:c6:3a:da:6a:94:a7:2c:5a:44:e7:ea:dc:d5:11:d9:17:
67:b0:50:2c:2e:15:92:11:07:4d:b8:b4:fb:2b:86:89:4e:7e:
22:38:70:28:86:1f:17:c4:61:7c:6a:8d:97:a7:e4:38:9d:b9:
26:a4:8c:47:80:26:44:f0:a7:46:73:96:78:80:ab:ee:b9:7d:
92:17:62:59:45:9d:92:14:61:0d:76:0c:4f:64:55:17:58:0a:
51:02:9f:9f:d6:40:11:06:1e:28:3e:ca:80:25:19:b4:92:8a:
3b:1e:3a:2d:2e:a8:dd:fa:6c:4f:c3:fd:ea:07:ec:01:aa:59:
c8:4e:43:b1:7f:d8:87:54:cc:ce:73:76:02:a6:1e:64:23:6a:
25:f2:ed:75:12:be:ed:21:20:2c:a2:e5:84:94:90:12:57:0a:
e6:c0:fb:34:c8:b5:28:36:fa:bb:63:d3:f8:2c:19:ca:43:0e:
34:8b:69:ef:0e:76:e5:20:5c:29:7e:8e:e9:ab:53:13:95:1d:
f6:2d:d6:c9:7b:a0:0b:e5:eb:e9:a9:0c:86:c8:f3:8e:4b:f0:
42:0e:e7:19:fc:bc:b7:78:46:24:2e:f8:be:41:10:dc:c6:28:
94:86:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:56:24 2025 by rpki-client