Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IXFzNQd5tr3mPSnhjv9D74F7q34.roa
File: IXFzNQd5tr3mPSnhjv9D74F7q34.roa (raw, json)
Hash identifier: OqbZPNQ3Q3nKxKFOignCqHD0qQ7gj75vyZcj8MrSswk=
Subject key identifier: 21:71:73:35:07:79:B6:BD:E6:3D:29:E1:8E:FF:43:EF:81:7B:AB:7E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0D94
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IXFzNQd5tr3mPSnhjv9D74F7q34.roa
Signing time: Tue 01 Apr 2025 02:21:36 +0000
ROA not before: Tue 01 Apr 2025 02:21:36 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.106.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3476 (0xd94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:21:36 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=217173350779B6BDE63D29E18EFF43EF817BAB7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:04:bc:4c:3e:10:aa:aa:d2:05:c7:76:18:
3a:23:49:dd:67:7d:a7:3c:a3:d9:80:d5:88:3b:ee:
df:c2:a4:ab:ac:71:60:d8:7f:05:71:4e:9e:47:96:
8c:53:c6:fd:32:c6:37:23:28:cd:55:20:df:8f:55:
c6:52:89:d8:68:2b:93:d4:41:75:c7:98:f1:83:4b:
70:f2:77:67:92:3d:58:d2:bb:37:9e:56:97:46:79:
d1:43:ad:9b:c6:9a:55:41:0a:a7:ad:0d:73:79:99:
48:a7:9b:47:bb:03:93:a1:b0:7f:5f:bf:b1:1d:88:
f2:63:2a:e3:11:27:8d:24:be:db:c5:c2:7b:4e:8f:
9b:f0:18:0e:e6:36:33:e8:dd:2e:92:e5:f4:30:4e:
cf:84:13:08:0f:35:8b:73:ce:6d:9e:be:c4:e2:96:
f7:c8:25:fb:eb:0b:fc:6d:8a:36:44:93:6c:ef:35:
ea:fe:80:32:bd:bf:96:47:de:16:63:c2:42:af:58:
22:a4:df:57:d3:b3:07:b2:85:45:04:e0:8d:67:a1:
a9:ed:b6:86:19:d6:ba:8c:c3:65:fb:3d:a9:3a:97:
e8:e8:bc:c2:1c:fd:b7:12:93:7e:a8:04:5a:05:5f:
35:04:b8:86:4f:e2:a7:b2:39:11:66:74:8f:f4:e5:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:71:73:35:07:79:B6:BD:E6:3D:29:E1:8E:FF:43:EF:81:7B:AB:7E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IXFzNQd5tr3mPSnhjv9D74F7q34.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.203.0/24
Signature Algorithm: sha256WithRSAEncryption
66:2a:61:ce:4e:ad:cf:3e:fc:a5:89:14:0c:86:28:e9:4d:26:
6e:36:d2:d8:0e:d0:2f:3a:21:95:28:23:7d:26:0a:5c:17:c0:
b7:ae:04:72:33:ca:6b:26:2b:51:98:fd:0a:0c:da:a7:13:03:
b7:60:06:9d:98:c8:c5:e3:f5:f6:dc:6b:95:ea:de:e3:61:88:
1c:3d:75:41:3b:67:d2:49:cb:5a:9b:b7:e2:1c:c1:81:d1:b7:
92:e4:ec:e8:b1:da:42:95:ac:67:c2:40:21:71:ee:99:57:63:
39:b7:42:f7:ac:9b:be:0f:5d:44:82:e5:22:79:10:d5:77:35:
08:08:52:66:73:68:6d:c1:ea:35:19:3d:a3:0c:51:54:23:4b:
8e:f2:aa:d2:f1:80:0a:29:54:27:24:11:8b:2b:eb:be:1e:d3:
e6:c5:7e:a8:6a:a0:8f:2c:29:a9:83:4a:a0:4d:ff:05:24:43:
bb:d2:06:46:0b:2a:2f:3e:b1:02:01:72:37:f3:bf:35:31:65:
9c:08:cc:34:44:92:25:03:fb:fa:9b:0b:f1:fc:24:87:e1:25:
f1:5a:1e:3a:ff:25:98:9f:46:fc:db:aa:95:b7:5c:f7:1e:3a:
a7:d9:ec:26:39:64:4d:f9:73:eb:47:8b:d9:82:7d:56:1a:65:
40:9e:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:34:33 2025 by rpki-client