Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KPgIC3_iMq_ZsbfKun_gs-1EuSY.roa
File: KPgIC3_iMq_ZsbfKun_gs-1EuSY.roa (raw, json)
Hash identifier: AJ3hLpDoTSWFswIPL2YMdE+juMS4RtSVDHp3qP04GhE=
Subject key identifier: 28:F8:08:0B:7F:E2:32:AF:D9:B1:B7:CA:BA:7F:E0:B3:ED:44:B9:26
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0C74
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KPgIC3_iMq_ZsbfKun_gs-1EuSY.roa
Signing time: Tue 01 Apr 2025 02:00:35 +0000
ROA not before: Tue 01 Apr 2025 02:00:35 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.106.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3188 (0xc74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:00:35 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=28F8080B7FE232AFD9B1B7CABA7FE0B3ED44B926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:73:0e:c6:6b:b5:8f:35:e7:10:74:f8:a6:
e9:a2:aa:93:cd:1e:bd:83:2a:6b:7c:22:cf:8e:33:
e2:c4:56:5d:b9:51:63:38:3b:ab:08:33:9f:35:99:
91:6c:d2:8f:8c:0e:7b:8d:1e:51:81:28:78:97:36:
63:2d:fb:e3:6c:7d:dd:9a:05:49:b1:86:d3:4d:9d:
44:fd:ae:4a:6c:b9:cf:69:90:60:65:79:e0:f3:45:
84:37:90:9a:fb:3f:4d:0f:33:1c:e9:f0:90:37:74:
b0:3b:a0:0c:b3:03:aa:a0:8f:23:aa:5a:bc:0a:ea:
4a:44:b2:84:33:09:2b:01:b0:03:7d:87:e6:e3:75:
d6:46:7b:20:ae:9d:d2:2c:08:20:40:b8:7e:7e:f1:
26:74:12:8b:de:06:df:30:85:19:ec:f0:d9:e4:e4:
47:01:64:67:a5:94:16:bb:e9:f9:cf:84:cc:2e:23:
c8:02:f5:41:77:01:0f:47:9e:9b:73:56:bb:b8:d9:
41:f2:68:ca:66:6b:33:d2:d1:d7:49:8d:04:45:11:
a3:e7:c6:5c:25:85:32:e9:54:b9:e7:87:ae:49:cc:
c3:22:f2:92:e4:99:4b:69:0f:0e:b5:cf:b9:73:06:
db:59:de:af:1f:85:6f:e1:f3:27:7f:27:91:66:a2:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F8:08:0B:7F:E2:32:AF:D9:B1:B7:CA:BA:7F:E0:B3:ED:44:B9:26
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KPgIC3_iMq_ZsbfKun_gs-1EuSY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:21:8a:0d:44:90:9c:70:b8:23:20:be:08:7a:19:2f:41:2b:
a3:2f:f7:34:5f:ec:89:28:ef:43:d3:bd:c0:b6:fa:8c:42:49:
91:54:34:ed:e5:1b:ec:15:58:ac:99:8e:82:9b:d8:63:04:20:
17:c5:f7:41:ff:a1:b5:c8:50:5e:90:66:cd:06:82:be:42:4d:
e2:db:1a:35:31:0f:97:6c:3d:a2:56:20:1c:1e:f8:e1:30:db:
fb:7a:eb:f1:d2:e3:9e:d9:2e:ba:3f:74:6f:b4:08:02:e4:f9:
34:03:f3:0d:13:66:3a:b5:fa:79:c4:41:28:c2:6b:b2:9a:30:
a9:9b:8b:61:54:55:07:59:d8:85:7b:15:d6:5e:76:47:2c:7f:
ea:ab:bb:01:77:9d:4d:92:e1:82:18:10:a6:af:ed:12:79:0f:
2c:f3:79:e0:54:31:38:df:b5:c8:d3:a2:9e:24:41:92:d5:f0:
fa:35:60:a2:c9:da:05:87:50:63:e9:9c:ba:8f:95:e8:0b:e2:
c8:b0:7f:36:1d:51:93:ec:69:07:67:83:9c:6e:c0:c5:14:10:
36:1e:55:5a:b4:89:e8:8a:5e:e8:fb:7c:d0:b4:2c:04:98:f9:
21:da:97:0a:c4:49:55:fb:92:e7:71:c2:f8:bd:90:b1:c0:83:
cb:9f:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:16:55 2025 by rpki-client