Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgPO4wzEK6GiCT4Ha167W1KKmIU.roa
File: NgPO4wzEK6GiCT4Ha167W1KKmIU.roa (raw, json)
Hash identifier: 4JAlkn2ZDQLQ8F1KMxYA4xv+c9ZLJ0eesS5/JwoO8cU=
Subject key identifier: 36:03:CE:E3:0C:C4:2B:A1:A2:09:3E:07:6B:5E:BB:5B:52:8A:98:85
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B8F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgPO4wzEK6GiCT4Ha167W1KKmIU.roa
Signing time: Tue 01 Apr 2025 01:39:45 +0000
ROA not before: Tue 01 Apr 2025 01:39:45 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.67.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2959 (0xb8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:39:45 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=3603CEE30CC42BA1A2093E076B5EBB5B528A9885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:a7:ce:88:4b:28:e0:ea:80:7c:49:1d:dd:
f8:a2:ab:04:0f:41:17:91:dc:82:9b:ee:36:0b:d5:
b0:2c:b5:ee:0a:7f:92:c1:e2:65:9d:f8:ba:6b:52:
04:75:65:41:8e:63:19:c1:fe:c4:b3:82:5e:fa:39:
40:50:a6:59:37:54:cb:4a:8a:42:1a:f4:90:da:2a:
c8:07:58:40:c4:ed:87:da:df:d7:16:d0:4f:ff:bd:
3e:74:20:2d:f4:62:bb:c0:8e:25:bf:c4:9a:18:78:
d1:1b:08:fb:2a:90:40:28:a8:2a:e4:fb:a3:6f:ed:
0b:b5:55:7a:35:6a:db:3c:e4:c1:d7:b2:fe:e0:91:
d6:1c:2b:99:ea:07:da:3c:90:92:e9:a1:9f:b0:a6:
b5:e0:95:4c:3f:ba:6c:1a:e1:91:08:92:85:49:b7:
08:60:a0:6b:38:65:72:06:a9:8b:ad:04:25:b4:5b:
fc:4b:35:31:bc:04:9b:d6:d4:a7:36:1c:1d:ae:bf:
76:85:9d:ab:b9:47:e3:6b:a9:69:4e:5b:55:0e:cc:
1d:66:3f:3b:18:7a:61:fd:a7:ee:ee:22:28:4c:57:
86:f8:35:e5:8a:b8:fc:6a:7d:ab:f7:c0:f4:99:4e:
6e:9f:c3:cd:6b:b8:92:a4:ec:cf:5c:f1:23:af:ad:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:03:CE:E3:0C:C4:2B:A1:A2:09:3E:07:6B:5E:BB:5B:52:8A:98:85
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgPO4wzEK6GiCT4Ha167W1KKmIU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.224.0/21
Signature Algorithm: sha256WithRSAEncryption
07:63:33:43:f5:9c:70:72:3b:2d:1c:ae:2f:9c:96:cc:11:05:
11:08:53:bb:fe:56:62:97:0c:72:d5:12:48:75:4f:72:ba:f2:
3d:b1:2d:8e:2c:de:29:3a:cf:bf:c2:01:a3:82:f5:4f:a9:9b:
9e:2e:ce:e6:0c:77:32:1f:4a:88:6c:6a:5b:17:36:e1:b6:cd:
b8:9a:a0:19:7d:f1:b4:bc:08:ce:80:e9:f1:28:3a:d9:8c:5b:
3f:b2:81:b1:9a:a3:ea:38:1d:8b:ee:d8:03:a9:52:86:68:94:
ff:76:fe:7c:4f:f0:2f:82:7b:a0:ea:cd:4a:1a:09:e3:23:cd:
01:ab:75:7f:30:c9:f3:f9:3c:3e:ff:1f:6b:4c:3b:f8:3e:71:
4b:22:35:53:30:71:e7:21:c1:26:c8:4d:ca:bb:40:b7:47:f4:
dc:07:6d:00:72:07:f2:74:ec:a8:07:a9:df:5b:53:c6:09:3e:
8f:cc:b0:19:68:47:d6:5b:25:eb:8a:b3:a7:77:88:e8:3e:21:
30:64:16:bd:e9:26:c3:a5:ab:62:fc:bc:b2:9f:c6:53:2b:5b:
e6:55:21:b1:cf:75:71:56:be:69:48:d7:cd:82:61:19:b6:e3:
44:bc:df:c9:e7:0c:a6:f4:57:3a:1a:b0:7f:c7:20:b0:7b:47:
53:fb:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:06:14 2025 by rpki-client