Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wit75aL5tODhAIPMpzNQtBLKpyI.roa
File: Wit75aL5tODhAIPMpzNQtBLKpyI.roa (raw, json)
Hash identifier: Xc4bLZRku8DtxKsx4CbgUi5F4MqKhZ42LGSIppBXOAk=
Subject key identifier: 5A:2B:7B:E5:A2:F9:B4:E0:E1:00:83:CC:A7:33:50:B4:12:CA:A7:22
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 68
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wit75aL5tODhAIPMpzNQtBLKpyI.roa
Signing time: Tue 01 Apr 2025 02:29:12 +0000
ROA not before: Tue 01 Apr 2025 02:29:12 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 160.249.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Apr 1 02:29:12 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=5A2B7BE5A2F9B4E0E10083CCA73350B412CAA722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:f5:8f:df:6d:2d:f1:d4:fe:79:69:92:0b:
7d:bc:a6:37:7b:8e:15:9d:df:ec:f0:29:6f:7a:e2:
74:e0:07:18:38:55:b9:2b:52:f5:b2:66:83:78:d2:
91:13:62:e7:bc:76:2e:7b:7a:e8:be:a4:bd:3f:15:
2a:9c:6c:f3:dd:49:47:35:ed:f7:68:b4:e6:02:74:
3f:45:cb:be:3e:96:2d:4d:b3:03:44:1d:a4:c9:57:
56:84:35:0b:21:fb:7c:a2:9b:a4:17:7b:c5:e3:a0:
06:35:e2:5f:7e:34:2c:ce:75:bd:73:26:1f:66:f7:
26:ed:69:60:9d:5c:c4:b6:06:8b:d7:01:38:c3:b1:
ba:43:70:cd:c4:33:39:52:f1:2c:eb:bb:3f:d8:48:
9d:c0:d1:f9:a6:85:6f:a8:97:e7:37:f3:d5:9a:d3:
75:93:ad:ee:74:1d:c6:21:b9:4e:69:e9:a8:fe:8a:
e2:a1:a8:03:c3:13:dc:aa:65:6d:49:b6:49:ee:32:
84:4c:05:84:b5:d8:7f:bd:b4:8e:a6:e3:27:b9:ae:
dd:6c:d5:8a:9a:e4:3b:95:88:41:c9:85:2b:53:14:
3b:13:8a:08:c8:f1:63:61:04:26:9b:eb:e5:d5:9c:
b4:43:8e:9a:1a:b8:4f:fd:f4:ac:7e:7d:67:7e:8b:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:7B:E5:A2:F9:B4:E0:E1:00:83:CC:A7:33:50:B4:12:CA:A7:22
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wit75aL5tODhAIPMpzNQtBLKpyI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.249.128.0/17
Signature Algorithm: sha256WithRSAEncryption
38:a0:ca:52:91:03:b6:fb:8e:bc:d3:a1:6a:ce:ce:13:57:88:
65:e2:d5:55:38:d5:73:6d:50:5f:18:eb:4b:a5:3e:52:2f:eb:
b3:2d:63:b7:33:4a:83:e0:63:85:30:42:78:b2:34:3d:7f:7e:
95:e0:1a:36:da:bb:7e:59:e1:e6:64:c5:ef:88:20:97:bc:14:
fa:71:43:15:ca:ba:82:54:aa:b1:8f:36:e0:3e:5f:a8:65:62:
77:aa:1f:d7:98:dd:4e:4a:6a:82:55:c7:37:a2:15:61:6e:de:
7d:76:1e:f1:7d:3b:0b:98:0d:28:b7:91:e8:ba:40:b7:3a:25:
73:9d:23:7c:0c:32:f7:e2:a1:88:72:e1:9e:6a:b9:fa:1f:b0:
94:a2:2e:e0:34:e0:19:bf:ad:5c:fd:02:9f:2f:7e:a0:cf:8d:
3e:6a:71:6f:d3:21:5a:ee:63:d4:54:52:3d:3d:b4:21:fc:a4:
fe:04:ef:94:f7:a7:29:3d:26:cb:cb:f1:4d:44:b0:ba:71:fa:
94:4f:db:41:77:04:96:9b:32:70:3a:bd:52:f1:23:ff:98:cf:
06:3a:c1:23:e5:d7:44:06:73:ff:b6:2f:2c:e0:d8:98:0e:02:
84:1f:d5:d7:23:57:6e:a5:3d:f8:14:2b:4c:a7:80:bc:9e:d5:
b2:fa:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:59:43 2025 by rpki-client