Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_lQpPNy9LUEXFuw_w8vL7ZJkODM.roa
File: _lQpPNy9LUEXFuw_w8vL7ZJkODM.roa (raw, json)
Hash identifier: BSFxRx5/jXWEq+2Y/9RW1CkHNCbNBlQWXFR0/S3ZPCM=
Subject key identifier: FE:54:29:3C:DC:BD:2D:41:17:16:EC:3F:C3:CB:CB:ED:92:64:38:33
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0CCD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_lQpPNy9LUEXFuw_w8vL7ZJkODM.roa
Signing time: Tue 01 Apr 2025 02:09:12 +0000
ROA not before: Tue 01 Apr 2025 02:09:12 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 183.74.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:09:12 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=FE54293CDCBD2D411716EC3FC3CBCBED92643833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:cb:04:f3:44:a0:14:ab:aa:c2:cf:06:1a:
6d:10:8f:46:69:a1:89:4e:3b:46:43:9f:c7:81:3f:
68:d2:eb:6a:5d:22:bf:94:86:f1:5d:56:1a:17:17:
1f:2d:fe:cc:b9:e4:ea:d0:7b:b5:3e:ab:84:71:2f:
9c:a8:2f:70:94:9d:f6:98:44:be:79:9a:d0:8f:d8:
41:09:11:84:c6:95:3e:35:3c:83:12:13:82:b4:d3:
fd:d3:5b:64:35:81:85:ac:61:ee:ea:27:83:75:bf:
80:e2:43:ab:ae:c8:25:cc:b5:5d:c5:97:d6:24:c0:
c6:8f:0d:77:48:32:6d:89:88:ae:3c:d6:02:e8:36:
a5:1a:f3:5e:40:90:f5:e6:36:9f:74:3f:f1:d6:c1:
35:93:23:54:01:bb:72:44:72:9a:f1:fd:3f:f1:55:
86:9d:82:a1:2e:a2:c8:f7:a2:d9:29:02:51:48:57:
39:ee:e1:33:a3:a0:db:41:e7:18:db:e5:2c:02:71:
f1:80:66:b9:6f:3f:51:ff:76:f2:ee:3c:b6:a1:3a:
9d:5d:a9:0f:0f:0c:50:10:53:0e:5c:f3:c9:61:ee:
c4:30:db:8b:67:bc:82:31:dd:59:b4:0e:98:ad:36:
7c:e2:70:6f:0c:39:58:22:27:8b:a9:65:f4:2f:2d:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:54:29:3C:DC:BD:2D:41:17:16:EC:3F:C3:CB:CB:ED:92:64:38:33
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_lQpPNy9LUEXFuw_w8vL7ZJkODM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.74.128.0/18
Signature Algorithm: sha256WithRSAEncryption
e5:8a:0e:1c:42:f0:cd:54:93:db:2a:f1:59:fa:10:85:19:2b:
6b:c0:b2:5e:97:a9:70:e8:2a:a0:3d:4e:d9:04:97:b8:e6:d7:
84:36:c5:e0:d3:65:db:2f:d9:32:28:d8:b8:65:e4:58:d3:d9:
15:5d:91:d6:40:78:00:67:f9:c1:72:69:58:f2:46:32:9f:5b:
e2:97:52:96:3d:ab:d6:1d:61:71:0e:ec:6d:c5:6f:a8:10:86:
a2:14:e4:f1:36:d1:01:74:79:de:e0:71:21:2b:ce:73:42:8b:
46:af:94:4e:99:36:07:55:e0:71:b0:ae:95:91:9c:7d:24:a3:
f6:a4:46:f2:10:16:88:27:a5:72:6a:66:e0:b9:7a:5c:9a:e2:
67:d6:86:f6:d3:67:b8:34:f0:5d:cd:78:82:f1:77:04:d8:ad:
a3:3d:9b:45:f5:cd:a9:65:3d:85:c6:11:35:be:45:19:4c:07:
f2:37:ae:ba:6d:e8:05:23:39:c5:3b:21:32:2e:bf:58:ed:c5:
89:21:3b:23:c3:af:60:53:f0:bf:f6:8d:55:aa:42:0c:35:c0:
40:4b:82:56:c0:8b:18:55:9c:47:60:09:9b:30:2c:f0:5d:f7:
f2:dd:fb:70:28:ab:df:fb:fb:3d:bf:87:99:b2:57:ec:cc:50:
06:42:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:39:00 2025 by rpki-client