Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ar4mD4Cv0uL4JCID5pe0G5C06nY.roa
File: ar4mD4Cv0uL4JCID5pe0G5C06nY.roa (raw, json)
Hash identifier: kBXyR8oVUSnjU6eFEmtEaXo35yEmOyzC4EIcu9p6cl4=
Subject key identifier: 6A:BE:26:0F:80:AF:D2:E2:F8:24:22:03:E6:97:B4:1B:90:B4:EA:76
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0CB5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ar4mD4Cv0uL4JCID5pe0G5C06nY.roa
Signing time: Tue 01 Apr 2025 02:05:44 +0000
ROA not before: Tue 01 Apr 2025 02:05:44 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 61.195.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:05:44 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=6ABE260F80AFD2E2F8242203E697B41B90B4EA76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:4e:f8:b0:93:72:77:64:7e:6a:c8:47:9e:ce:
a9:28:60:91:f3:c0:7e:c9:89:ae:06:75:e1:f1:4a:
6e:b9:b8:4b:8e:1d:6c:f2:98:a1:67:fc:ae:34:c1:
ab:bf:58:70:bf:b4:c6:0b:ec:0a:5c:fe:b1:fe:8f:
c8:a2:bc:d6:1f:6c:0f:f5:aa:99:59:99:19:5e:37:
33:cd:b5:a5:0b:e9:be:95:98:a3:c5:91:a8:f9:1a:
a4:15:c1:14:7a:12:20:6c:61:07:18:c8:98:6e:b7:
44:89:21:e2:cb:77:8c:21:5b:79:77:b5:80:7d:9f:
04:50:69:19:e5:37:0c:29:53:05:75:a9:83:a2:d2:
eb:2f:19:e8:9c:32:d7:3b:cd:3c:4c:6a:97:2d:e9:
6c:4b:6e:03:10:fd:10:2d:86:25:50:37:73:a0:30:
e8:6b:96:6e:ef:c1:a0:67:1e:4c:92:4b:30:c6:f8:
a1:49:1b:4a:bf:dd:aa:5c:3d:34:95:74:e0:85:2c:
64:89:c0:a5:0c:0e:7a:a6:7b:3a:7d:ac:2d:ec:c9:
a5:18:0b:e0:cc:29:f4:dd:4f:b6:42:2a:3a:23:f7:
d5:07:36:85:18:7e:04:6b:ac:30:6a:57:51:79:2a:
dc:39:fc:d5:14:30:95:6b:25:1d:95:f9:3d:ca:50:
13:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:26:0F:80:AF:D2:E2:F8:24:22:03:E6:97:B4:1B:90:B4:EA:76
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ar4mD4Cv0uL4JCID5pe0G5C06nY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.195.208.0/20
Signature Algorithm: sha256WithRSAEncryption
ce:05:26:50:fb:62:c0:9a:80:cb:dd:a9:c1:eb:0c:be:ed:fe:
d1:ab:e3:af:aa:88:90:34:66:f1:9a:2e:47:94:31:f2:74:bb:
97:96:27:2d:56:65:e0:3d:70:65:e0:88:2e:da:af:9b:8f:f8:
52:c5:54:b3:86:2c:06:d7:ff:0e:39:59:a7:84:dc:ea:ed:cf:
73:f0:84:ba:5f:fa:c5:00:95:3e:6b:73:c0:ad:ec:25:51:d2:
f8:cb:f1:14:23:9f:1c:4f:26:3a:c6:fe:e7:7c:4b:a7:a6:07:
e7:78:44:00:ed:af:99:be:e4:e2:80:54:fc:19:70:b5:d8:4d:
7e:dc:11:1c:54:25:04:3b:2e:0d:25:92:72:94:9d:03:c9:e5:
9e:a6:74:0d:4f:bd:b0:62:21:3d:a6:8e:24:19:3c:b2:0e:02:
94:ba:da:76:15:e1:d4:1a:d8:ce:d7:b2:66:1b:e4:72:f1:7c:
0e:b1:35:fd:98:da:ed:b8:df:64:8c:81:e9:ff:4a:88:f2:2b:
ce:bb:c3:63:31:88:0b:dd:54:63:e8:3e:6b:53:5c:c8:e8:63:
4b:3d:9a:df:a0:4e:06:58:ef:b6:44:90:17:85:a1:3e:72:73:
1c:b2:30:97:1f:d7:b7:b3:ee:c9:f4:bc:84:39:ff:76:b8:3a:
7f:62:85:a1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MjA1NDRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZBQkUyNjBGODBBRkQy
RTJGODI0MjIwM0U2OTdCNDFCOTBCNEVBNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD+Tviwk3J3ZH5qyEeezqkoYJHzwH7Jia4GdeHxSm65uEuOHWzy
mKFn/K40wau/WHC/tMYL7Apc/rH+j8iivNYfbA/1qplZmRleNzPNtaUL6b6VmKPF
kaj5GqQVwRR6EiBsYQcYyJhut0SJIeLLd4whW3l3tYB9nwRQaRnlNwwpUwV1qYOi
0usvGeicMtc7zTxMapct6WxLbgMQ/RAthiVQN3OgMOhrlm7vwaBnHkySSzDG+KFJ
G0q/3apcPTSVdOCFLGSJwKUMDnqmezp9rC3syaUYC+DMKfTdT7ZCKjoj99UHNoUY
fgRrrDBqV1F5Ktw5/NUUMJVrJR2V+T3KUBMZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUar4mD4Cv0uL4JCID5pe0G5C06nYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2FyNG1ENEN2MHVMNEpDSUQ1cGUwRzVDMDZuWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ9w9AwDQYJKoZIhvcNAQELBQADggEBAM4FJlD7YsCagMvdqcHrDL7t/tGr
46+qiJA0ZvGaLkeUMfJ0u5eWJy1WZeA9cGXgiC7ar5uP+FLFVLOGLAbX/w45WaeE
3Ortz3PwhLpf+sUAlT5rc8Ct7CVR0vjL8RQjnxxPJjrG/ud8S6emB+d4RADtr5m+
5OKAVPwZcLXYTX7cERxUJQQ7Lg0lknKUnQPJ5Z6mdA1PvbBiIT2mjiQZPLIOApS6
2nYV4dQa2M7XsmYb5HLxfA6xNf2Y2u2432SMgen/SojyK867w2MxiAvdVGPoPmtT
XMjoY0s9mt+gTgZY77ZEkBeFoT5ycxyyMJcf17ez7sn0vIQ5/3a4On9ihaE=
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:59:06 2025 by rpki-client