Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/at1rG4m4w-GV9VHRj9-RtOS18OI.roa
File: at1rG4m4w-GV9VHRj9-RtOS18OI.roa (raw, json)
Hash identifier: i68Ref+RxmRlvg2B9H+OCq+O30R70fPGRH6Y6X5knZk=
Subject key identifier: 6A:DD:6B:1B:89:B8:C3:E1:95:F5:51:D1:8F:DF:91:B4:E4:B5:F0:E2
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0945
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/at1rG4m4w-GV9VHRj9-RtOS18OI.roa
Signing time: Sun 30 Jun 2024 01:29:31 +0000
ROA not before: Sun 30 Jun 2024 01:29:31 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.103.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373 (0x945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:29:31 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=6ADD6B1B89B8C3E195F551D18FDF91B4E4B5F0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:95:c3:cb:c8:2c:ef:85:c6:57:65:7c:9a:
36:7e:68:1d:c9:4b:8d:1e:0d:dc:8b:14:a3:a6:7f:
27:00:7b:a5:48:db:a5:92:fe:b5:dc:2a:fc:b2:a4:
30:d5:55:42:f5:f0:4b:82:05:b2:cc:d4:99:b3:46:
42:dc:3c:41:b8:2e:48:44:13:11:76:b1:9e:80:71:
69:79:72:48:0e:0b:3b:50:3a:af:fa:a2:af:cf:d7:
2c:8b:3f:12:f3:45:8e:e1:ee:2f:99:22:1c:fb:dd:
c2:df:a5:e1:ed:1a:e5:7e:1a:21:e6:06:3b:b2:dc:
ef:78:a7:fa:30:5b:e9:ff:d7:30:f6:33:2b:e2:ac:
60:08:ba:1e:3f:a7:c8:6b:29:b0:cb:5a:6b:d9:0b:
0b:99:58:52:d1:c1:fc:a8:e1:e3:60:34:3a:5b:b8:
28:67:6a:27:f7:2e:0f:81:96:77:5b:10:20:41:d9:
1b:05:58:fc:ce:58:f0:80:12:d7:09:6d:b0:13:62:
8b:8a:ee:f5:89:23:b5:90:4f:90:88:5c:56:1d:26:
4e:90:73:e9:9a:87:bf:be:4b:22:85:ac:a1:c8:7b:
a1:e7:ff:03:d0:1d:4c:f2:69:37:6d:2c:3e:b2:8a:
4f:85:13:91:52:c4:25:a9:2f:4c:22:9e:34:39:c8:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:6B:1B:89:B8:C3:E1:95:F5:51:D1:8F:DF:91:B4:E4:B5:F0:E2
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/at1rG4m4w-GV9VHRj9-RtOS18OI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.103.19.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3b:8e:14:c9:ab:d3:4f:77:35:59:6e:f0:06:f4:bd:fa:ef:
da:74:8e:1c:28:88:04:9c:a5:b5:1e:44:a1:07:35:31:20:96:
82:e7:3d:85:9d:7b:32:f5:b9:72:c1:cf:34:f0:c1:76:b2:d5:
ff:0f:8c:0f:f7:e6:60:a0:df:ba:d2:5e:9a:d2:d3:6d:89:fe:
9d:b6:05:98:d7:65:1a:42:53:6f:70:84:9f:46:33:34:d0:76:
4e:0b:90:02:d3:e9:ff:af:3e:f5:36:72:02:4c:81:38:fa:49:
13:22:28:ad:f2:66:31:5c:2c:0c:59:18:bd:8a:7d:d7:42:61:
93:ea:b5:94:e5:c5:a3:8d:cd:19:d0:bd:3e:58:8d:1a:3a:ff:
e5:9e:92:95:09:ec:e6:5a:43:33:0b:b4:e2:d1:34:1f:0c:90:
7b:85:5d:a9:f6:e8:05:c0:34:a2:83:9f:a6:4c:d9:bc:bc:c2:
4c:d5:0d:c3:f0:17:74:e2:fe:c6:71:31:f5:da:9a:58:ea:95:
32:1b:be:dd:61:ef:4e:21:bd:b2:3a:a4:15:33:8f:00:17:8d:
dd:e3:22:96:e1:f6:65:17:99:e7:5e:3c:47:15:a7:3d:86:99:
dc:cf:01:b0:26:31:69:ea:9c:ce:f1:14:f8:d3:85:79:5b:69:
1d:2a:d7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:52:47 2025 by rpki-client