Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fLRlEwxkR7LMAVNlnggwYhcUp8Y.roa
File: fLRlEwxkR7LMAVNlnggwYhcUp8Y.roa (raw, json)
Hash identifier: Fpg/h/kKD5IeQ89A/dFKFezEOGd/VAouxHV4J6Q1EJ8=
Subject key identifier: 7C:B4:65:13:0C:64:47:B2:CC:01:53:65:9E:08:30:62:17:14:A7:C6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B9F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fLRlEwxkR7LMAVNlnggwYhcUp8Y.roa
Signing time: Tue 01 Apr 2025 01:39:52 +0000
ROA not before: Tue 01 Apr 2025 01:39:52 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.107.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2975 (0xb9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:39:52 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=7CB465130C6447B2CC0153659E0830621714A7C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:9b:2a:b9:5f:6b:17:10:0c:2c:3e:14:bb:
9f:98:52:8e:05:0b:84:51:49:e2:20:dc:6e:fc:39:
b9:3a:80:75:e6:8d:1e:8c:74:3f:7a:db:e1:49:b0:
49:36:41:ab:59:f2:82:fb:3a:30:70:12:16:11:bf:
50:fb:62:1c:60:c8:a2:6d:3b:58:f0:4d:a7:b6:8f:
be:43:96:91:51:ee:0d:3d:49:54:3c:9c:88:80:12:
ac:29:2e:41:24:ed:57:79:b0:e7:10:df:95:e1:43:
8b:39:8a:d1:c7:27:14:ee:db:22:22:8a:71:8e:4a:
13:b0:66:34:e9:a3:a1:82:69:71:7f:50:f3:8f:e3:
be:16:c4:c8:0e:aa:0c:35:59:82:1e:ac:0a:a4:04:
75:44:2f:87:4a:df:5a:b0:a2:87:cb:d0:fb:b3:18:
9f:3a:bb:14:fc:3c:8e:f0:72:8f:f1:1e:9e:8c:87:
6c:1a:72:58:eb:53:35:25:b3:69:4d:8c:35:dc:40:
fe:1a:b0:ec:43:0b:ef:4d:92:6e:72:a8:bc:a7:b6:
1e:62:e5:8e:18:83:e1:f1:19:53:d5:04:b6:06:08:
07:e3:81:8c:59:f4:30:13:7b:ff:2b:7d:b8:91:13:
50:b5:a2:a7:5f:af:19:bc:f4:ef:a0:1e:04:76:44:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B4:65:13:0C:64:47:B2:CC:01:53:65:9E:08:30:62:17:14:A7:C6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fLRlEwxkR7LMAVNlnggwYhcUp8Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.107.0.0/17
Signature Algorithm: sha256WithRSAEncryption
3c:07:55:51:9c:d4:f6:c8:c9:5e:29:dd:0d:7c:ff:c9:f6:4b:
b0:5b:c3:a7:8b:7e:9d:22:b5:91:67:68:b1:be:de:86:e2:a9:
e8:0a:d8:1f:e8:db:3e:95:b7:eb:27:70:7f:94:99:fa:ad:da:
a2:2f:12:e3:40:ad:a4:68:04:74:06:bb:be:d6:44:70:e0:3e:
ca:9c:e0:13:9a:f7:78:d3:0d:65:6d:fd:1e:19:5f:a7:a0:ac:
e8:10:f5:3a:9b:02:88:b3:3e:cd:b8:88:1d:c1:c2:77:f4:5d:
8d:49:53:c4:25:79:20:3d:c8:a6:7e:b9:29:85:2a:fe:dd:3d:
20:11:40:9c:4d:17:7b:4c:fd:53:ec:05:56:5b:4b:7a:9e:da:
2f:45:68:84:80:5e:a6:68:94:77:29:94:fb:37:61:03:d6:52:
fd:04:66:d5:64:f5:8f:e1:48:71:ad:a2:63:38:5b:27:cf:93:
d6:1d:80:e1:0c:3a:75:4f:6e:3f:25:2b:3b:28:08:8f:71:17:
82:2f:73:bf:c2:4a:f9:b9:01:70:44:56:50:1d:e0:46:e8:2e:
3f:cf:77:4a:d6:62:92:b3:3a:25:0d:a3:93:b8:8b:0d:4f:69:
5c:a5:b7:2a:db:af:c0:0d:f8:3c:2c:2d:9d:04:87:18:b3:64:
01:b8:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:13:17 2025 by rpki-client