Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/h6_gLx-N8x47dTaNSiHPL75P0nw.roa
File: h6_gLx-N8x47dTaNSiHPL75P0nw.roa (raw, json)
Hash identifier: xC5pgSVkDOWCx3fbD6C4MA3U5WbeEvLGvodq9lzI5+I=
Subject key identifier: 87:AF:E0:2F:1F:8D:F3:1E:3B:75:36:8D:4A:21:CF:2F:BE:4F:D2:7C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0DFC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h6_gLx-N8x47dTaNSiHPL75P0nw.roa
Signing time: Tue 01 Apr 2025 02:29:12 +0000
ROA not before: Tue 01 Apr 2025 02:29:12 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 61.195.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:29:12 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=87AFE02F1F8DF31E3B75368D4A21CF2FBE4FD27C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:2a:41:66:34:d7:0a:26:d4:9e:d3:03:8d:
52:92:eb:14:5c:44:ee:6e:bd:d5:cb:47:79:8e:85:
b9:e4:fa:20:c5:a7:52:cb:c7:50:bc:7a:22:93:13:
d9:9a:0b:1d:8f:6f:38:4e:f3:43:48:48:a1:8d:f8:
92:8e:15:66:7f:c3:2d:e6:47:b8:42:3c:60:b4:ed:
01:bb:65:f7:27:71:33:3e:69:e1:cb:f8:50:70:91:
cd:d3:5e:59:ec:19:ac:22:e5:0b:7b:da:25:3d:07:
90:b7:d1:6d:31:2d:5d:ed:e8:2d:8c:f6:c8:4d:b3:
34:bf:2d:4e:a3:f8:07:fb:46:ec:61:05:c4:bb:c0:
d3:5b:6c:c7:bb:68:3c:58:b6:f2:68:5a:61:d1:a5:
81:0d:92:57:2a:25:14:1b:3e:8a:fe:44:b2:ff:4f:
6e:18:47:19:60:86:f6:93:9a:64:de:bd:ab:14:f3:
bf:f1:ce:ae:a9:e7:e7:8f:3c:8f:02:ec:38:55:0a:
9f:3a:04:ec:0a:f9:8d:9c:e2:66:8f:92:ea:48:88:
fd:71:54:69:06:9c:c2:d5:74:07:b8:ba:42:ee:8c:
f9:91:60:de:b7:59:fb:19:c8:fa:0d:2e:e0:28:6b:
4f:72:f1:20:f4:18:f2:87:bd:67:62:2f:a4:71:00:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AF:E0:2F:1F:8D:F3:1E:3B:75:36:8D:4A:21:CF:2F:BE:4F:D2:7C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h6_gLx-N8x47dTaNSiHPL75P0nw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.195.208.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:67:f1:7b:f8:07:57:e7:25:d2:e2:1e:85:f5:2b:58:41:e7:
6d:f4:7b:e7:3f:ed:27:aa:7b:6f:19:81:75:9a:42:cd:a4:d6:
ae:a5:b8:38:15:e3:fb:c4:16:50:73:74:98:16:0f:2e:79:6b:
18:c7:ad:83:38:ae:9b:c6:bd:93:73:f8:9c:93:9f:19:0c:01:
f8:4f:af:42:d1:87:65:3b:f0:21:cd:f8:1e:ba:92:a5:c5:f9:
7c:89:6a:ce:57:4e:18:b8:f3:4f:1c:c1:f3:8b:b7:95:1f:91:
a7:96:81:72:49:c8:d5:98:83:b0:14:ab:66:35:0a:67:ed:a0:
02:aa:ed:5d:73:8a:a7:ce:95:d7:7c:d6:a6:13:00:b2:36:71:
a5:9e:84:c2:da:69:bd:7e:cc:bc:84:1d:58:6b:59:da:a7:c9:
ab:53:4d:42:7e:86:67:14:e3:aa:b0:10:3c:24:21:a5:b1:98:
53:ab:e2:17:2b:18:90:48:d0:36:a0:01:9b:dd:29:4e:6e:62:
0f:62:2e:62:fc:f8:0c:e0:78:3b:3e:e6:54:2a:54:17:5e:b6:
56:15:c8:90:2b:51:0c:3d:ab:87:b7:ea:e2:f4:7a:55:6a:13:
8c:9b:19:f5:e5:3f:72:53:75:20:eb:26:ef:1c:38:3e:f9:5c:
d8:35:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:14:21 2025 by rpki-client