Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j3G-PAnmqHscFaWXFfyps0Y3O2M.roa
File: j3G-PAnmqHscFaWXFfyps0Y3O2M.roa (raw, json)
Hash identifier: czzHJOFu8L5KcmAuS5J75RcmHXQeLVIfNPjtCBqXIvQ=
Subject key identifier: 8F:71:BE:3C:09:E6:A8:7B:1C:15:A5:97:15:FC:A9:B3:46:37:3B:63
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0DC0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j3G-PAnmqHscFaWXFfyps0Y3O2M.roa
Signing time: Tue 01 Apr 2025 02:24:49 +0000
ROA not before: Tue 01 Apr 2025 02:24:49 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.105.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3520 (0xdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:24:49 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=8F71BE3C09E6A87B1C15A59715FCA9B346373B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:59:64:46:e0:c3:56:fb:cd:85:79:ba:70:
ce:f1:63:60:a4:a3:fd:fa:d2:3b:4e:6d:36:a7:53:
59:99:b4:b8:ec:f4:33:3c:60:66:34:c9:cd:a2:31:
72:97:af:2c:eb:49:8a:b8:3c:36:ee:b6:5d:bf:1e:
13:66:b1:e7:e0:89:fd:d4:e2:45:aa:cd:d5:8b:5a:
26:ca:fc:47:8f:28:72:89:a1:1c:16:10:e4:e8:97:
91:05:a4:46:c7:cc:ba:c9:74:e0:ee:f8:29:d8:97:
1d:de:23:85:a1:ed:71:c1:b2:94:b6:e5:2d:5d:c3:
c9:30:03:e0:57:14:10:a3:2a:f5:1a:64:ea:db:69:
2b:2f:0d:4c:3b:dc:2b:48:7e:ca:ce:00:cd:06:9e:
45:8c:a1:95:7f:51:08:eb:84:07:c9:9a:3b:db:cb:
86:0a:4f:d9:18:07:80:90:3f:88:ab:6f:4e:bc:fc:
0e:78:4f:d4:7f:c3:42:9f:ca:4b:d3:7b:b0:c2:19:
74:71:e7:fe:05:ff:3a:60:a1:83:57:ae:1d:33:6a:
b2:c0:47:d1:b0:38:ba:9c:d6:e1:bb:50:71:84:a3:
9d:e6:16:44:4a:ee:2f:fe:d0:95:3d:c3:1d:3e:5b:
ea:45:31:4f:8a:a9:57:1f:5b:7c:08:37:b8:0a:82:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:BE:3C:09:E6:A8:7B:1C:15:A5:97:15:FC:A9:B3:46:37:3B:63
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j3G-PAnmqHscFaWXFfyps0Y3O2M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.14.0/23
Signature Algorithm: sha256WithRSAEncryption
03:9d:1e:a8:7f:50:b1:4a:54:30:20:8d:f8:a9:5b:30:90:0a:
fe:0c:8e:30:13:5d:24:3d:4b:f2:48:a0:dc:ad:fa:e0:2a:51:
e3:72:93:cb:86:7c:f5:ba:0b:67:7c:2f:32:bd:ba:03:7f:64:
90:de:34:1e:cf:44:b3:1d:fb:dd:c6:25:d9:50:d1:9c:a9:16:
2c:74:41:9b:74:75:cb:22:04:f9:c1:cb:84:bf:31:71:18:3a:
95:11:dd:2e:9e:f6:88:12:24:08:b8:39:0c:37:2a:eb:eb:09:
d9:28:0b:07:60:e4:17:e2:3f:a6:35:f6:ce:e6:fd:dc:9a:a8:
9e:a6:e2:34:e3:56:d7:89:54:73:bf:25:0a:dc:2c:e6:ed:85:
91:33:1c:81:20:19:5c:e2:60:51:99:2a:2c:c6:a3:62:05:ad:
1f:41:e8:89:ec:c4:ef:3c:e7:f8:eb:2a:25:6e:42:f4:5c:01:
17:98:07:30:ab:c1:a9:6a:d7:1a:44:b8:71:55:23:3d:f3:24:
44:3b:a5:60:c8:69:24:f0:e9:29:f9:aa:2d:7d:68:1e:9d:28:
ca:b0:4b:10:44:20:48:15:6f:72:c1:25:45:61:e0:52:71:66:
6a:6d:85:c7:54:0b:95:72:d7:27:c1:e1:3a:39:ac:c2:c7:15:
d5:a0:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:34:45 2025 by rpki-client