Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nehysglzu-w7Lr5P4n__PP63b9s.roa
File: nehysglzu-w7Lr5P4n__PP63b9s.roa (raw, json)
Hash identifier: A5GtzXcnTbXsjtqPaZpSfnEgn/5jaoBQMxyG3JQJEoU=
Subject key identifier: 9D:E8:72:B2:09:73:BB:EC:3B:2E:BE:4F:E2:7F:FF:3C:FE:B7:6F:DB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B3F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nehysglzu-w7Lr5P4n__PP63b9s.roa
Signing time: Thu 06 Mar 2025 06:56:36 +0000
ROA not before: Thu 06 Mar 2025 06:56:36 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.75.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2879 (0xb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 6 06:56:36 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=9DE872B20973BBEC3B2EBE4FE27FFF3CFEB76FDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:ea:a3:ef:ea:d5:76:7b:5c:1f:ed:3f:82:
d7:4f:5c:df:c1:2b:cf:28:ba:38:0f:41:ba:29:44:
0f:9f:01:2a:3a:53:30:5f:0a:3a:cd:2e:53:ee:83:
4a:80:b7:7f:2a:45:a7:5f:ee:5c:69:af:c7:76:4d:
d8:d3:40:1c:f0:8c:79:f1:6b:1f:f6:de:20:0e:57:
6e:79:19:e4:41:07:4d:c1:12:24:37:18:85:e6:8f:
c9:a0:f7:0a:81:97:b4:61:dc:43:10:fd:49:f7:6a:
be:34:81:da:3f:2b:03:73:e1:7e:45:5c:82:e5:69:
58:6a:2f:75:23:f6:bf:72:cf:03:16:95:46:19:ed:
90:ef:ad:d2:99:09:91:9a:d3:33:6b:0f:48:53:79:
36:02:45:84:7d:bc:95:67:7f:d2:08:3f:6e:76:a0:
f3:85:77:e2:7c:e7:89:2b:65:ed:4c:35:c8:f1:dd:
87:fd:e1:d8:29:46:45:1d:05:7a:a2:f4:06:92:2c:
a4:e1:cf:ad:09:f8:c2:cd:cf:e8:6f:c4:2c:37:06:
7c:a2:19:24:a3:ae:b0:74:c9:2e:6c:d4:e3:cd:f7:
90:92:f8:d0:d2:37:48:65:cf:a5:f3:b6:4b:01:7d:
fa:d0:2f:07:32:55:fa:85:88:82:13:94:78:a6:ed:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:72:B2:09:73:BB:EC:3B:2E:BE:4F:E2:7F:FF:3C:FE:B7:6F:DB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nehysglzu-w7Lr5P4n__PP63b9s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.120.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:75:7f:ba:a3:22:ee:26:69:06:cb:6d:5b:db:75:99:de:2a:
c0:dd:22:7b:68:20:21:e5:98:0e:45:d6:3c:c8:1f:8e:20:b1:
95:be:3e:c7:99:09:b7:f6:39:d6:05:38:c1:0c:1a:3e:54:cc:
52:dd:ea:5a:6f:1e:43:68:21:8c:b6:35:77:a4:8a:a9:2c:fd:
66:8b:0d:19:2f:48:73:32:a7:47:9b:45:10:47:0b:39:08:23:
c6:de:23:b8:d8:79:31:f9:92:63:00:c0:b7:6c:0a:84:a1:cf:
8f:43:4a:5b:6a:c3:78:f2:75:69:e4:79:28:45:64:31:32:f9:
a8:31:ea:e8:a8:96:f4:e1:85:7e:38:81:ea:4a:33:eb:0c:a1:
f3:9c:55:07:9f:d0:54:4b:27:49:11:7d:a6:8a:57:81:75:39:
6c:9f:c6:d3:83:93:d6:bc:45:c0:f6:ae:98:cb:c2:1d:ed:7a:
44:9c:5d:bb:b8:0b:2f:89:bc:dd:29:14:c2:46:9c:20:3c:53:
b9:15:63:52:a7:49:4b:ef:7b:b3:65:d0:a8:fc:b4:57:37:37:
84:6e:d7:5e:d8:62:36:9a:68:ab:d3:cf:d1:a1:8f:86:c3:5c:
57:43:c7:fc:57:76:c7:fc:15:f2:b8:49:6e:02:4a:32:d5:73:
06:3d:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:38 2025 by rpki-client