Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pF9Ar59i0a1qMTblMahWIUrI2jo.roa
File: pF9Ar59i0a1qMTblMahWIUrI2jo.roa (raw, json)
Hash identifier: 8lQPaNm8RpxSZbX7Lxy/03vcFy37nfpwHRJabJqaPrk=
Subject key identifier: A4:5F:40:AF:9F:62:D1:AD:6A:31:36:E5:31:A8:56:21:4A:C8:DA:3A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0CF2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pF9Ar59i0a1qMTblMahWIUrI2jo.roa
Signing time: Tue 01 Apr 2025 02:11:30 +0000
ROA not before: Tue 01 Apr 2025 02:11:30 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 220.210.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3314 (0xcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:11:30 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=A45F40AF9F62D1AD6A3136E531A856214AC8DA3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:da:84:7d:4c:0b:c9:9c:bd:3e:53:5c:f7:
fa:bd:34:94:d4:8e:1c:59:c6:a7:c9:00:40:32:32:
e5:f9:43:d5:99:80:2f:06:05:6d:01:c5:de:d1:e0:
68:4a:e2:25:3b:1d:73:92:00:e7:e9:ba:d2:03:a5:
c6:5e:75:87:d6:73:e1:61:74:3e:d0:ea:66:c6:f5:
66:de:57:db:08:be:61:65:ca:6b:11:0d:a2:00:2f:
44:b9:56:39:35:17:29:b5:8e:f9:d6:70:e1:ce:0d:
0c:61:98:61:6e:2e:3d:df:d6:b1:9d:8f:cc:6a:1c:
5c:f2:cf:1b:ad:9c:fb:e3:74:0c:c0:c0:9b:78:67:
06:e5:1a:7c:58:72:51:c2:e6:f7:61:42:41:e7:c1:
3c:d8:ee:1e:4b:f8:cd:63:85:85:4f:80:b5:c0:ad:
c0:c3:d8:51:0e:d0:08:41:a4:d1:ec:ea:76:c9:e6:
18:ad:46:ec:ea:9c:74:a6:58:13:c9:11:49:8a:ad:
c1:66:56:d1:d9:16:14:b5:c3:30:5c:7b:68:49:e9:
c3:b3:03:fd:9f:80:05:70:fc:5c:26:19:11:fb:3c:
04:72:04:3d:ba:13:0c:1e:72:31:6f:52:47:62:21:
71:ef:a9:3f:1f:ac:68:d6:5c:6e:c2:97:f8:59:46:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:40:AF:9F:62:D1:AD:6A:31:36:E5:31:A8:56:21:4A:C8:DA:3A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pF9Ar59i0a1qMTblMahWIUrI2jo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.20.0/23
Signature Algorithm: sha256WithRSAEncryption
75:9f:36:fc:b1:6d:e1:99:05:19:45:93:63:e3:74:45:df:22:
22:8c:f8:c5:6d:a9:f8:16:6f:e4:f9:0f:ee:38:5b:f7:0e:41:
3b:7b:fb:00:74:a9:65:0b:20:23:d2:25:90:7c:51:d4:c5:49:
62:7d:8a:d6:f1:3c:9d:ac:f7:bd:23:8c:89:62:aa:92:4e:cf:
ee:d7:96:64:c4:05:1a:98:fb:d1:d3:f0:e9:ec:0e:02:36:88:
af:38:06:ea:75:09:2e:9c:b9:72:c9:de:12:5d:70:1e:09:34:
2a:b8:d7:a7:97:a6:85:e5:27:75:66:c6:1c:20:73:44:a1:48:
33:fe:61:4c:d8:0e:29:60:5c:ee:1d:1c:37:9e:89:ff:69:80:
71:f6:d7:84:0a:ae:d6:a2:a1:92:34:67:dd:08:97:0d:83:7a:
3b:71:de:14:d2:3d:4e:2c:44:58:26:b0:74:3e:67:a0:41:4f:
94:6b:81:c1:ef:d0:ad:23:3c:5f:a2:b2:c3:77:12:44:ce:dc:
0e:7d:b7:fd:93:4d:79:b7:cd:0b:f4:17:2c:20:f5:89:ab:55:
d2:7f:bf:ac:b4:81:c8:04:4d:49:f9:76:df:35:46:cb:66:7b:
37:ac:e8:00:80:a1:ba:cc:27:c7:3a:8e:a1:25:e2:d2:b7:be:
e1:2e:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:52:43 2025 by rpki-client