Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rheTD2JHXqYLxU0c5IjrZGG4_uQ.roa
File: rheTD2JHXqYLxU0c5IjrZGG4_uQ.roa (raw, json)
Hash identifier: 8d19Y8lB7ZOjSpYiVjLaJIMTLUFBOli9wnRciZEfJsk=
Subject key identifier: AE:17:93:0F:62:47:5E:A6:0B:C5:4D:1C:E4:88:EB:64:61:B8:FE:E4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0963
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rheTD2JHXqYLxU0c5IjrZGG4_uQ.roa
Signing time: Sun 30 Jun 2024 01:33:33 +0000
ROA not before: Sun 30 Jun 2024 01:33:33 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.76.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:33:33 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=AE17930F62475EA60BC54D1CE488EB6461B8FEE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:6c:36:55:dc:22:b4:19:27:99:64:fd:20:
e7:cb:64:27:c8:3b:e6:86:60:eb:bd:7b:bc:44:47:
f8:93:0d:4d:41:b9:80:b8:8c:78:24:d4:58:37:46:
cd:0b:a2:03:53:e6:a6:01:48:06:5c:aa:a2:c2:1d:
f6:6b:4d:f1:fb:4e:17:6c:bd:b3:77:fa:62:8e:50:
71:ff:94:17:1e:43:b8:15:95:87:f3:d6:f7:d1:f0:
65:d6:65:9b:77:3f:02:7a:ce:89:c8:e1:87:00:38:
9b:8f:81:f9:99:87:18:bf:67:44:ef:04:c7:b7:7c:
33:10:8e:dd:24:0c:02:44:5a:39:42:a9:a8:0b:73:
71:d8:0c:ce:30:a3:61:e2:94:d9:b9:51:ce:21:64:
9a:d1:e7:36:c5:a6:19:eb:56:0e:d7:d8:55:d5:be:
5e:fa:c4:47:e4:dc:ab:38:6c:56:4b:4c:38:8f:f0:
e7:71:5d:00:28:7b:dd:c8:11:c2:dd:44:c7:73:72:
18:dc:e4:ac:83:dd:f0:81:69:fb:8a:c5:cb:f9:13:
fc:5b:96:c0:9f:aa:db:68:f9:ba:14:9f:d8:6a:29:
71:d5:0f:88:2f:b4:07:c1:1d:d6:ad:36:30:ae:5f:
be:f8:93:e2:c1:bb:27:7b:da:ab:e6:0b:b5:e5:b5:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:17:93:0F:62:47:5E:A6:0B:C5:4D:1C:E4:88:EB:64:61:B8:FE:E4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rheTD2JHXqYLxU0c5IjrZGG4_uQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:f8:14:97:f9:68:32:55:ab:14:be:69:1c:2d:fe:e2:41:4a:
e3:3c:fa:d9:72:98:be:93:ba:7a:30:f3:bd:01:fe:c3:a8:b6:
70:d5:89:7c:16:e3:d5:d9:c3:cf:37:26:d6:cb:28:27:49:e2:
d6:33:d7:41:e1:1c:78:bc:6c:9a:3a:61:ca:22:8e:5c:2e:da:
38:c9:41:da:29:22:20:6f:bf:dd:c3:8a:26:08:ef:3b:a5:f5:
f1:e3:df:1b:94:39:1a:89:fd:e3:21:09:67:d6:9f:b2:2c:a0:
f7:02:d4:0c:ae:6a:d0:27:91:e9:63:b5:75:b1:13:3b:b7:32:
a9:c6:ac:14:a9:be:e8:f2:29:27:28:11:a5:7c:3c:31:f2:10:
c9:ff:a9:90:07:10:c3:19:26:87:8c:e5:7f:f2:23:90:83:6b:
a7:c6:1c:72:d0:02:1c:41:e0:75:90:2d:40:c9:ee:fc:38:c9:
1b:39:84:6f:36:ab:c4:d7:7c:d8:a9:1d:9f:90:0f:eb:d4:a4:
03:75:46:30:d3:8c:a6:fd:83:1f:6a:0c:8c:68:0f:e9:23:68:
c2:52:0d:e6:59:12:78:69:83:32:15:63:f6:c0:c2:e7:c8:b9:
d3:c2:98:ed:cb:67:af:48:c0:90:3c:4b:42:23:4f:b8:e2:c1:
1e:0d:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:35:48 2025 by rpki-client