Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sylUZOb4ZBo-qyzf_MmU7A9uoYY.roa
File: sylUZOb4ZBo-qyzf_MmU7A9uoYY.roa (raw, json)
Hash identifier: v02cC8o44/dZgpRxeRM5FYfhe7BldEwfww3r/i3PDj4=
Subject key identifier: B3:29:54:64:E6:F8:64:1A:3E:AB:2C:DF:FC:C9:94:EC:0F:6E:A1:86
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0C59
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sylUZOb4ZBo-qyzf_MmU7A9uoYY.roa
Signing time: Tue 01 Apr 2025 01:57:27 +0000
ROA not before: Tue 01 Apr 2025 01:57:27 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 183.75.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3161 (0xc59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:57:27 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=B3295464E6F8641A3EAB2CDFFCC994EC0F6EA186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:51:fc:83:8e:e3:d1:58:1d:18:26:9a:e4:
38:f5:67:93:2c:c5:b8:13:f5:e4:56:0e:a2:c4:e9:
6f:aa:dd:c5:d4:ca:e3:9c:31:eb:d4:8c:a2:f5:bf:
96:20:95:bc:1e:d4:48:0b:71:b8:3e:0b:8f:ed:0a:
54:39:ce:48:fa:f3:32:01:79:7f:be:40:40:b0:26:
59:16:b1:26:3e:f1:a7:67:d7:f9:ca:7d:63:3d:ae:
63:be:0a:c5:48:cc:e1:b2:33:f7:06:ed:af:b5:b8:
ab:a9:e7:90:f0:22:17:32:8b:99:6f:6f:60:d4:03:
8b:57:51:bc:17:a1:1d:94:1f:3e:79:73:93:35:85:
7a:a0:0d:7c:4c:c6:14:ce:2d:2e:6c:f5:77:7f:9e:
b1:f5:c9:bb:51:de:4f:17:2d:13:81:46:09:36:84:
2b:d9:1a:42:fc:4f:69:92:05:58:e9:12:48:49:90:
1d:e6:f7:65:5d:62:1d:f9:e0:f2:db:0e:94:17:4a:
9f:f1:9d:7c:4d:48:1b:c0:9a:c3:35:79:3c:b7:a0:
ea:fe:1b:a9:5e:cf:d8:4e:69:7f:e8:2e:16:95:4a:
14:bd:91:21:2a:c7:9b:da:ff:6e:eb:d4:f3:4e:2d:
5f:11:69:c1:ac:c4:51:e7:12:d6:85:5e:53:e5:45:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:29:54:64:E6:F8:64:1A:3E:AB:2C:DF:FC:C9:94:EC:0F:6E:A1:86
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sylUZOb4ZBo-qyzf_MmU7A9uoYY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.75.231.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:ed:b5:b5:07:3a:0e:af:eb:85:d3:6f:74:99:c2:26:ab:2a:
1a:93:34:d3:7b:2e:e9:00:a5:ee:be:f5:22:16:45:d6:0b:49:
89:d2:22:7f:c6:cf:b4:0e:95:63:5c:ac:10:96:76:00:89:55:
e4:01:93:c6:89:77:b8:b3:0d:be:4d:5a:f5:48:27:19:22:4a:
62:cc:49:ca:c1:0c:32:dd:a3:f1:e7:f2:23:ae:86:38:c4:e1:
39:4b:ae:9b:3e:b9:7b:cf:5b:9e:e6:19:ca:97:81:6c:c7:d4:
f5:b9:fd:cb:83:1a:5b:c0:28:3b:7e:70:87:ba:23:89:c5:10:
22:c1:8f:87:4e:18:2e:05:f3:79:3e:e5:8e:2c:81:3d:86:e2:
1a:a9:9f:17:b7:ad:69:d1:fe:af:9d:c5:1e:f7:19:4b:92:0f:
9a:80:31:4f:af:1c:7e:ae:ab:c1:be:79:8e:ad:56:69:54:e4:
f2:c5:9e:04:d8:e5:ff:07:75:75:63:b5:35:00:b0:51:67:3f:
c1:74:1b:7b:ef:6d:35:dd:8c:61:d8:a5:1a:c0:c2:1c:07:b4:
c2:dd:73:fc:fa:bb:57:60:54:33:d1:d6:3d:16:5b:79:86:b9:
85:c0:90:65:d5:47:1c:b7:72:d2:f7:93:58:23:97:21:e7:06:
0e:40:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:34:44 2025 by rpki-client