Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t1bGKWnCUXcXVoYRdlRiahnFmKs.roa
File: t1bGKWnCUXcXVoYRdlRiahnFmKs.roa (raw, json)
Hash identifier: BxzWKV9JWWpDhmTsiSxdQzKyfYZc6tnGdQuaHh2bKMg=
Subject key identifier: B7:56:C6:29:69:C2:51:77:17:56:86:11:76:54:62:6A:19:C5:98:AB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E16
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t1bGKWnCUXcXVoYRdlRiahnFmKs.roa
Signing time: Tue 01 Apr 2025 02:31:32 +0000
ROA not before: Tue 01 Apr 2025 02:31:32 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.96.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3606 (0xe16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:31:32 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=B756C62969C25177175686117654626A19C598AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:05:dd:20:6f:b7:eb:d0:09:af:5b:89:d1:
2b:e1:11:f5:40:ce:b1:6b:c2:16:6a:81:a2:1e:9c:
83:d0:f9:9f:3b:85:f1:5d:23:57:23:d9:83:67:3b:
d6:81:c3:dd:13:a2:05:c4:50:05:24:92:82:58:3a:
7a:ac:a9:12:57:4c:bd:06:19:0f:44:92:28:21:1c:
9d:f9:a5:99:90:64:b2:35:47:d9:4a:3e:d9:32:11:
d5:de:8a:f0:f0:28:06:ca:28:a6:09:f6:4c:d8:c7:
86:a0:29:fd:9d:c0:40:1f:94:f7:c2:b2:38:d7:8a:
5c:df:3d:a7:2b:43:6c:52:79:5f:78:ef:d7:45:1c:
5d:fa:02:55:7b:e1:0f:71:81:29:f0:77:0a:d0:06:
8b:0a:9e:c2:bf:a2:10:cb:7f:5d:fd:e3:66:f0:b9:
fb:83:0a:73:49:f2:ae:86:21:73:2a:ad:51:5e:22:
36:4a:72:e0:1d:ea:87:b6:43:93:f4:1c:40:ea:9b:
3c:15:84:41:13:7c:33:99:14:cf:c1:bd:49:47:4f:
99:f8:19:00:06:6f:d8:8d:e1:99:50:6f:c8:1d:be:
96:e1:0f:fa:9a:2a:37:74:1a:65:dc:8f:91:6d:5d:
9a:c8:df:fa:75:40:9a:7d:27:8e:c6:38:13:43:ae:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:56:C6:29:69:C2:51:77:17:56:86:11:76:54:62:6A:19:C5:98:AB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t1bGKWnCUXcXVoYRdlRiahnFmKs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.19.0/24
Signature Algorithm: sha256WithRSAEncryption
54:9e:da:ea:14:0a:13:dd:ed:9b:8c:c8:3f:f9:7a:ad:cb:aa:
8d:e2:9c:2b:12:bf:2c:2f:50:a3:1b:73:ae:ff:76:b8:5d:49:
c1:92:23:c4:c9:05:8f:4c:4e:24:30:34:38:0e:6f:39:2e:97:
3d:0d:fa:d1:a8:c0:db:24:96:a4:36:e8:e3:cc:ce:9b:c3:69:
85:92:ad:43:3e:bf:fd:87:a9:60:6b:5b:9d:e5:4b:40:d3:8d:
21:46:74:84:1b:12:12:d5:0a:e5:01:b5:22:af:da:bd:f1:21:
30:d4:ff:e1:55:4c:0b:5d:48:00:95:25:7d:ec:09:e0:ed:61:
2e:be:05:58:8f:40:9f:e8:d1:49:33:e9:da:31:7b:83:18:21:
b1:16:eb:5c:63:a8:91:ae:72:13:a2:a3:a1:51:1b:62:cd:24:
08:b0:58:84:3b:77:33:d6:19:20:89:ce:a7:8f:da:0b:2c:1f:
b8:1d:87:4e:f6:d6:ab:49:5c:86:e9:79:69:38:3d:62:6e:fd:
74:b6:45:5b:fb:fc:24:dd:b5:cb:c4:7e:1c:b6:9f:3c:20:86:
4e:0b:87:c8:e1:c2:e7:12:ce:31:16:d9:b6:cd:3b:8f:b0:f9:
6d:68:aa:9e:d8:19:d0:dc:be:21:ab:98:94:5c:f6:82:fd:50:
0f:67:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:34:33 2025 by rpki-client