Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wAET1-nWuX2-LXiz-VsR7CRH1wk.roa
File: wAET1-nWuX2-LXiz-VsR7CRH1wk.roa (raw, json)
Hash identifier: ArTSXV4VTfIjVKXllKRt4fI39ZAo65FctvQJmBDjuaI=
Subject key identifier: C0:01:13:D7:E9:D6:B9:7D:BE:2D:78:B3:F9:5B:11:EC:24:47:D7:09
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 6A
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wAET1-nWuX2-LXiz-VsR7CRH1wk.roa
Signing time: Wed 02 Apr 2025 07:12:32 +0000
ROA not before: Wed 02 Apr 2025 07:12:32 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 160.249.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Apr 2 07:12:32 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=C00113D7E9D6B97DBE2D78B3F95B11EC2447D709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:34:1e:92:80:4b:9f:b3:fb:28:51:e3:42:
74:9c:bc:2a:33:23:22:c1:14:11:64:c9:26:07:ea:
ba:ee:e4:32:2e:de:54:4d:04:d7:5a:46:a4:b6:6b:
a1:78:e3:b1:25:66:24:01:1f:ef:84:65:e5:0b:59:
0c:88:42:cd:cf:b1:f6:ed:10:c9:07:32:eb:61:9a:
17:90:41:2d:c6:31:e5:2e:4f:c5:7b:0a:0a:2c:86:
38:af:45:38:18:93:d1:75:5f:50:b8:d3:4a:df:33:
24:e3:0a:37:e0:6d:f8:19:38:32:df:d0:ef:b4:7f:
97:ab:f5:6c:cf:54:14:21:97:7f:5e:77:cd:b1:6b:
7f:ba:1e:27:78:9e:bb:92:26:d7:8c:71:8a:da:91:
09:3f:f6:c4:f6:d7:6b:32:74:bf:c6:50:59:45:bc:
8a:d6:6a:a8:ff:77:ca:a7:e7:f0:7f:21:8c:26:02:
aa:5e:40:c6:95:b1:65:21:1e:81:b2:bc:e1:38:86:
5a:64:7d:8c:4b:36:29:66:45:3c:6b:c3:6f:b3:2f:
6a:25:af:b5:47:85:d0:19:36:bc:4b:c9:66:7d:ea:
7b:2a:2d:1a:04:43:76:af:9b:c1:4d:f3:ac:55:75:
26:d3:ce:83:49:cb:a5:1b:3e:6a:64:21:50:ea:fe:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:01:13:D7:E9:D6:B9:7D:BE:2D:78:B3:F9:5B:11:EC:24:47:D7:09
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wAET1-nWuX2-LXiz-VsR7CRH1wk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.249.94.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:06:66:53:46:f4:3d:51:d2:fb:fd:fb:bd:45:0e:b1:0e:13:
a8:8c:75:81:47:69:06:a2:d2:f2:9f:d1:46:2e:fd:fb:f7:4a:
31:b2:e9:51:54:38:e2:2c:44:32:f5:f2:7e:d1:50:3a:26:73:
b5:9b:d3:27:66:3c:ca:7f:c1:6a:c7:95:79:2f:55:05:fe:ad:
d8:bd:78:a3:5f:f6:a9:39:2e:b8:2e:96:ab:25:57:19:9d:91:
87:53:db:e7:a5:67:cb:68:51:52:36:19:51:1b:52:7b:f1:2f:
15:b2:96:d3:8e:fe:ad:0d:c8:66:20:d7:b8:95:cd:04:25:82:
db:58:81:58:7d:3b:14:5c:2b:78:76:58:89:dc:d4:b0:d3:d6:
17:f7:86:76:5d:b3:3c:57:dd:88:c2:bb:2e:35:a0:54:9c:9a:
3f:bf:84:a5:ed:0f:c9:4d:23:76:c9:05:37:3a:de:dd:5c:83:
de:6b:6e:b5:fc:74:4c:74:3d:ad:ca:80:3d:e2:e3:8e:e3:16:
66:d6:73:19:23:a8:af:45:3a:a4:68:62:de:68:82:78:79:c3:
88:2c:2e:fb:78:a9:ee:eb:c8:27:b1:22:f1:16:85:b3:07:dc:
82:39:fe:cc:f0:05:52:90:dc:22:4e:f3:73:59:8b:20:6d:9f:
37:c5:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:13:42 2025 by rpki-client