Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/GzVHryjFpeCGd7Xh9X_DafC8pM8.roa
File: GzVHryjFpeCGd7Xh9X_DafC8pM8.roa (raw, json)
Hash identifier: 10j13d2IDF4s9G+3sfxpwjtYIDINAWcNfZmTN8yRbT8=
Subject key identifier: 1B:35:47:AF:28:C5:A5:E0:86:77:B5:E1:F5:7F:C3:69:F0:BC:A4:CF
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: 78
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/GzVHryjFpeCGd7Xh9X_DafC8pM8.roa
Signing time: Fri 31 Jan 2025 01:34:46 +0000
ROA not before: Fri 31 Jan 2025 01:34:46 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 9622
IP address blocks: 202.122.224.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Jan 31 01:34:46 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=1B3547AF28C5A5E08677B5E1F57FC369F0BCA4CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:3f:84:a7:a3:79:ba:87:7e:6c:d6:11:d8:
26:98:ae:3c:58:e7:0e:8e:dc:f3:58:48:f4:97:7e:
b1:98:dd:c4:73:c0:0b:0d:15:4d:84:92:80:8c:7a:
7d:6d:72:7f:b0:8d:5c:c1:f9:5c:74:f3:d6:4a:c2:
34:90:2e:3f:3f:21:29:6f:9f:c7:2d:ed:34:f7:7b:
33:d2:4c:9a:5e:f5:78:48:9b:4c:91:33:8b:79:2a:
5d:9d:72:7d:ce:24:d3:d7:74:73:be:ab:fe:a4:6e:
91:35:c7:71:06:dd:df:ff:f3:c4:5e:9b:84:d0:28:
a6:12:01:ec:62:08:0a:28:38:cb:fa:25:a5:39:a0:
9d:0e:af:f0:5d:8f:26:00:9f:a7:51:b3:33:df:b7:
76:35:b2:3d:82:3f:ed:40:f7:2e:ed:3e:14:4c:2f:
f6:bc:15:83:3e:42:14:81:c3:18:c9:48:77:96:c2:
9f:d4:9b:f6:a8:5f:96:53:68:bb:0b:cc:4d:59:21:
92:12:93:23:b5:71:09:48:ca:50:eb:d5:25:1e:e9:
d5:ba:e0:3a:81:a5:b5:2c:74:90:64:b4:c2:4a:ad:
06:3d:3f:c5:2e:ba:03:03:ec:ce:86:aa:e2:32:a4:
8f:d4:30:53:3b:ed:a4:04:96:aa:f0:39:46:20:04:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:47:AF:28:C5:A5:E0:86:77:B5:E1:F5:7F:C3:69:F0:BC:A4:CF
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/GzVHryjFpeCGd7Xh9X_DafC8pM8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.122.224.0/19
Signature Algorithm: sha256WithRSAEncryption
39:f5:5a:98:45:52:e3:31:33:12:86:4d:24:7e:ab:6d:2b:18:
9f:a7:71:02:aa:5c:f2:87:54:0f:84:50:dd:15:bb:e8:4e:93:
ee:2e:73:81:76:37:58:ff:ca:f8:fd:2c:23:73:0b:63:a0:31:
df:54:12:72:7c:7b:6e:c6:28:47:11:fb:02:ff:5f:74:6d:98:
44:2d:31:f9:33:5b:8f:74:be:08:b6:c1:89:c5:01:26:da:04:
22:79:ba:c5:8d:1c:e3:c9:24:a4:e9:7c:ec:64:a9:84:8f:31:
ea:c5:98:2b:e5:2f:e4:3f:a7:de:1a:ca:11:63:0e:17:0c:a8:
30:59:e6:19:b7:48:da:10:be:ab:11:48:4a:28:3f:5a:c9:bb:
8b:c7:3d:41:81:2e:67:7f:8d:85:d8:3e:c2:e4:e9:ea:cc:d4:
0d:5c:02:68:fe:b7:da:41:c4:cd:da:28:5d:8f:3b:a8:86:d1:
e0:3c:cc:43:9a:3d:46:95:b2:35:3d:b1:e8:e3:c1:d0:92:75:
48:10:fc:2b:b1:6a:8c:17:05:44:2d:12:77:cf:c4:03:c9:8a:
de:0a:ae:08:56:a0:26:16:3b:31:54:ff:26:72:fe:56:b7:0f:
c6:c2:af:ca:79:64:cd:fb:7f:cf:57:1f:52:b9:dd:a9:ee:57:
d9:9a:ce:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:40 2025 by rpki-client