Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/pLmRL3zwGYr64BQDjX8s9RH9d9Q.roa
File: pLmRL3zwGYr64BQDjX8s9RH9d9Q.roa (raw, json)
Hash identifier: E+bYik8g+di3uyoawwRvJpvFhwFYskgWMzzOZYoqy44=
Subject key identifier: A4:B9:91:2F:7C:F0:19:8A:FA:E0:14:03:8D:7F:2C:F5:11:FD:77:D4
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 02E5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pLmRL3zwGYr64BQDjX8s9RH9d9Q.roa
Signing time: Thu 10 Oct 2024 01:16:23 +0000
ROA not before: Thu 10 Oct 2024 01:16:23 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 10013
IP address blocks: 27.133.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 10 01:16:23 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=A4B9912F7CF0198AFAE014038D7F2CF511FD77D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:80:91:26:2e:2c:2c:32:05:65:96:26:d2:
fb:47:65:ef:72:7b:e5:45:11:0e:13:d4:c9:87:a6:
d8:0d:f2:58:1d:e8:cb:64:9f:af:43:cb:f4:c9:ed:
c2:61:2b:86:71:e6:e9:eb:27:8e:a1:e0:87:c6:f1:
79:17:95:b5:4c:b6:57:49:16:eb:82:a0:bd:3b:59:
db:3d:52:3d:e7:f9:11:34:cf:25:c3:75:36:56:cd:
5a:f1:4b:d6:29:b1:79:a4:8f:35:a8:d8:27:8c:21:
a8:61:ad:51:13:02:4b:40:ba:08:99:de:0b:33:b5:
ba:48:67:16:41:cd:85:d2:8e:e9:08:59:c9:5a:fe:
79:fd:e3:a6:00:2b:d6:ff:ab:af:d9:ed:8d:13:14:
e2:2b:46:20:91:1c:b6:e7:8f:c4:51:5e:37:e2:e2:
9f:61:5c:2d:b7:e7:ac:b6:c6:5c:e6:e5:f5:32:9c:
b0:b3:2f:db:2b:5e:8e:93:0e:a0:3f:59:26:02:c6:
3d:39:66:5e:c4:ee:80:3d:61:e0:4b:ea:15:b1:5a:
88:b0:f3:aa:f0:13:ab:5f:75:01:c8:08:ce:63:c7:
09:2a:57:60:d8:e7:66:0b:ec:27:f3:cf:d2:27:96:
bc:92:8c:8c:2f:46:f7:b5:cf:f1:b5:a5:5a:31:66:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B9:91:2F:7C:F0:19:8A:FA:E0:14:03:8D:7F:2C:F5:11:FD:77:D4
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pLmRL3zwGYr64BQDjX8s9RH9d9Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.133.46.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:55:ed:0f:52:ac:0a:a0:3e:cb:3c:34:8f:49:1c:3b:2a:4e:
9d:ca:9a:a7:d5:8d:f8:1b:6a:8c:d2:67:44:75:ad:af:f1:17:
9e:c7:fb:8e:48:3b:eb:4c:29:82:9b:95:0f:22:51:32:1c:ef:
a2:df:ad:47:d7:49:bd:ff:3a:be:51:58:5b:60:1b:11:4b:27:
c9:47:7f:90:a9:96:6a:22:e7:fe:ed:60:c6:87:52:1e:79:18:
aa:54:08:7e:50:41:82:94:77:cd:e9:ad:1e:79:7c:84:8c:47:
75:3e:42:9b:87:f9:42:75:37:7f:38:33:52:fa:f6:20:69:a0:
89:a9:14:ad:ed:b6:9b:51:0f:0a:11:1d:ea:ab:da:12:65:58:
d7:2e:3b:03:b4:88:bd:90:42:3f:19:b8:c0:2f:0d:f4:e6:64:
3f:55:1b:64:1d:7e:58:eb:ca:13:e1:9b:98:55:92:76:91:61:
ae:86:e6:b2:51:ed:33:d4:ba:76:2f:d9:2a:2c:9b:d4:7a:f7:
22:26:1f:66:d0:f9:98:8b:ec:ea:98:1f:65:8b:0d:12:7f:5e:
19:89:6c:1b:11:e2:12:23:27:8f:46:8f:a7:b5:53:1b:2d:bd:
40:15:e7:6b:0b:f9:4f:65:5a:19:29:0e:97:b9:32:fd:80:bb:
30:fc:eb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:54:44 2025 by rpki-client