Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4722/B6GoN6ip25aK0Kzov_Fx0cW0h9w.roa
File: B6GoN6ip25aK0Kzov_Fx0cW0h9w.roa (raw, json)
Hash identifier: epIKAs6u6h5aLoBUgopXRivTqReJ/G9zPami1vfnGS8=
Subject key identifier: 07:A1:A8:37:A8:A9:DB:96:8A:D0:AC:E8:BF:F1:71:D1:C5:B4:87:DC
Certificate issuer: /CN=35C4ED25F224BC3728CCE177A534394E0C85C3CF
Certificate serial: 23
Authority key identifier: 35:C4:ED:25:F2:24:BC:37:28:CC:E1:77:A5:34:39:4E:0C:85:C3:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/B6GoN6ip25aK0Kzov_Fx0cW0h9w.roa
Signing time: Fri 31 Jan 2025 01:32:41 +0000
ROA not before: Fri 31 Jan 2025 01:32:41 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 0
IP address blocks: 103.246.232.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 14:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35C4ED25F224BC3728CCE177A534394E0C85C3CF
Validity
Not Before: Jan 31 01:32:41 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=07A1A837A8A9DB968AD0ACE8BFF171D1C5B487DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:39:9e:7e:1d:d4:bf:9d:b1:72:4f:24:59:
da:e2:b9:9d:b4:36:dd:42:8d:60:22:86:0c:73:d3:
fc:1b:7a:c5:42:65:9e:ab:78:da:1d:7d:8d:60:33:
77:87:ca:aa:9d:16:2c:fc:c5:a7:27:f3:a7:99:5d:
c2:4a:33:61:1e:18:24:10:c7:95:f3:8e:28:32:ee:
4f:41:b4:9f:b8:6d:38:da:4d:e3:86:7e:98:28:52:
20:87:57:36:39:11:51:37:6e:cb:b9:dc:80:69:43:
0c:7b:6c:f7:15:13:38:57:6a:e2:ca:85:69:2f:0c:
06:8d:b1:9c:a0:24:8d:cc:04:31:77:1c:a4:d5:df:
57:10:41:0d:9b:7c:0e:a8:8b:ec:9f:62:6e:36:0a:
ac:3d:74:3d:57:92:2d:1f:c1:e1:a3:74:d0:cc:05:
98:62:e3:53:1d:8e:46:1a:5c:21:77:3b:e0:68:5e:
25:c2:a1:ec:e1:85:a2:63:3b:98:bb:b1:65:db:7a:
7a:43:48:32:d2:dd:78:70:42:7b:13:5d:65:31:a2:
08:53:f1:4c:0b:af:02:3e:90:d2:b0:90:23:a0:59:
eb:b6:7f:99:b8:f8:86:c2:3b:5b:d2:3c:e7:7c:f0:
94:8b:35:c8:56:5c:92:10:b3:1a:75:5c:45:11:57:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:A8:37:A8:A9:DB:96:8A:D0:AC:E8:BF:F1:71:D1:C5:B4:87:DC
X509v3 Authority Key Identifier:
keyid:35:C4:ED:25:F2:24:BC:37:28:CC:E1:77:A5:34:39:4E:0C:85:C3:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/B6GoN6ip25aK0Kzov_Fx0cW0h9w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.232.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:0d:a2:97:48:07:e5:48:b8:18:cb:1d:39:a7:4b:34:08:47:
40:93:0d:29:18:2c:72:68:ce:71:20:cf:3b:40:7f:4c:f7:08:
25:9a:23:06:30:cd:23:a2:e7:40:6c:8b:a7:3d:8d:24:38:80:
f2:24:49:ba:f7:b5:81:29:11:87:c3:20:e0:25:dc:9b:a0:73:
5b:af:22:da:31:e9:71:18:b1:94:bb:7c:31:65:6d:0b:cc:02:
0c:e4:06:b7:8f:98:59:3a:b4:16:45:bc:1a:aa:cd:a9:f8:9f:
3f:1d:d7:8f:7e:fe:1f:03:da:46:1c:3b:47:a4:24:60:ab:21:
52:f8:5e:ba:aa:ce:48:0e:3f:10:89:5b:10:bf:55:d0:28:5d:
fc:02:af:ae:df:75:69:37:4d:6b:f8:37:ca:31:f5:39:de:b1:
91:c0:0e:7f:2d:f8:3d:ec:73:ce:53:54:96:9f:b1:43:2f:5b:
18:8d:41:43:88:24:e5:f0:db:95:80:91:ad:ff:19:4e:1c:db:
60:70:b7:54:c6:b6:3b:a4:95:48:f2:96:c6:b7:94:9b:82:a9:
5a:10:71:21:c0:b4:4d:34:1d:2b:ea:92:db:41:db:3f:64:66:
d1:f2:c6:b4:42:7f:0f:85:20:57:e2:82:d0:62:b5:e3:3f:d8:
2d:13:05:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:47:03 2025 by rpki-client