Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/foP0f7o82UD9edqf2MuGVX1Z2b0.roa
File: foP0f7o82UD9edqf2MuGVX1Z2b0.roa (raw, json)
Hash identifier: ePaGBZSx9ym6l2MJZy2KvnqxHPoTRxHF94s1rnpD4Zw=
Subject key identifier: 7E:83:F4:7F:BA:3C:D9:40:FD:79:DA:9F:D8:CB:86:55:7D:59:D9:BD
Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial: 07
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/foP0f7o82UD9edqf2MuGVX1Z2b0.roa
Signing time: Mon 21 Oct 2024 02:03:05 +0000
ROA not before: Mon 21 Oct 2024 02:03:05 +0000
ROA not after: Tue 21 Oct 2025 01:23:02 +0000
asID: 9354
IP address blocks: 210.251.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Validity
Not Before: Oct 21 02:03:05 2024 GMT
Not After : Oct 21 01:23:02 2025 GMT
Subject: CN=7E83F47FBA3CD940FD79DA9FD8CB86557D59D9BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:07:80:66:04:7e:85:76:5c:84:3e:07:91:
00:7b:d4:0f:ee:fe:46:6a:8d:7c:81:e9:14:e5:13:
18:8d:99:f4:6c:6b:2d:f6:11:7e:b9:a4:f2:2d:e9:
0a:78:12:46:a5:92:fc:96:8e:ca:67:03:ff:0a:37:
b0:6b:68:9c:97:cd:6c:67:b7:9c:c9:7b:6e:89:17:
4a:b1:93:8a:b7:16:93:1f:d7:f3:21:29:86:19:1d:
e3:c2:fb:9f:ec:71:02:6d:b8:fc:fb:f9:20:36:d8:
1d:45:14:06:af:12:c3:24:c5:63:bf:33:3f:1d:3d:
92:33:c5:c4:97:81:cb:52:c6:76:91:b2:e7:80:4e:
13:83:e7:ac:34:d2:6e:06:c4:d6:d6:72:94:f4:9a:
27:2e:4c:75:00:0a:13:8b:eb:d2:97:37:12:06:04:
cc:75:e5:fc:c4:51:cc:b3:9d:fa:53:04:f2:7d:db:
36:da:6d:55:76:70:c1:a8:8c:a2:1a:0f:57:a7:f7:
2c:8b:64:45:12:1f:f0:32:c0:7d:2d:b3:a9:f2:97:
d4:04:2c:b4:f2:50:f1:fa:7c:de:2e:35:d7:7e:bf:
2c:a1:a1:08:f8:f5:54:f3:dd:62:4e:d8:8c:95:78:
90:5a:17:af:51:61:3a:27:91:ab:f9:ba:21:35:8a:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:83:F4:7F:BA:3C:D9:40:FD:79:DA:9F:D8:CB:86:55:7D:59:D9:BD
X509v3 Authority Key Identifier:
keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/foP0f7o82UD9edqf2MuGVX1Z2b0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.251.192.0/20
Signature Algorithm: sha256WithRSAEncryption
e1:09:71:df:7f:5c:d7:e6:dc:51:ff:66:6b:21:f4:1c:7d:b6:
a0:04:c1:3b:7f:45:c2:ff:68:04:6b:02:9e:1f:44:8c:40:50:
72:44:22:1f:e3:36:e2:ff:4e:41:94:3e:60:ce:e9:4c:08:bd:
87:45:c0:48:a6:f5:e2:a3:c7:5b:ac:35:9d:2f:bc:3e:5d:42:
4f:48:45:01:2b:55:d1:f8:56:84:d3:df:e5:21:c5:5c:d5:3e:
46:a6:e3:5f:db:48:66:1c:78:b1:c3:3d:3d:80:b9:59:e8:02:
f7:29:cf:d4:29:95:e3:40:3e:e0:2d:db:97:73:3b:35:f1:1e:
a4:f1:21:0d:2a:b1:85:fb:55:f1:e1:f2:84:59:91:8d:94:5a:
e7:36:63:c0:e6:eb:4c:8c:7c:d6:99:2b:cf:82:7a:1e:e4:64:
9e:b2:19:72:60:08:b2:bc:3b:7d:75:de:8a:18:78:1a:ca:fe:
a5:d0:37:ad:ba:69:a4:19:79:3c:4f:e8:b8:95:88:2e:dd:68:
0a:2e:1e:c2:60:ed:7f:18:40:17:dc:21:96:42:8a:d5:c7:77:
46:31:a7:00:a9:07:90:d9:11:c2:74:ab:28:9e:21:46:68:29:
d3:85:3d:ce:aa:da:70:32:3b:0b:06:a7:1a:f3:6d:dd:b5:0b:
47:2c:6a:0f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4
NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI0MTAyMTAy
MDMwNVoXDTI1MTAyMTAxMjMwMlowMzExMC8GA1UEAxMoN0U4M0Y0N0ZCQTNDRDk0
MEZENzlEQTlGRDhDQjg2NTU3RDU5RDlCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMbuB4BmBH6FdlyEPgeRAHvUD+7+RmqNfIHpFOUTGI2Z9GxrLfYR
frmk8i3pCngSRqWS/JaOymcD/wo3sGtonJfNbGe3nMl7bokXSrGTircWkx/X8yEp
hhkd48L7n+xxAm24/Pv5IDbYHUUUBq8SwyTFY78zPx09kjPFxJeBy1LGdpGy54BO
E4PnrDTSbgbE1tZylPSaJy5MdQAKE4vr0pc3EgYEzHXl/MRRzLOd+lME8n3bNtpt
VXZwwaiMohoPV6f3LItkRRIf8DLAfS2zqfKX1AQstPJQ8fp83i41136/LKGhCPj1
VPPdYk7YjJV4kFoXr1FhOieRq/m6ITWK0sMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR+g/R/ujzZQP152p/Yy4ZVfVnZvTAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn
k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu
MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80ODQvZm9QMGY3bzgyVUQ5ZWRxZjJNdUdWWDFaMmIwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNL7wDANBgkqhkiG9w0BAQsFAAOCAQEA4Qlx339c1+bcUf9mayH0HH22oATB
O39Fwv9oBGsCnh9EjEBQckQiH+M24v9OQZQ+YM7pTAi9h0XASKb14qPHW6w1nS+8
Pl1CT0hFAStV0fhWhNPf5SHFXNU+RqbjX9tIZhx4scM9PYC5WegC9ynP1CmV40A+
4C3bl3M7NfEepPEhDSqxhftV8eHyhFmRjZRa5zZjwObrTIx81pkrz4J6HuRknrIZ
cmAIsrw7fXXeihh4Gsr+pdA3rbpppBl5PE/ouJWILt1oCi4ewmDtfxhAF9whlkKK
1cd3RjGnAKkHkNkRwnSrKJ4hRmgp04U9zqracDI7CwanGvNt3bULRyxqDw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:06:43 2025 by rpki-client