Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3-a-IRt2Z2ZTJSNLPTBKRp0vEiw.roa
File: 3-a-IRt2Z2ZTJSNLPTBKRp0vEiw.roa (raw, json)
Hash identifier: JYGkNOdnfYQeBV6FoVTLf61Y8VG3g2pEeltNCApoi/Y=
Subject key identifier: DF:E6:BE:21:1B:76:67:66:53:25:23:4B:3D:30:4A:46:9D:2F:12:2C
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0572
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3-a-IRt2Z2ZTJSNLPTBKRp0vEiw.roa
Signing time: Fri 31 Jan 2025 01:39:46 +0000
ROA not before: Fri 31 Jan 2025 01:39:46 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 219.126.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:39:46 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=DFE6BE211B7667665325234B3D304A469D2F122C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:05:e6:ef:39:7e:9a:d5:f5:06:7a:b2:6e:
62:10:aa:c5:ea:c3:19:dc:27:74:9e:26:8b:5f:86:
8f:4a:2a:82:0a:68:a2:a3:b9:e1:00:fc:ae:67:77:
6b:06:af:c8:06:e3:fa:03:b0:c1:57:9a:12:69:85:
98:83:13:78:0e:07:19:c2:8d:7f:3a:46:96:57:25:
ba:34:93:ea:e9:14:65:be:6e:94:22:01:48:98:6e:
ba:16:8e:50:02:88:32:c3:0b:c4:70:4a:30:10:52:
fe:84:7a:5c:e8:17:71:8b:d1:a6:28:28:d3:42:de:
a2:00:cc:d8:f8:c3:8e:00:77:1f:7e:de:10:40:d5:
6d:02:7b:57:90:00:d8:d4:59:24:15:7c:6f:89:e7:
db:0f:37:a2:4f:ab:58:6d:ac:8d:54:8e:1d:9f:33:
21:07:51:52:fc:89:41:f4:e7:e2:c5:85:c9:27:3f:
80:9d:7e:d9:22:da:21:e7:09:09:1c:3c:83:a5:b1:
b5:5c:ad:09:fc:6e:82:c1:da:8a:9c:de:5b:b1:a9:
27:01:1d:2f:01:f3:14:14:ee:5d:55:ea:67:f7:ad:
af:b1:01:5a:15:8d:5f:60:d7:10:64:87:7d:85:79:
5f:62:8f:1b:5d:51:76:15:12:b9:a4:bc:79:a6:30:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E6:BE:21:1B:76:67:66:53:25:23:4B:3D:30:4A:46:9D:2F:12:2C
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3-a-IRt2Z2ZTJSNLPTBKRp0vEiw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.126.64.0/19
Signature Algorithm: sha256WithRSAEncryption
19:0a:db:f1:f8:dc:0b:d3:8e:49:f0:06:c3:79:44:54:02:56:
ff:e4:2d:b1:17:7c:3f:fb:84:8a:20:6b:3b:10:96:4a:be:43:
39:45:e5:eb:45:81:98:1f:20:87:ae:bd:90:ba:06:fc:c9:f7:
67:c0:2b:b5:39:4c:0c:58:74:14:e5:c3:da:7b:f4:2e:3d:82:
7b:09:83:20:55:7c:53:e8:2a:05:4e:da:97:f0:5f:89:24:28:
2f:d6:ae:00:16:33:d4:35:9a:f6:63:57:75:71:d8:88:bb:48:
a4:4d:bd:02:02:11:32:48:5b:37:f2:9f:38:bf:9f:46:ee:08:
d1:64:ef:33:bb:aa:5e:38:29:e4:d4:89:87:73:34:31:1a:e0:
30:08:a4:45:ed:d2:46:01:67:e1:0d:a5:dd:c1:59:09:c5:67:
c6:be:6a:aa:86:70:1f:99:b8:fe:4c:97:40:4b:d4:c5:48:1c:
b9:8b:07:dd:47:73:98:9f:32:39:bf:82:a3:9a:da:20:0c:7f:
f8:4b:bd:a5:10:80:4c:3a:e7:eb:8e:ee:36:49:85:ce:45:1c:
98:72:d2:1c:70:e8:9a:81:09:0b:a4:00:b2:a7:fc:5c:3c:77:
3f:13:0e:76:21:91:80:f8:95:3a:aa:eb:ae:04:27:ad:7d:ed:
2e:c6:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:18:14 2025 by rpki-client