Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/res9dVBxPUJ3EZULXsEPEcLbwFg.roa
File: res9dVBxPUJ3EZULXsEPEcLbwFg.roa (raw, json)
Hash identifier: zjBBVDtUANI5SOI0SoZMQ7dCbX3hgXlw2gJ929WsPdk=
Subject key identifier: AD:EB:3D:75:50:71:3D:42:77:11:95:0B:5E:C1:0F:11:C2:DB:C0:58
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0590
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/res9dVBxPUJ3EZULXsEPEcLbwFg.roa
Signing time: Fri 31 Jan 2025 01:42:09 +0000
ROA not before: Fri 31 Jan 2025 01:42:09 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 220.216.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:42:09 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=ADEB3D7550713D427711950B5EC10F11C2DBC058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:35:c9:1a:a2:cb:01:62:72:1b:9b:3a:95:
67:5c:0c:48:ef:d2:f3:92:0d:f0:66:d1:6b:b6:95:
b2:28:e4:f2:94:a3:62:d6:04:87:60:22:49:4d:f2:
6a:85:3d:7a:4a:d9:e7:9e:64:d6:d8:25:26:4b:6e:
e4:d3:2a:fe:33:55:6a:ae:6f:57:f6:4c:45:e1:02:
94:2b:8e:7f:0a:36:a0:12:ba:9f:1c:e5:fa:48:d4:
7e:77:92:36:41:e6:e6:05:21:b7:23:7a:df:14:b8:
d9:83:61:73:43:f0:b0:5f:43:04:22:0b:b0:9c:f0:
7f:4d:1c:5b:15:95:c0:a4:46:f6:2c:54:87:dd:46:
5d:be:ae:bc:42:d0:2f:cf:a8:f2:d9:81:92:84:48:
b1:5d:c3:97:15:8b:83:b4:52:51:c6:a9:2b:58:42:
37:3d:32:18:fe:14:57:a5:e8:a1:5a:19:9d:01:ae:
1f:11:fe:a0:bc:b4:ea:d8:86:89:a0:ef:73:ea:1a:
44:45:f7:48:00:b3:29:b0:5d:b4:8d:1d:a6:3a:1d:
45:fe:cc:31:3b:e9:28:41:c8:b5:2d:4d:7f:6b:cb:
fd:d3:60:1f:e4:78:cc:15:ff:5d:01:5c:1e:5c:ac:
fa:c1:db:77:a9:0d:20:e4:5b:da:8a:6f:d4:74:55:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EB:3D:75:50:71:3D:42:77:11:95:0B:5E:C1:0F:11:C2:DB:C0:58
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/res9dVBxPUJ3EZULXsEPEcLbwFg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.216.104.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:0f:46:92:8b:63:a9:5c:18:ec:f3:f8:e0:58:dd:1f:1e:34:
10:be:ab:bc:7a:fe:90:62:d0:72:08:31:f2:f0:a9:6b:2b:0c:
dd:43:c7:3e:d7:8f:90:1c:fd:c4:b3:10:0f:94:a3:17:1f:a2:
fa:0a:01:8e:de:1b:0a:8b:f6:bc:72:44:c9:ea:91:f1:08:6c:
75:73:2a:85:80:98:59:5f:e1:4a:c4:db:88:24:31:6d:89:14:
ac:47:4e:81:d2:2b:38:9b:cd:9f:82:f7:4b:05:b6:94:d0:69:
4b:e6:16:77:7d:fd:15:5e:c2:08:0b:de:1e:d2:48:6c:25:fb:
1e:0b:22:4b:59:77:43:33:c8:21:8a:94:f0:c7:c7:9b:c0:a1:
5f:07:1e:eb:ff:f1:74:68:9d:d4:82:47:45:47:da:d4:6a:cb:
a9:36:4e:0d:8a:b3:eb:44:c9:79:9c:d4:e1:08:a4:7f:6c:dd:
ca:d8:42:f9:4c:fd:46:aa:eb:ea:fd:3e:0e:c1:5b:42:9d:c4:
77:27:99:9f:36:10:c4:33:64:c7:e3:75:e2:c0:38:03:c2:2b:
c4:c7:ef:8f:4a:d2:b0:bd:a6:96:e3:72:af:98:af:ce:90:74:
93:ec:fd:a0:71:8e:ec:fc:72:3d:12:90:b2:28:06:e2:b7:3a:
86:70:81:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:22:26 2025 by rpki-client