Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/98TZeH6PXALgekJCwR4Q11cVcTY.roa
File: 98TZeH6PXALgekJCwR4Q11cVcTY.roa (raw, json)
Hash identifier: 8E/Iu9CtESAnsgNa39sCgb8AYAoBCt0VRZGgHRmDQNM=
Subject key identifier: F7:C4:D9:78:7E:8F:5C:02:E0:7A:42:42:C1:1E:10:D7:57:15:71:36
Certificate issuer: /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial: 1C
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/98TZeH6PXALgekJCwR4Q11cVcTY.roa
Signing time: Sat 29 Mar 2025 06:01:00 +0000
ROA not before: Sat 29 Mar 2025 06:01:00 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 18129
IP address blocks: 103.154.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 18:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
Validity
Not Before: Mar 29 06:01:00 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=F7C4D9787E8F5C02E07A4242C11E10D757157136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:29:58:e1:92:e5:cf:da:58:12:12:2f:e7:
dd:e5:91:da:1c:9e:b1:77:82:e1:7d:c4:10:2b:9d:
5c:06:9d:d2:0e:ae:38:31:7a:7a:a0:ac:77:14:6f:
d2:e3:bf:0b:22:9e:c8:c4:59:c4:de:19:4c:6b:c8:
49:27:6b:06:9e:f8:35:a8:74:d4:f2:a8:2b:57:ae:
a2:8b:ac:a2:02:25:83:53:65:41:ee:9e:2a:49:2e:
0d:78:41:a0:91:fb:9a:73:e9:46:20:36:55:15:e4:
b2:5c:d4:d4:51:aa:4d:9d:fb:57:66:25:eb:7b:b4:
ed:f9:74:81:2e:51:78:03:ed:e6:5f:fe:b5:dd:7c:
46:24:78:c4:3c:15:85:75:89:5d:cc:69:72:0c:b2:
a5:b4:d3:35:73:7a:5f:70:4f:b6:e0:b9:72:7b:e3:
24:5d:67:73:36:ae:c4:fb:f5:a7:70:f6:3d:07:d9:
e1:12:13:1f:74:bc:1c:94:77:e8:55:83:e4:0a:bb:
2a:c7:d0:19:29:03:37:20:d6:8d:0e:df:ca:11:30:
e5:ff:cd:c6:f1:26:5e:83:6d:8d:e1:cd:81:83:11:
1b:6c:bf:8e:8d:95:6c:8e:88:1a:1a:b7:67:48:38:
43:1d:60:d9:6f:45:bd:60:f8:26:47:67:56:d2:44:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:D9:78:7E:8F:5C:02:E0:7A:42:42:C1:1E:10:D7:57:15:71:36
X509v3 Authority Key Identifier:
keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/98TZeH6PXALgekJCwR4Q11cVcTY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.6.0/23
Signature Algorithm: sha256WithRSAEncryption
66:af:16:29:82:c3:12:93:c8:16:92:53:f0:49:ce:9d:a0:f8:
67:49:f8:bb:57:62:f3:ea:d1:c0:3c:04:f4:2e:12:62:e9:8c:
7a:69:55:30:06:d2:6f:dd:4d:bc:0e:c5:d8:d2:1c:5d:25:f2:
c2:85:0d:4a:89:45:e0:53:83:bc:92:92:2e:17:cc:c4:7b:8a:
1d:4c:c4:99:f3:3f:56:20:b6:8b:db:9d:99:f2:84:6f:cd:bc:
81:88:6b:fa:2e:15:d4:64:a1:b2:85:42:24:03:5e:a6:a1:83:
3b:69:62:ce:9a:3d:23:22:f5:e7:9a:5c:38:a0:f6:18:fc:c2:
0b:f0:a9:18:a9:a2:f5:13:62:b9:94:6b:4a:ac:63:10:e0:45:
d4:60:a5:43:fb:b2:71:28:ee:55:60:6d:7e:ea:39:ef:73:57:
a4:e8:9b:23:b9:a0:be:24:f2:1e:37:59:b0:60:19:29:74:76:
2d:27:8f:0d:77:84:cd:5b:cc:81:1e:89:83:36:1c:6a:a3:d4:
9a:8a:d5:26:a0:fc:58:c3:83:b8:dd:d3:aa:4d:d5:e1:d6:c8:
40:ea:24:82:67:ab:87:a3:aa:72:a6:73:d9:25:77:86:2b:31:
e0:b7:1b:71:ba:0e:fd:f8:9b:ff:39:98:8a:6a:e2:e9:5e:6e:
ac:a7:d3:e1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QjQ5
QTg3NzU5OTQ4Mjc5NzVBQjM3RTZERjk2MDY0QzkyNDc4M0YxMB4XDTI1MDMyOTA2
MDEwMFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRjdDNEQ5Nzg3RThGNUMw
MkUwN0E0MjQyQzExRTEwRDc1NzE1NzEzNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN1UKVjhkuXP2lgSEi/n3eWR2hyesXeC4X3EECudXAad0g6uODF6
eqCsdxRv0uO/CyKeyMRZxN4ZTGvISSdrBp74Nah01PKoK1euoousogIlg1NlQe6e
KkkuDXhBoJH7mnPpRiA2VRXkslzU1FGqTZ37V2Yl63u07fl0gS5ReAPt5l/+td18
RiR4xDwVhXWJXcxpcgyypbTTNXN6X3BPtuC5cnvjJF1nczauxPv1p3D2PQfZ4RIT
H3S8HJR36FWD5Aq7KsfQGSkDNyDWjQ7fyhEw5f/NxvEmXoNtjeHNgYMRG2y/jo2V
bI6IGhq3Z0g4Qx1g2W9FvWD4JkdnVtJEZlcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT3xNl4fo9cAuB6QkLBHhDXVxVxNjAfBgNVHSMEGDAWgBR7Sah3WZSCeXWrN+bf
lgZMkkeD8TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzUxL2UwbW9kMW1VZ25sMXF6Zm0zNVlHVEpKSGdfRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2UwbW9kMW1VZ25sMXF6Zm0zNVlHVEpK
SGdfRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83NTEvOThUWmVINlBYQUxnZWtKQ3dSNFExMWNWY1RZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWeaBjANBgkqhkiG9w0BAQsFAAOCAQEAZq8WKYLDEpPIFpJT8EnOnaD4Z0n4
u1di8+rRwDwE9C4SYumMemlVMAbSb91NvA7F2NIcXSXywoUNSolF4FODvJKSLhfM
xHuKHUzEmfM/ViC2i9udmfKEb828gYhr+i4V1GShsoVCJANepqGDO2lizpo9IyL1
55pcOKD2GPzCC/CpGKmi9RNiuZRrSqxjEOBF1GClQ/uycSjuVWBtfuo573NXpOib
I7mgviTyHjdZsGAZKXR2LSePDXeEzVvMgR6JgzYcaqPUmorVJqD8WMODuN3Tqk3V
4dbIQOokgmerh6OqcqZz2SV3hisx4LcbcboO/fib/zmYimri6V5urKfT4Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 01:36:03 2025 by rpki-client