Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/_705MQgxk3m9k9QJI3aBEq99t5c.roa
File: _705MQgxk3m9k9QJI3aBEq99t5c.roa (raw, json)
Hash identifier: jhs8V/1TXl34eQqB9LQZidEBAIFZDXMQirX75f5zucs=
Subject key identifier: FF:BD:39:31:08:31:93:79:BD:93:D4:09:23:76:81:12:AF:7D:B7:97
Certificate issuer: /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial: 21
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/_705MQgxk3m9k9QJI3aBEq99t5c.roa
Signing time: Sat 29 Mar 2025 06:01:02 +0000
ROA not before: Sat 29 Mar 2025 06:01:02 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 18129
IP address blocks: 218.231.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
Validity
Not Before: Mar 29 06:01:02 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=FFBD393108319379BD93D40923768112AF7DB797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:72:9c:1c:bd:a0:48:e1:05:77:ec:e0:71:
18:31:8f:5c:f9:ff:c5:fa:aa:ac:6b:d1:14:f7:a2:
ac:94:e2:3a:d9:cf:ac:04:93:6c:21:38:6a:bc:c4:
dc:a7:45:be:3e:c8:51:ab:41:02:7d:3b:23:74:ff:
61:57:3d:ff:8d:87:42:87:21:6a:d5:e1:d0:f2:45:
ec:51:65:84:97:56:74:10:87:12:cc:b5:1e:e0:14:
a4:22:2b:e3:47:64:28:9b:09:07:b3:8f:98:8c:c7:
e4:b3:67:17:6e:dc:09:42:e6:bd:8d:bb:ce:d5:ce:
75:2f:62:67:8b:56:65:07:c9:c9:01:2a:7a:b5:36:
74:18:e5:04:c1:20:5b:7d:e7:a7:74:b6:19:89:37:
f2:38:98:e6:8b:2e:e5:ab:76:55:8c:86:cf:50:b1:
8c:26:e0:ea:37:d8:d3:8e:cc:72:e3:59:5d:51:3d:
ec:d9:8f:0b:d3:cb:3c:4c:1e:18:6c:5c:25:e6:86:
81:10:bd:8a:73:c0:93:06:e6:94:ac:44:8d:c2:6d:
44:be:23:da:b6:89:6d:a0:32:2e:60:c5:83:cc:83:
5d:1c:7b:82:58:74:79:93:e0:04:0f:19:d0:48:81:
9e:4b:08:da:7f:43:50:6c:c8:84:7b:fe:72:a1:42:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BD:39:31:08:31:93:79:BD:93:D4:09:23:76:81:12:AF:7D:B7:97
X509v3 Authority Key Identifier:
keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/_705MQgxk3m9k9QJI3aBEq99t5c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.231.160.0/19
Signature Algorithm: sha256WithRSAEncryption
08:5b:0c:04:b4:d1:02:63:74:75:ca:c3:9e:d5:1e:76:8d:eb:
63:18:2b:eb:2d:d8:48:11:c6:98:4b:fe:99:70:fc:08:cd:13:
46:a3:fe:45:96:80:b8:d1:5a:7f:18:5e:82:92:f1:42:69:7f:
8f:6a:75:c8:cf:13:17:9a:2f:a3:87:11:78:3e:a4:41:b6:d2:
d8:de:08:e3:d0:91:5e:02:a4:bc:46:8e:48:b8:30:15:f0:6e:
32:bb:c5:30:de:16:96:57:fb:73:37:40:23:73:2e:bf:68:15:
b3:49:23:55:12:be:52:69:ca:6b:48:9f:b5:df:a8:00:31:fc:
6f:33:39:c8:e3:86:8d:41:b3:13:4c:e4:3e:b0:fa:8f:05:22:
b8:85:1a:d4:8a:b5:c0:9b:3e:e4:d0:08:95:64:6e:42:16:6d:
f8:47:1d:57:b9:53:3a:8b:0d:76:4c:ea:6c:9f:d2:3c:dc:a3:
54:05:5f:b6:f8:70:4a:46:e8:e0:fd:d0:af:01:a9:15:dd:11:
a5:5a:29:4f:4a:5f:e2:4a:62:3f:ce:41:ec:c5:1a:f8:24:64:
ca:0f:2d:2e:56:c5:f1:37:60:92:59:09:eb:45:c4:da:5a:c5:
3e:9a:20:47:8e:ce:d5:ef:da:ed:0f:c6:94:57:8a:2b:12:2c:
24:82:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:29:25 2025 by rpki-client