Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/YeiS7vcH39aRTh-WI4GASMU46ys.roa
File: YeiS7vcH39aRTh-WI4GASMU46ys.roa (raw, json)
Hash identifier: iTmjZfxaQKIebmfn6ZXdhLm4hnuOigp8nlTJY4W8a+s=
Subject key identifier: 61:E8:92:EE:F7:07:DF:D6:91:4E:1F:96:23:81:80:48:C5:38:EB:2B
Certificate issuer: /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial: 1D
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/YeiS7vcH39aRTh-WI4GASMU46ys.roa
Signing time: Sat 08 Feb 2025 06:48:22 +0000
ROA not before: Sat 08 Feb 2025 06:48:22 +0000
ROA not after: Fri 06 Feb 2026 03:05:32 +0000
asID: 23831
IP address blocks: 219.100.128.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 14:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Validity
Not Before: Feb 8 06:48:22 2025 GMT
Not After : Feb 6 03:05:32 2026 GMT
Subject: CN=61E892EEF707DFD6914E1F9623818048C538EB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:29:0b:51:93:b7:28:49:02:2e:9f:cb:2f:
a4:72:53:02:a3:a8:75:b0:e8:16:53:21:04:e3:76:
31:88:21:26:b5:47:d4:2d:80:8d:e6:dc:80:c5:1a:
bc:0b:80:bc:0b:45:f6:ce:09:66:9c:a4:7c:b9:89:
51:cd:d2:aa:b1:36:c0:e1:a6:00:d1:81:20:b3:41:
f0:df:c7:4f:44:5b:e0:26:5b:dc:68:a9:3a:a4:58:
14:42:43:b9:b3:da:58:e6:38:ac:c9:08:9f:5e:6c:
b1:33:43:b9:fb:05:eb:d7:56:31:0b:bd:17:3a:d8:
30:0d:40:7d:c6:a6:0f:fe:31:59:90:e3:eb:da:98:
b5:23:84:c8:04:5e:70:1a:80:e4:af:a2:fc:a1:52:
0d:0a:b1:f9:7c:72:2b:20:c7:e4:b2:b2:15:26:0e:
c3:73:5c:d6:dc:1d:2e:0f:13:f4:86:e0:3d:a9:bd:
a1:2e:4e:f4:bb:62:7a:83:b3:29:79:7b:0f:91:f3:
cc:64:8b:11:fe:94:96:44:47:46:69:34:f5:53:09:
30:9f:41:e8:e0:89:e2:e9:82:23:6e:b6:db:17:1f:
d4:46:6a:f4:d6:e6:c1:b6:2f:23:8f:a2:15:d7:26:
e3:07:56:67:63:de:5e:6a:09:10:47:e7:51:a7:68:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E8:92:EE:F7:07:DF:D6:91:4E:1F:96:23:81:80:48:C5:38:EB:2B
X509v3 Authority Key Identifier:
keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/YeiS7vcH39aRTh-WI4GASMU46ys.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.128.0/22
Signature Algorithm: sha256WithRSAEncryption
76:59:6a:e3:bb:f8:ed:9f:0a:49:68:55:8a:ec:04:fb:be:46:
99:f9:81:ce:0c:f8:de:53:89:db:e7:18:11:b7:7e:47:99:a1:
86:9e:3e:2b:a5:23:ef:1c:dd:56:33:3d:16:05:79:a2:3c:f0:
71:26:95:da:f2:02:ef:46:11:c0:9a:82:ed:9f:77:2c:85:52:
fd:15:dc:f2:0f:b2:9b:5d:dd:ad:83:e1:63:d7:e4:df:03:16:
f1:20:44:29:0b:c1:f2:53:78:35:a1:e1:07:18:91:1b:bf:ca:
7d:42:0a:f3:93:be:81:8c:0d:49:b9:8c:c8:28:89:18:2d:f0:
51:89:5b:35:fa:4a:a1:a1:b9:ee:4e:a2:83:9f:64:a3:64:d3:
0c:b2:94:60:1f:69:07:a2:c7:53:4c:9a:70:0c:49:81:d9:6e:
0e:b0:be:08:48:02:6d:f6:22:90:2c:51:17:c3:6c:4f:7b:d7:
79:a4:c4:f4:79:82:64:11:48:94:fd:7b:57:e7:2b:39:29:50:
27:c5:38:eb:a9:cc:0e:ee:4f:f4:f4:99:69:61:5b:51:7d:b7:
13:20:bd:6e:1b:a8:ec:57:55:79:13:57:da:43:3e:cf:80:68:
25:b7:99:e4:c9:a1:49:3f:d7:8e:b3:8c:32:5d:ee:49:8a:32:
31:31:a9:00
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MENB
Q0Y3MEE0QjZDMUI2RjYyNEVGNDM0ODQwNzI0MDZCOEQzRjM2MB4XDTI1MDIwODA2
NDgyMloXDTI2MDIwNjAzMDUzMlowMzExMC8GA1UEAxMoNjFFODkyRUVGNzA3REZE
NjkxNEUxRjk2MjM4MTgwNDhDNTM4RUIyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK7SKQtRk7coSQIun8svpHJTAqOodbDoFlMhBON2MYghJrVH1C2A
jebcgMUavAuAvAtF9s4JZpykfLmJUc3SqrE2wOGmANGBILNB8N/HT0Rb4CZb3Gip
OqRYFEJDubPaWOY4rMkIn15ssTNDufsF69dWMQu9FzrYMA1AfcamD/4xWZDj69qY
tSOEyARecBqA5K+i/KFSDQqx+XxyKyDH5LKyFSYOw3Nc1twdLg8T9IbgPam9oS5O
9LtieoOzKXl7D5HzzGSLEf6UlkRHRmk09VMJMJ9B6OCJ4umCI2622xcf1EZq9Nbm
wbYvI4+iFdcm4wdWZ2PeXmoJEEfnUadoR/sCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRh6JLu9wff1pFOH5YjgYBIxTjrKzAfBgNVHSMEGDAWgBSAys9wpLbBtvYk70NI
QHJAa40/NjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODczL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1TlB6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1
TlB6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NzMvWWVpUzd2Y0gzOWFSVGgtV0k0R0FTTVU0NnlzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAttkgDANBgkqhkiG9w0BAQsFAAOCAQEAdllq47v47Z8KSWhViuwE+75GmfmB
zgz43lOJ2+cYEbd+R5mhhp4+K6Uj7xzdVjM9FgV5ojzwcSaV2vIC70YRwJqC7Z93
LIVS/RXc8g+ym13drYPhY9fk3wMW8SBEKQvB8lN4NaHhBxiRG7/KfUIK85O+gYwN
SbmMyCiJGC3wUYlbNfpKoaG57k6ig59ko2TTDLKUYB9pB6LHU0yacAxJgdluDrC+
CEgCbfYikCxRF8NsT3vXeaTE9HmCZBFIlP17V+crOSlQJ8U466nMDu5P9PSZaWFb
UX23EyC9bhuo7FdVeRNX2kM+z4BoJbeZ5MmhST/XjrOMMl3uSYoyMTGpAA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:19:59 2025 by rpki-client