Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/Z_gtlGulRhAjU0l0frDIM-3rfds.roa
File: Z_gtlGulRhAjU0l0frDIM-3rfds.roa (raw, json)
Hash identifier: ci5tfJ1GnbJdXnUKb8rNgK4TTH8m1nMX83yu6hiKa1I=
Subject key identifier: 67:F8:2D:94:6B:A5:46:10:23:53:49:74:7E:B0:C8:33:ED:EB:7D:DB
Certificate issuer: /CN=989E82672C98A627120ABA72DEBEBE22015849A0
Certificate serial: 1B
Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/Z_gtlGulRhAjU0l0frDIM-3rfds.roa
Signing time: Sat 01 Mar 2025 01:29:20 +0000
ROA not before: Sat 01 Mar 2025 01:29:20 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 59127
IP address blocks: 122.200.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0
Validity
Not Before: Mar 1 01:29:20 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=67F82D946BA54610235349747EB0C833EDEB7DDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:a9:c6:de:6a:70:10:c3:b2:ed:4f:1f:f4:
99:31:5d:89:dd:59:f2:f2:9c:52:60:c4:27:f7:31:
71:4a:90:b5:45:a7:a1:cc:0e:42:53:e6:1d:15:fc:
4b:8e:a0:e5:18:72:18:bd:b4:28:9d:47:e2:74:da:
49:48:35:0d:d1:be:ff:ac:27:d1:6c:bf:7d:67:da:
35:9d:82:e2:40:fe:f9:d7:c5:e1:d3:d8:15:5d:38:
0e:75:e3:dd:fe:15:8b:61:89:6f:e6:67:6c:ab:eb:
84:35:38:44:b0:a0:59:3b:ac:44:80:c5:60:77:2e:
33:fb:af:d7:c0:77:3f:3f:1c:50:63:3a:78:8d:67:
1e:24:78:e9:d8:02:d3:9c:e3:9a:e5:5c:50:02:d4:
04:9a:e4:a1:27:dd:40:b6:fa:47:02:4d:20:4b:df:
86:af:63:ee:a2:7b:8c:3b:73:9f:bc:5b:2f:f0:5a:
1c:81:1c:f0:d9:60:b9:07:d9:e4:b5:a1:82:a8:8f:
67:d7:96:66:24:bb:db:11:4d:d8:ff:88:b3:16:63:
5e:e1:ce:fd:94:0d:45:bf:60:0c:ff:68:cb:61:18:
81:e1:95:06:9f:25:80:6c:12:8b:d4:d2:c2:d6:51:
b3:aa:d8:5c:db:b1:7f:b3:3f:27:43:a4:f7:d9:2f:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:2D:94:6B:A5:46:10:23:53:49:74:7E:B0:C8:33:ED:EB:7D:DB
X509v3 Authority Key Identifier:
keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/Z_gtlGulRhAjU0l0frDIM-3rfds.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.200.136.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:49:7c:bb:48:f5:22:10:4e:e4:60:5e:29:6d:8f:8a:72:ea:
2f:ef:26:59:4b:b0:16:31:02:55:09:ac:60:00:95:29:18:d0:
c9:66:fc:8d:2b:ab:c3:87:81:b8:97:1c:57:07:76:60:0b:5c:
ea:cd:25:a3:ed:b3:a1:dc:30:c3:40:20:23:f9:c4:4a:75:d9:
84:d0:e0:cd:b1:89:3d:0a:11:a3:7f:98:dd:c6:fc:90:7a:5e:
88:f0:a4:7f:9b:4c:fb:29:11:11:bb:00:6b:28:6f:03:b0:5f:
53:00:21:e5:99:08:88:f8:b1:f5:89:98:a4:30:09:98:8f:57:
a9:d2:fc:81:84:5a:a1:d4:1f:f7:6c:40:bf:0d:20:52:74:07:
ad:b6:f9:d0:3c:34:8f:8c:e7:a7:76:ff:cd:79:67:92:62:99:
3c:aa:b8:43:e8:41:3b:19:ac:db:fc:bd:6f:95:c0:61:4f:00:
63:2a:54:06:78:7d:62:97:1b:33:19:11:9c:e8:a2:57:01:7b:
d7:77:17:b4:55:56:95:49:f8:66:2b:a2:fd:fc:92:20:2b:dc:
f9:cb:11:db:81:35:e7:1e:31:e4:51:91:1e:56:66:01:33:01:
11:37:46:64:63:cd:c3:49:14:76:80:93:05:7b:e8:de:04:08:
f4:4c:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:55:27 2025 by rpki-client