Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/Z8jtwZEFi7V24QrpyU2udaDBU9I.roa
File: Z8jtwZEFi7V24QrpyU2udaDBU9I.roa (raw, json)
Hash identifier: 9mJiibkwiHraTHt6n3kkZod8D+gTswQs2bIi0za2Qr8=
Subject key identifier: 67:C8:ED:C1:91:05:8B:B5:76:E1:0A:E9:C9:4D:AE:75:A0:C1:53:D2
Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial: 72
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/Z8jtwZEFi7V24QrpyU2udaDBU9I.roa
Signing time: Fri 31 Jan 2025 01:31:43 +0000
ROA not before: Fri 31 Jan 2025 01:31:43 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 45680
IP address blocks: 101.78.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Validity
Not Before: Jan 31 01:31:43 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=67C8EDC191058BB576E10AE9C94DAE75A0C153D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:46:db:88:af:ae:19:fb:30:ad:7a:e5:cd:
be:6a:db:d5:de:5e:fc:f2:e3:ec:a1:98:83:19:82:
7a:f1:36:31:22:44:04:2f:98:c0:b0:67:f2:42:aa:
ac:18:d7:6c:35:0a:e2:c1:a1:d1:55:80:4c:38:08:
67:33:21:1b:b3:d9:ab:a0:95:96:0e:11:7f:d3:6e:
70:c6:ef:47:78:47:67:7b:2e:9f:a9:ff:d9:9a:79:
ef:f7:79:9f:d0:48:0a:23:c4:9c:1b:10:60:b0:a0:
8f:8a:d3:46:0a:2c:35:f6:78:af:d0:ce:34:5d:ef:
22:3d:e8:e5:a3:63:0d:68:df:89:9d:25:0a:24:93:
eb:84:19:b1:d8:62:6a:fc:9c:b7:49:a2:4b:79:58:
3e:fc:24:08:e7:a1:d1:cc:ec:e2:67:9f:00:a9:f3:
b2:da:66:4b:0a:76:45:86:17:60:c1:79:ca:d0:03:
84:9c:74:5e:bf:69:3a:0b:7d:22:65:a6:87:da:48:
c0:b2:ac:f5:08:a5:a7:6f:4e:42:f0:92:de:f0:0f:
0d:f3:a8:11:a6:2d:59:16:84:c6:5d:4a:52:50:b4:
64:a0:6b:d8:cc:47:1e:e2:2c:ed:cd:8f:ca:1e:a9:
74:04:09:9d:58:29:3c:55:d6:8f:1e:57:fd:4e:0d:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C8:ED:C1:91:05:8B:B5:76:E1:0A:E9:C9:4D:AE:75:A0:C1:53:D2
X509v3 Authority Key Identifier:
keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/Z8jtwZEFi7V24QrpyU2udaDBU9I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.78.4.0/22
Signature Algorithm: sha256WithRSAEncryption
32:be:c8:97:8e:70:44:46:90:a8:71:a6:b4:a1:7d:93:2e:12:
c2:24:d1:7a:a2:da:df:4c:f1:c7:1d:b0:d7:9d:48:b2:59:f3:
f3:f6:55:0d:2b:ec:a1:7c:4f:04:97:c9:77:d8:40:be:eb:cf:
b9:87:9c:e0:a3:0c:b6:07:44:f9:9c:e7:7f:a2:86:ea:ee:89:
d9:85:57:34:f6:cd:c6:2e:35:43:1f:7b:e0:ad:e3:ed:df:ec:
78:47:1b:85:99:b8:77:6a:69:b8:1c:9a:18:7d:c1:19:06:fb:
8f:fa:82:5d:ad:3a:74:63:73:ab:23:90:02:e1:95:5e:23:68:
dc:0d:77:df:8c:5b:d3:bc:b2:c4:8a:d4:4a:3b:7a:7a:a9:37:
4a:d9:86:1c:89:85:4b:63:80:79:0c:65:24:bf:bc:f3:1d:df:
0f:ae:7c:55:dc:c3:14:8e:ac:60:1f:7f:57:f5:94:74:50:eb:
06:44:6c:0e:7e:81:2e:5a:62:50:17:a7:36:2a:2a:19:64:b8:
f3:d3:b1:56:bd:1b:55:0e:8f:5b:0b:36:1a:39:47:7a:03:2d:
51:7b:24:13:8d:e8:2b:02:80:60:24:37:2d:5e:5e:8a:fa:79:
fd:1e:45:98:f7:9a:fb:97:27:11:e1:18:f4:54:5f:f0:3d:cc:
17:dd:28:99
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDI2
RTBEMTdFMzBEOEJGNTcxNEY0QkE5MkVFRUIwRDIyREREQjFEMB4XDTI1MDEzMTAx
MzE0M1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNjdDOEVEQzE5MTA1OEJC
NTc2RTEwQUU5Qzk0REFFNzVBMEMxNTNEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAONLRtuIr64Z+zCteuXNvmrb1d5e/PLj7KGYgxmCevE2MSJEBC+Y
wLBn8kKqrBjXbDUK4sGh0VWATDgIZzMhG7PZq6CVlg4Rf9NucMbvR3hHZ3sun6n/
2Zp57/d5n9BICiPEnBsQYLCgj4rTRgosNfZ4r9DONF3vIj3o5aNjDWjfiZ0lCiST
64QZsdhiavyct0miS3lYPvwkCOeh0czs4mefAKnzstpmSwp2RYYXYMF5ytADhJx0
Xr9pOgt9ImWmh9pIwLKs9Qilp29OQvCS3vAPDfOoEaYtWRaExl1KUlC0ZKBr2MxH
HuIs7c2Pyh6pdAQJnVgpPFXWjx5X/U4Nc6UCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRnyO3BkQWLtXbhCunJTa51oMFT0jAfBgNVHSMEGDAWgBSNJuDRfjDYv1cU9LqS
7usNIt3bHTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg5L2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNMZDJ4MC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNM
ZDJ4MC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85ODkvWjhqdHdaRUZpN1YyNFFycHlVMnVkYURCVTlJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmVOBDANBgkqhkiG9w0BAQsFAAOCAQEAMr7Il45wREaQqHGmtKF9ky4SwiTR
eqLa30zxxx2w151Islnz8/ZVDSvsoXxPBJfJd9hAvuvPuYec4KMMtgdE+Zznf6KG
6u6J2YVXNPbNxi41Qx974K3j7d/seEcbhZm4d2ppuByaGH3BGQb7j/qCXa06dGNz
qyOQAuGVXiNo3A1334xb07yyxIrUSjt6eqk3StmGHImFS2OAeQxlJL+88x3fD658
VdzDFI6sYB9/V/WUdFDrBkRsDn6BLlpiUBenNioqGWS489OxVr0bVQ6PWws2GjlH
egMtUXskE43oKwKAYCQ3LV5eivp5/R5FmPea+5cnEeEY9FRf8D3MF90omQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:42 2025 by rpki-client