Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/0PAFmAhpbvgLdbmDJ2k--iIBYHk.roa
File: 0PAFmAhpbvgLdbmDJ2k--iIBYHk.roa (raw, json)
Hash identifier: TBfXVVvl+I0JOMNOaqJ2W8PgyyEjUUuyDsyxlWdqHQ8=
Subject key identifier: D0:F0:05:98:08:69:6E:F8:0B:75:B9:83:27:69:3E:FA:22:01:60:79
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: C1
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/0PAFmAhpbvgLdbmDJ2k--iIBYHk.roa
Signing time: Fri 31 Jan 2025 01:31:35 +0000
ROA not before: Fri 31 Jan 2025 01:31:35 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 18126
IP address blocks: 124.18.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: Jan 31 01:31:35 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=D0F0059808696EF80B75B98327693EFA22016079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:b6:d0:4b:c9:35:e1:9e:20:c8:13:53:3c:
c0:63:c3:da:94:99:62:e8:66:96:55:a9:6e:32:08:
c9:03:ca:40:49:41:11:ce:60:e9:8a:bb:1f:71:fe:
76:87:b7:c7:ca:e7:a8:50:2a:c7:ce:6e:85:06:5a:
c0:4e:78:3e:40:36:94:2c:9b:4e:f6:03:6d:f8:05:
34:d4:fa:a8:c6:87:32:2e:3c:8a:3a:b4:2b:f9:ce:
d3:5a:ef:dc:1f:2a:d6:d9:39:9d:ad:01:c7:e7:41:
31:1c:d1:e7:92:f6:ee:79:a8:a3:e5:6b:2f:16:46:
2f:06:71:13:7d:84:bb:e2:30:02:26:7f:f1:91:fd:
5f:f8:0b:c6:7a:74:c6:f7:68:a2:a0:be:da:46:ea:
8f:dd:81:27:ac:89:7e:73:c7:c1:4b:b6:fd:be:fe:
d4:b0:04:b6:20:fd:98:af:71:96:41:23:54:d9:17:
4d:90:fe:ca:1d:2b:38:76:38:ad:dd:8e:af:16:a6:
b7:b0:ac:92:f6:8e:5c:6f:f3:5c:86:e9:8f:f4:3e:
7d:ee:64:d6:07:d5:60:d2:0a:d2:7b:0c:f8:93:be:
e1:1a:0b:d1:42:0e:09:71:9c:20:01:82:bc:5d:91:
60:4b:20:fd:c9:70:71:fa:9e:1e:19:89:32:0d:60:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:05:98:08:69:6E:F8:0B:75:B9:83:27:69:3E:FA:22:01:60:79
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/0PAFmAhpbvgLdbmDJ2k--iIBYHk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.18.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:d8:ac:57:72:21:59:e2:b6:67:a7:d7:18:41:e1:3d:ae:b9:
b0:d5:9f:7f:57:dd:f2:61:5a:e8:78:01:ce:81:bc:91:8f:af:
27:14:9d:ab:a6:ee:01:51:61:3b:a6:67:e1:b1:5c:ec:60:1d:
df:24:d0:bb:d6:6f:1d:d7:51:34:af:ff:67:c4:cc:0a:8f:48:
1e:e8:59:19:32:00:b0:dd:8c:1f:05:db:24:08:f7:1e:f5:59:
02:ed:23:1d:2e:32:90:25:97:e6:93:18:db:ef:51:54:59:1d:
a3:f6:45:73:3f:b3:28:17:b3:c1:43:a3:f9:02:65:58:03:37:
40:73:0a:6e:88:ee:ca:e8:02:3c:19:35:dc:d8:b8:80:3b:bf:
dc:95:15:4e:8a:27:cb:3c:ce:36:10:e2:77:04:ed:36:4a:45:
bd:ba:cd:f0:09:6f:c9:89:c5:5b:e5:8c:1f:28:a8:48:fa:d7:
3f:c2:22:4a:d8:a3:eb:82:d4:d3:68:e4:be:f2:76:da:55:dd:
e2:20:bc:52:3b:95:6d:f9:78:2f:e3:e3:d3:60:c6:2f:93:a0:
86:a3:6d:83:7d:02:52:42:21:91:f6:40:51:be:34:f4:37:fb:
66:99:2d:bf:bb:d1:cc:76:fd:6d:27:38:59:84:86:b3:55:70:
3d:01:88:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:29:07 2025 by rpki-client