Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/dlqlP92ne5iXEr_Jps1uHbvFaho.roa
File: dlqlP92ne5iXEr_Jps1uHbvFaho.roa (raw, json)
Hash identifier: f3GSmSdhBD6ujxXoBZu17In7bwsMfVTCYKMhuNl4Ofs=
Subject key identifier: 76:5A:A5:3F:DD:A7:7B:98:97:12:BF:C9:A6:CD:6E:1D:BB:C5:6A:1A
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: B9
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/dlqlP92ne5iXEr_Jps1uHbvFaho.roa
Signing time: Fri 31 Jan 2025 01:31:32 +0000
ROA not before: Fri 31 Jan 2025 01:31:32 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 18126
IP address blocks: 202.142.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: Jan 31 01:31:32 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=765AA53FDDA77B989712BFC9A6CD6E1DBBC56A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:19:b2:9b:e1:d9:08:64:04:31:78:b8:48:
52:b6:0c:48:f7:64:e2:12:20:2b:34:4c:b3:ba:70:
5f:07:d2:41:b2:3d:d3:e1:17:ca:ea:00:bb:4b:ed:
94:6e:61:b1:d0:04:4a:90:0c:f2:0f:bc:2d:de:e5:
94:03:3b:b8:4a:7b:75:24:60:50:7a:55:27:2f:fb:
f9:d4:5e:03:8e:9d:ac:76:c0:f8:60:e3:28:41:b1:
58:ce:7c:da:69:b7:8c:a0:34:1c:bd:b0:30:ce:7a:
9d:52:af:49:01:a8:e5:6b:f4:33:8c:fb:06:4a:82:
17:5f:e6:ca:52:4e:72:ce:9e:a3:29:4f:e3:41:ec:
93:eb:ab:a1:a9:2d:6b:f9:82:48:d5:b2:82:97:d6:
3e:c7:d1:2f:2a:48:20:db:63:79:a0:f3:b2:7d:88:
93:f6:5c:f2:15:a9:5b:e1:a3:b4:7e:de:93:6e:16:
04:d0:0b:ca:3b:02:1f:6c:09:a2:2a:8e:f4:51:95:
3c:59:ad:3b:5a:2c:6e:33:51:12:40:12:96:d3:b9:
10:38:95:ea:d7:4c:80:87:4b:6e:b1:c9:96:ea:95:
0e:06:ff:9b:af:30:17:70:85:ae:0f:03:c0:be:ef:
f9:77:8b:ce:f5:69:be:55:5a:22:cc:b5:39:9a:3c:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5A:A5:3F:DD:A7:7B:98:97:12:BF:C9:A6:CD:6E:1D:BB:C5:6A:1A
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/dlqlP92ne5iXEr_Jps1uHbvFaho.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.142.224.0/19
Signature Algorithm: sha256WithRSAEncryption
40:78:de:18:bd:94:c0:66:fb:a7:29:39:40:e9:47:0d:8d:30:
74:21:e5:32:90:15:9f:ab:f7:80:38:0c:89:bd:d8:c9:41:f6:
44:32:c1:eb:ba:75:05:2d:5c:51:70:03:4b:01:8b:0d:61:8e:
85:67:40:6f:53:d0:0c:bb:25:9e:38:d2:20:31:fa:3a:32:04:
0e:94:1e:14:00:0f:9c:50:8e:11:93:d6:12:11:8f:56:04:88:
44:91:f7:12:3d:39:8b:f5:a6:b1:3a:71:2f:cf:f1:d6:9d:74:
71:bf:7a:4a:6e:af:5a:6c:9c:5c:ae:ff:33:f8:36:4a:73:8f:
27:03:39:4b:d3:41:77:a2:f7:b6:49:f1:f7:88:45:f9:89:2a:
c8:25:39:43:f9:bb:2f:da:33:7f:c5:36:8e:50:3a:08:7f:d3:
f4:29:ef:4c:1d:d1:7b:7a:0f:d3:94:20:3d:6a:80:45:fa:29:
5a:49:46:38:e5:c5:86:60:fb:f7:75:ac:e4:0a:5b:44:2c:4b:
54:24:7e:3b:4a:a6:bf:37:13:4a:11:8f:29:e3:3f:68:10:4d:
5d:35:a6:2d:80:0f:96:ca:de:ce:e1:66:ad:15:cf:4a:3f:8c:
9a:fb:65:71:f4:42:ee:86:22:f5:86:b1:72:fa:ca:34:9d:12:
39:51:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:30:40 2025 by rpki-client