Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/skQok6BMG5hOtqlBCcPAOegtqC4.roa
File: skQok6BMG5hOtqlBCcPAOegtqC4.roa (raw, json)
Hash identifier: dqm/XgGn73MgdB3XJ08x2NWplA/p6c6Hpc/PBVbmfFs=
Subject key identifier: B2:44:28:93:A0:4C:1B:98:4E:B6:A9:41:09:C3:C0:39:E8:2D:A8:2E
Certificate issuer: /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial: 50
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/skQok6BMG5hOtqlBCcPAOegtqC4.roa
Signing time: Sat 30 Nov 2024 01:30:38 +0000
ROA not before: Sat 30 Nov 2024 01:30:38 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 55392
IP address blocks: 130.62.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Validity
Not Before: Nov 30 01:30:38 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=B2442893A04C1B984EB6A94109C3C039E82DA82E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:3a:6b:86:af:ea:52:ac:c2:51:6c:a0:0d:
fa:71:a8:29:82:29:27:e8:fb:33:da:38:52:e6:c7:
01:da:00:4b:7d:1b:60:9e:77:cb:3a:cb:32:9e:47:
2c:60:0b:ec:5b:b3:84:72:ca:a2:37:ef:b6:99:cb:
c0:27:51:a0:2d:ae:f2:80:65:bd:20:05:ae:6c:56:
d3:54:14:61:16:f0:d6:9f:c1:31:65:19:1d:aa:66:
97:1c:cc:7a:cb:8b:d3:88:f5:d6:e5:10:7c:d6:35:
ff:80:06:18:23:d8:ab:68:eb:5c:07:50:c4:c1:0e:
ae:0d:72:58:2c:7c:eb:9e:1f:89:5a:3b:3b:c9:a0:
91:34:1e:66:20:42:5a:5e:ff:37:2f:22:26:67:f5:
78:bb:bd:f3:6f:20:0a:b7:ef:b4:68:58:28:2d:a9:
84:7b:ba:0a:67:7f:4e:68:85:94:79:c8:10:73:42:
52:bf:5a:f8:3e:4f:ce:c5:9b:6c:44:94:b3:c0:d5:
93:ea:d3:69:db:a4:56:57:ab:5c:9d:c7:c9:2d:d5:
96:29:39:a0:9f:a8:7b:13:68:b3:e7:ef:6a:72:4a:
87:a6:2c:f9:14:47:a3:67:60:7b:05:c0:e1:7b:7f:
67:be:c7:07:f9:a4:59:81:58:d6:de:8d:4b:a4:c1:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:28:93:A0:4C:1B:98:4E:B6:A9:41:09:C3:C0:39:E8:2D:A8:2E
X509v3 Authority Key Identifier:
keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/skQok6BMG5hOtqlBCcPAOegtqC4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
130.62.128.0/17
Signature Algorithm: sha256WithRSAEncryption
37:16:e8:06:00:e7:9f:42:26:ae:80:94:be:58:a5:50:af:b5:
d0:74:bc:e2:be:fd:1a:bb:fe:c6:eb:e2:f9:72:82:61:1f:18:
63:5f:bc:7e:60:6f:cc:2e:9e:d3:fb:b0:55:f5:3c:08:3a:ec:
18:e9:44:c9:69:39:9a:41:e6:98:42:8f:c8:15:6b:b2:41:5d:
af:1a:77:80:ba:e8:00:42:28:82:8b:09:a6:ec:ed:a5:60:72:
a3:01:fe:61:30:e8:42:1a:5a:8f:15:ee:94:8b:de:b6:ea:83:
f1:1f:ff:fb:24:ce:3f:18:a0:23:7b:ab:46:77:40:2c:d2:9c:
37:2d:ee:59:a8:d6:aa:b0:99:45:b9:bb:75:62:52:ff:68:39:
88:02:18:8d:2d:19:8c:16:41:ce:5f:79:48:af:60:a1:5a:49:
ff:2b:e6:80:68:e2:98:72:d3:6c:57:cf:55:bb:0e:de:60:8e:
fc:16:cf:82:de:ca:52:da:17:de:90:f1:95:3e:fa:ba:f0:cb:
0d:05:86:de:f0:cb:a4:74:0d:7f:66:64:0a:10:e8:46:cd:77:
d1:be:7a:50:85:db:86:19:da:2b:8c:c6:38:ec:3a:80:4f:88:
84:21:f8:7f:b3:8f:a4:99:53:76:b7:ba:19:4b:fb:d4:da:6c:
1f:99:02:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 15 00:01:24 2025 by rpki-client