Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3ddClk9eYzFJBDS8GqMVqz5m6Tw.roa
File: 3ddClk9eYzFJBDS8GqMVqz5m6Tw.roa (raw, json)
Hash identifier: UxvOA5DpfKk4GE6AFsya/506ot7Jdo73NKp4SUpd1Kk=
Subject key identifier: DD:D7:42:96:4F:5E:63:31:49:04:34:BC:1A:A3:15:AB:3E:66:E9:3C
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0460
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3ddClk9eYzFJBDS8GqMVqz5m6Tw.roa
Signing time: Wed 18 Dec 2024 02:24:12 +0000
ROA not before: Wed 18 Dec 2024 02:24:12 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 111.105.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:24:12 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=DDD742964F5E6331490434BC1AA315AB3E66E93C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:dc:81:f0:c3:2d:d8:6f:25:a1:a2:bb:f0:
70:12:f0:d4:52:b7:66:e8:0a:49:2c:16:64:4d:20:
12:4d:d4:87:00:df:21:51:cf:bd:81:d0:59:13:2d:
5c:48:ce:42:14:2e:99:48:f4:34:63:4c:27:57:c0:
78:0b:eb:af:c3:fd:83:c3:3c:34:d7:dc:b5:77:1f:
ec:a4:ce:97:04:a9:ab:02:63:8f:e0:01:91:48:43:
9b:8f:26:02:0d:fb:ea:a6:2e:1f:19:c4:4f:99:af:
38:10:34:43:e1:03:9f:dd:cd:be:84:85:c1:97:8e:
ec:10:68:0a:87:fc:5c:9d:2d:f2:ee:bf:10:2d:fa:
a4:3f:6c:70:06:fb:2d:5b:81:c3:ad:ea:dc:70:5a:
d8:89:d9:b7:92:a7:17:b9:f9:80:a1:0f:2e:d0:33:
91:e7:73:16:76:47:7a:44:12:a3:57:57:56:b9:35:
ba:0a:89:19:74:70:2a:f1:2b:4d:13:b3:84:64:ff:
80:2e:ce:18:c6:1f:31:7e:17:d5:1a:74:92:ae:71:
37:49:a5:17:f4:92:43:95:0c:ed:41:5c:08:d7:85:
6f:a7:c7:b1:cb:2e:db:02:a5:6a:48:7d:3b:ca:59:
31:6b:e0:60:90:9c:76:c2:82:ce:ae:ff:83:06:5e:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D7:42:96:4F:5E:63:31:49:04:34:BC:1A:A3:15:AB:3E:66:E9:3C
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3ddClk9eYzFJBDS8GqMVqz5m6Tw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:a6:15:d3:37:03:0e:2c:37:70:ba:14:06:45:20:2a:30:8a:
10:6c:7a:29:20:6c:cf:c1:ca:d3:8e:ac:56:1b:a4:d9:a0:5d:
ae:97:fc:43:02:e5:72:63:88:d6:ae:b3:dd:b3:18:50:75:50:
78:f4:7f:29:ff:ce:39:cc:91:36:6b:ea:e3:88:40:4d:6d:d5:
0c:b5:c3:71:fa:02:f5:5e:22:0b:d5:9f:ba:5e:3f:2c:28:62:
c3:da:41:ce:48:91:81:71:b3:c3:4b:00:7f:02:ac:3f:3e:22:
52:fe:4e:0c:46:04:17:e2:20:c0:77:39:26:19:5c:9c:78:8c:
d5:96:ea:48:e6:0d:67:b3:d1:9f:71:3f:c9:cb:6a:78:46:61:
96:de:2b:a5:5a:30:07:ad:c1:a3:b7:a0:12:d1:75:53:4f:14:
88:2a:a2:69:16:f2:5c:fa:80:44:e1:09:4d:2a:32:62:57:0d:
af:88:e4:c5:a5:57:cd:1a:22:f8:75:72:91:69:84:d0:32:1e:
5e:e7:6a:8a:5a:a4:32:cc:2f:f3:96:0e:22:72:1a:0c:0e:40:
26:62:d5:6d:77:ff:a7:5b:78:8e:66:8e:97:0f:b3:80:a8:22:
27:13:5a:4d:20:10:9b:0f:d0:a6:2b:bf:83:22:b6:29:3a:09:
f0:67:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:47:14 2025 by rpki-client