Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4WyArbA6ATB_hCZwz5tA8AxBVco.roa
File: 4WyArbA6ATB_hCZwz5tA8AxBVco.roa (raw, json)
Hash identifier: 3u1eTrYytD36UZeKyE7tDBptsHxXZ2Z1KGbo2UcThYM=
Subject key identifier: E1:6C:80:AD:B0:3A:01:30:7F:84:26:70:CF:9B:40:F0:0C:41:55:CA
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 03F8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4WyArbA6ATB_hCZwz5tA8AxBVco.roa
Signing time: Wed 18 Dec 2024 02:18:48 +0000
ROA not before: Wed 18 Dec 2024 02:18:48 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 111.99.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016 (0x3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:48 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=E16C80ADB03A01307F842670CF9B40F00C4155CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:af:54:d8:c1:d7:12:da:4c:a0:39:2a:40:
96:9d:67:54:54:df:61:08:30:b7:03:ab:1f:da:c1:
cf:19:cc:eb:a0:02:85:0b:d8:a5:7b:7e:e8:23:fe:
5b:ec:05:90:5b:d7:3f:11:ba:cc:57:f0:92:24:84:
4d:88:d9:54:66:bc:5b:e5:0e:b5:ba:e1:21:a8:6f:
9f:dd:2d:fa:18:e9:a9:a1:3c:82:9d:0b:90:45:9f:
02:15:22:84:12:d1:d7:15:13:ca:09:dd:a8:6c:c1:
9b:d6:72:bf:6b:76:2a:38:10:22:a9:ac:e5:49:78:
d5:2e:5e:16:ff:ff:9a:84:28:2e:dc:6d:cf:57:54:
fa:85:a0:b2:ed:fa:29:cf:d4:f5:b3:7f:d0:37:56:
58:b0:60:85:95:62:1e:d8:8d:03:ae:70:9c:b8:74:
67:d8:6a:8c:3b:fe:9a:f9:fd:85:ad:0d:f4:2d:ef:
da:ad:18:6b:78:ff:41:f2:fd:45:12:2a:a2:48:0d:
a8:39:5e:3f:0b:48:0a:19:5c:4a:c1:a9:42:c2:52:
7b:59:0a:dd:e3:1a:6a:ea:d4:96:db:0a:e7:18:75:
b4:d0:c5:7e:e4:96:ee:00:51:4f:85:44:7d:4f:2e:
de:67:8b:2b:b9:18:d1:83:08:cc:4f:12:1e:4d:2b:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6C:80:AD:B0:3A:01:30:7F:84:26:70:CF:9B:40:F0:0C:41:55:CA
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4WyArbA6ATB_hCZwz5tA8AxBVco.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:96:3a:49:1d:83:6e:08:fc:23:82:01:4e:82:5d:99:df:73:
00:69:11:38:b2:2f:57:b8:e0:2f:cc:94:e0:c0:95:f2:b1:32:
b4:0f:be:38:23:bf:7b:e0:f1:c1:9d:e6:2f:c2:43:47:07:7d:
ef:88:7c:86:ae:bc:95:bc:5a:3c:6e:e4:67:bb:f6:29:46:3d:
0e:11:51:53:7f:4e:dd:1f:cb:ed:26:22:6a:f6:77:43:37:bb:
e7:14:70:22:9b:37:cb:5b:ec:4a:b2:00:01:f1:e4:e0:66:53:
36:27:10:80:ee:46:8a:81:22:0f:97:75:f7:9e:43:95:61:8e:
43:7f:8e:07:27:83:55:ae:a5:25:da:b2:69:05:72:33:f0:b0:
98:39:be:9c:03:5a:eb:7c:78:36:3a:83:54:4b:bd:ba:da:2a:
4d:88:38:ab:56:91:3a:68:53:37:6b:9f:0d:62:28:f9:16:31:
cc:d4:7e:52:e1:49:cb:53:82:f5:a3:9d:ef:5e:f9:36:8f:ad:
62:ed:dc:e6:cc:d0:b9:a5:26:6d:48:fc:34:ee:e0:28:72:fd:
15:ec:95:db:a0:d8:1e:a1:51:55:30:3d:b8:c3:c7:de:c3:c7:
49:11:45:5c:60:1d:ab:2a:0e:1e:a2:ca:de:e5:72:98:fd:fa:
3a:ce:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:27:21 2025 by rpki-client