Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7-4nhikMZ_ZeLYbTi9G5OePpuso.roa
File: 7-4nhikMZ_ZeLYbTi9G5OePpuso.roa (raw, json)
Hash identifier: 2KzmjKniNOLnKmUquJXqSpHmb8Smz9V8wFyaYsED544=
Subject key identifier: EF:EE:27:86:29:0C:67:F6:5E:2D:86:D3:8B:D1:B9:39:E3:E9:BA:CA
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0557
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7-4nhikMZ_ZeLYbTi9G5OePpuso.roa
Signing time: Wed 18 Dec 2024 02:44:29 +0000
ROA not before: Wed 18 Dec 2024 02:44:29 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.191.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 14:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1367 (0x557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:44:29 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=EFEE2786290C67F65E2D86D38BD1B939E3E9BACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:1f:0d:2b:31:a0:be:41:6b:4a:59:5e:2d:
db:3f:ce:93:5a:59:46:e9:bb:6c:28:96:84:71:c7:
67:f5:9b:38:da:8d:6e:0f:c6:2d:d0:35:58:62:89:
b9:79:9f:c3:1a:bd:5d:84:a5:5e:b5:d2:7f:31:d8:
5b:7c:8e:a6:71:d1:41:47:4f:94:d9:9b:c8:3d:37:
48:47:eb:9a:96:7d:ea:f1:c6:e9:57:58:cc:55:a8:
c4:bc:a8:4f:07:74:80:f2:92:7a:1c:84:2f:cb:32:
a4:c6:ef:ff:31:f7:3f:8d:42:b8:25:b1:8f:72:ef:
a4:4c:6d:e4:e6:6e:65:81:04:3a:81:83:6a:5b:93:
1b:cf:54:ad:45:94:36:63:95:f7:10:ca:d3:30:fb:
8a:09:ce:60:45:e1:f0:08:ca:77:d6:0b:74:b1:06:
f3:54:2c:c5:88:10:d3:e8:39:67:75:bf:05:58:7d:
46:69:a0:3e:28:72:45:9d:9b:fa:92:e5:5a:6e:f2:
ea:eb:91:54:56:08:cf:d7:c7:ea:47:4a:f0:ca:bd:
21:43:f9:25:77:35:4f:00:17:b2:d3:eb:4f:f2:f0:
1a:d5:12:a5:26:e9:73:e6:4c:b4:90:23:3f:33:c6:
0a:1e:43:a6:43:fc:e6:ff:54:00:03:69:48:8d:31:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EE:27:86:29:0C:67:F6:5E:2D:86:D3:8B:D1:B9:39:E3:E9:BA:CA
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7-4nhikMZ_ZeLYbTi9G5OePpuso.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.191.0.0/18
Signature Algorithm: sha256WithRSAEncryption
06:9c:a3:a0:5c:47:39:ee:52:7e:4e:b8:7f:b3:c0:09:5f:b3:
67:16:41:83:ca:4f:05:cb:cc:bf:df:d6:24:8e:57:d1:e3:87:
09:fe:7b:d6:70:95:d5:f0:06:b9:bc:ef:e9:af:0f:ff:0e:06:
b3:55:bc:cc:90:cb:4c:c3:9d:1e:cc:c5:4d:ca:72:09:5a:2e:
ee:70:78:e7:da:96:9e:2d:64:54:92:c1:d1:78:36:7f:97:3b:
3f:1e:09:1b:26:28:13:20:c4:b0:b1:2f:35:bd:72:b7:da:9d:
89:8c:92:ac:1b:e1:b1:57:90:c9:be:ba:3c:e0:94:50:68:21:
32:33:b6:6c:52:d2:e2:f8:d8:68:85:ea:c0:d4:2b:62:90:f3:
4c:93:ce:bd:2e:ed:b1:96:0a:e9:9f:63:5b:5d:11:c7:1a:78:
b9:2f:d2:4a:23:78:f0:b7:8e:9d:43:b5:b4:23:ee:dc:73:3a:
e8:e1:96:d5:24:5c:d9:21:f4:a0:b8:f1:db:36:bb:ab:a8:57:
ae:68:d2:68:1d:80:24:e8:4e:d5:f8:2b:67:35:65:7a:08:8d:
dc:30:97:3b:34:c6:96:bd:8e:f7:a5:35:90:fc:ae:a6:d3:09:
24:37:0e:c2:cc:36:22:7d:ff:4a:5a:b2:4f:79:1d:15:74:a1:
0d:e2:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:42 2025 by rpki-client