Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/821aQkOMIORRQRx277W7LlmLj80.roa
File: 821aQkOMIORRQRx277W7LlmLj80.roa (raw, json)
Hash identifier: x4KyE+8mkjD41nlarpcXRLClkgcT0qs1PDlcEw4YrYU=
Subject key identifier: F3:6D:5A:42:43:8C:20:E4:51:41:1C:76:EF:B5:BB:2E:59:8B:8F:CD
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 03BD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/821aQkOMIORRQRx277W7LlmLj80.roa
Signing time: Wed 18 Dec 2024 02:13:02 +0000
ROA not before: Wed 18 Dec 2024 02:13:02 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 59.137.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 957 (0x3bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:13:02 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=F36D5A42438C20E451411C76EFB5BB2E598B8FCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:23:b3:8b:81:28:28:59:a5:ea:13:0f:c3:
35:ff:ba:a1:58:8d:72:03:d1:71:85:3d:0f:38:a9:
58:4a:57:ef:06:cc:8c:5d:32:50:6a:f2:af:92:65:
7f:ba:13:67:a4:c9:ff:a8:5e:68:b2:88:54:ce:b8:
ef:5e:88:e3:39:d1:a9:62:d7:af:f7:4b:a4:6e:29:
d7:56:f4:e6:10:29:bc:98:97:db:87:1d:a8:7a:ba:
02:c4:8f:94:95:e4:b7:39:58:cb:c3:46:76:ba:54:
00:7c:36:39:96:a2:39:10:98:fe:91:1e:f0:2c:e8:
8b:59:02:63:c2:03:72:20:fb:ff:8e:2e:b6:3a:6f:
01:d0:ff:ab:2c:ce:ec:09:60:03:42:d2:1e:4e:9c:
fc:fc:60:2d:e6:ae:70:40:6c:4e:ce:7f:e0:bf:e8:
13:71:55:2f:d7:d4:21:a4:a7:a0:e6:8a:9a:bc:a1:
04:31:27:a9:57:fd:c2:6e:f1:f3:f5:75:36:60:b5:
13:52:d8:e2:1c:0f:11:24:e5:80:2e:d4:51:a6:92:
05:3f:91:8e:b3:a5:c6:bf:48:b5:86:30:0d:54:7b:
cf:2e:11:1d:de:ad:de:ed:a6:e8:dd:96:9c:11:12:
82:54:97:06:7a:34:b8:09:41:b5:f3:64:d0:7c:f2:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6D:5A:42:43:8C:20:E4:51:41:1C:76:EF:B5:BB:2E:59:8B:8F:CD
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/821aQkOMIORRQRx277W7LlmLj80.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.137.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2f:b4:b2:b4:88:a0:d8:43:37:95:63:8f:ae:de:98:9b:45:b1:
8c:d3:34:ec:23:b6:1d:1d:bb:f6:75:c4:f0:7d:9d:77:92:f7:
e1:60:8e:2e:5c:2c:60:bc:97:4e:67:f9:7b:16:f4:db:e5:47:
35:da:6f:17:e4:43:17:2b:64:3b:82:d0:01:06:6f:01:ce:79:
a5:6f:7b:af:c1:ec:3c:15:5e:02:5f:ab:85:1f:e2:a2:b3:35:
6a:e5:1f:57:7c:f5:ba:6d:e3:76:2f:1c:93:6d:56:4e:6b:85:
a0:1c:82:5b:81:df:13:8a:67:f4:bf:a4:85:d6:e7:1b:9c:89:
ee:3a:c6:3d:ae:17:ed:27:84:6a:56:90:a4:0e:56:fa:22:9a:
92:28:20:03:8b:6a:5e:8d:3c:6f:f3:82:00:ac:fc:1f:bf:57:
ee:2f:8e:30:16:ef:97:81:1a:c3:79:56:ec:e0:24:5c:04:a0:
c7:b0:03:89:e4:dc:6b:b9:f6:45:56:5f:dd:76:f9:bc:80:e1:
18:62:33:79:7b:20:1f:64:e3:c6:43:28:65:92:ea:c3:87:90:
54:2d:df:32:b7:01:1a:ea:85:ee:bc:e2:63:7a:04:d3:9b:9d:
44:b6:3b:db:11:f3:e2:ed:c4:fb:2a:38:dc:68:b5:69:59:86:
6d:48:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:57:05 2025 by rpki-client