Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CcsQ-Kph8iYa0FpG0eZrPgg8IBU.roa
File: CcsQ-Kph8iYa0FpG0eZrPgg8IBU.roa (raw, json)
Hash identifier: 9SxST7/VE9CXZCOobr9YkZEN2DGnDzXVMPDu85Q03D0=
Subject key identifier: 09:CB:10:F8:AA:61:F2:26:1A:D0:5A:46:D1:E6:6B:3E:08:3C:20:15
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04AC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CcsQ-Kph8iYa0FpG0eZrPgg8IBU.roa
Signing time: Wed 18 Dec 2024 02:29:01 +0000
ROA not before: Wed 18 Dec 2024 02:29:01 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 119.107.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:29:01 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=09CB10F8AA61F2261AD05A46D1E66B3E083C2015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:bd:71:b7:18:d4:57:e8:a7:bf:be:48:17:
38:db:c6:4c:a3:51:66:4c:c9:0b:47:95:40:2c:28:
1d:c3:60:d7:4a:9e:0a:29:a4:78:44:90:ed:00:48:
30:27:06:7b:38:1b:e4:ca:6b:ce:17:cc:61:36:5f:
5d:1d:55:04:9b:70:c4:4e:19:53:0a:20:e0:43:66:
89:67:26:4b:21:c7:04:47:89:89:45:a5:ca:89:17:
b9:2f:42:b5:77:25:7c:e0:1d:58:fc:59:8b:92:46:
48:9b:3d:a4:ac:4e:a2:35:d6:07:78:3b:d9:ee:4a:
7a:0e:39:e0:05:ad:ee:24:86:c8:21:f8:12:44:26:
65:df:18:e7:66:e7:14:f4:d5:1e:76:b2:76:94:ab:
e0:fe:a9:58:09:1b:06:3d:91:a6:e0:1a:74:68:8d:
e9:f5:be:9d:8b:b4:64:b3:3e:f6:f1:4f:40:a5:0e:
26:03:38:3f:86:b3:e7:2a:08:e8:9a:fe:ff:d5:4b:
d5:bb:64:ec:28:59:a9:35:05:03:c8:62:db:49:7c:
de:23:15:59:67:a8:41:da:b2:8e:a9:a5:10:ce:86:
f5:26:03:66:4f:b3:a8:a7:ba:b0:2c:d3:68:47:1d:
48:a3:69:02:ed:ba:f0:c4:4e:df:80:fc:51:a7:d8:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CB:10:F8:AA:61:F2:26:1A:D0:5A:46:D1:E6:6B:3E:08:3C:20:15
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CcsQ-Kph8iYa0FpG0eZrPgg8IBU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.107.0.0/17
Signature Algorithm: sha256WithRSAEncryption
22:96:1c:b8:d6:41:22:f0:a2:45:59:80:bb:79:69:06:d5:28:
02:d6:80:04:a2:65:22:bb:77:d4:61:86:b9:ca:51:e3:43:37:
04:4e:b2:28:69:9a:8a:23:b3:50:3d:85:89:93:24:bc:df:29:
06:2f:71:fc:84:83:57:55:e3:18:aa:29:ec:d1:6b:e6:fb:84:
b6:45:5c:d7:b2:bb:75:0e:c8:aa:23:46:82:91:a8:1f:44:e9:
84:38:1b:03:2b:c2:62:ed:21:28:6d:55:77:87:1f:b6:3d:e8:
b6:ee:36:8d:40:c4:fc:5e:1a:bd:34:52:4a:61:de:c3:25:d6:
64:c2:bb:70:f8:7e:d2:b1:b9:d0:e6:23:a5:52:15:f0:aa:a3:
89:2d:db:81:3c:33:bc:57:ab:03:cf:ff:ae:22:f0:1a:7a:bd:
3a:38:1b:df:a3:dc:02:fa:00:d0:4e:e0:30:a0:47:3f:d7:dc:
9d:ce:b5:7e:f5:a1:65:ce:dd:4b:13:14:2d:b0:c4:e1:c3:93:
d5:c1:b0:ac:6e:a2:3f:15:fb:7f:e6:e1:08:21:35:c5:b2:3e:
b1:c6:2a:03:a8:9f:3b:d8:5c:a6:85:bd:d1:7d:29:23:39:b1:
7a:5a:87:89:81:10:c9:c9:81:2d:c6:3c:37:10:59:d6:51:34:
28:df:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:52:50 2025 by rpki-client