Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FtadCxITYvXdxtaUurVCX-HAvac.roa
File: FtadCxITYvXdxtaUurVCX-HAvac.roa (raw, json)
Hash identifier: bITgbW9XjyF3Z4Vx8Dlqv2GSbqRq9k5M2WlcxQZOZfE=
Subject key identifier: 16:D6:9D:0B:12:13:62:F5:DD:C6:D6:94:BA:B5:42:5F:E1:C0:BD:A7
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04C2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FtadCxITYvXdxtaUurVCX-HAvac.roa
Signing time: Wed 18 Dec 2024 02:32:24 +0000
ROA not before: Wed 18 Dec 2024 02:32:24 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 106.189.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1218 (0x4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:32:24 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=16D69D0B121362F5DDC6D694BAB5425FE1C0BDA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:05:72:fa:3e:14:62:19:70:ed:73:e5:0a:
0c:13:ce:12:c3:29:d2:f0:11:51:c7:a0:55:e1:c7:
19:3d:cb:4c:f2:d3:d2:14:22:a3:8e:f4:03:2a:9e:
53:0d:b5:b1:29:96:21:fb:85:ff:fe:03:4a:59:ca:
16:ab:0c:50:ef:22:e2:55:f5:ad:66:e9:c2:58:b4:
91:86:bc:de:6d:2e:fd:42:7e:85:3e:26:f9:19:fd:
cf:86:d6:37:74:6b:3d:b4:36:e9:8a:9d:28:0f:99:
30:00:b1:ad:a8:5f:75:e4:59:74:63:99:5f:e2:9d:
21:ec:fc:76:2b:8a:ce:73:69:e9:e7:23:49:b0:f5:
03:bf:6e:71:34:e5:cc:e6:0b:80:d3:7e:98:7a:6a:
15:19:48:d4:b2:fc:53:fc:2c:8f:ee:30:fb:c6:93:
3d:dd:25:f8:cf:f6:39:e1:8a:ad:1f:d6:0f:8c:26:
2e:5b:4f:79:e8:ae:f8:67:99:49:d0:e3:70:86:1c:
7a:5a:d1:09:27:a9:73:7c:e1:e9:c4:fb:1f:bb:19:
43:c4:5d:b2:64:4e:ac:97:74:b1:92:e1:ae:d4:96:
a4:9b:38:05:71:3a:fb:ad:88:20:9c:af:93:5e:b5:
14:87:28:94:9e:a6:6f:5f:1e:b2:a0:d1:04:58:85:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D6:9D:0B:12:13:62:F5:DD:C6:D6:94:BA:B5:42:5F:E1:C0:BD:A7
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FtadCxITYvXdxtaUurVCX-HAvac.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
106.189.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:97:17:d3:3a:ac:4a:cf:13:1c:4a:64:d9:6c:e1:68:a9:3b:
66:6d:81:f0:02:ca:4e:f8:82:e0:f3:93:30:2c:95:ce:2b:9d:
24:21:1c:8c:f1:22:b1:65:85:93:42:d3:9d:67:8f:00:d5:55:
fd:14:f0:ee:37:e1:8d:67:35:78:f4:8e:ec:ed:fd:f5:5d:9d:
40:10:3f:24:3d:85:48:06:f7:7f:2c:6e:7b:df:00:c8:6e:85:
e7:cb:5d:60:c3:83:eb:e1:e8:c9:f5:ae:e3:2a:1d:a5:6f:fe:
00:31:70:91:db:1b:e8:fd:fe:d5:7c:d1:30:63:df:92:da:88:
fd:8f:c8:64:de:c2:92:57:a7:22:ca:a2:e8:bd:95:82:cb:b2:
e4:36:45:81:98:f5:d0:c9:80:43:5a:04:e6:14:9f:7d:fe:c8:
e6:4f:c9:a4:9d:1a:62:55:c7:b7:71:e3:8e:f4:9d:1a:4b:95:
58:ad:89:7b:f4:4e:68:a3:c6:9c:00:50:66:0c:fb:79:57:4e:
a1:2a:ca:e7:2f:d9:27:f7:bc:28:55:a0:8c:58:35:0c:9d:5a:
00:2b:d8:3b:dd:e9:af:9d:ff:a9:a5:b7:93:57:c0:58:2b:27:
05:63:05:b2:47:c2:8c:3e:39:f3:eb:b0:37:15:10:99:fb:00:
4b:aa:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:56:59 2025 by rpki-client