Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LuJ76RS8GHoKEN1Z62ngbzXB_6E.roa
File: LuJ76RS8GHoKEN1Z62ngbzXB_6E.roa (raw, json)
Hash identifier: LPO+FtQ3OA4GFVKDrjK3bc7uzd8gc392GjuKIPNBuYM=
Subject key identifier: 2E:E2:7B:E9:14:BC:18:7A:0A:10:DD:59:EB:69:E0:6F:35:C1:FF:A1
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 040F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LuJ76RS8GHoKEN1Z62ngbzXB_6E.roa
Signing time: Wed 18 Dec 2024 02:18:56 +0000
ROA not before: Wed 18 Dec 2024 02:18:56 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 14.101.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039 (0x40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:56 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=2EE27BE914BC187A0A10DD59EB69E06F35C1FFA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:32:3d:e7:a0:13:ef:c8:cc:f4:0a:98:cf:
f4:66:2a:1d:1f:9f:e9:87:48:90:ba:6f:10:87:5e:
d6:e5:f6:b8:74:e9:4a:cb:62:4f:02:3b:a4:e2:8d:
11:1d:c8:fc:4d:c7:8c:16:5f:89:11:47:d6:44:27:
d4:60:17:5d:a9:5e:1b:f5:ca:48:18:10:68:8e:70:
48:06:53:f9:62:4b:da:1d:f8:86:b3:1e:df:dd:71:
a6:91:11:a4:74:1e:3d:2e:b7:ea:08:cc:ae:57:53:
74:48:6a:cb:78:93:b8:4a:9d:f5:5f:95:5a:17:69:
1b:96:ef:a0:00:ff:6a:ef:7a:70:ce:54:a9:7a:5a:
fa:7b:b9:a3:b4:b3:cd:27:33:79:4a:4e:fd:93:c0:
a2:f1:16:60:4d:ad:9d:89:06:c9:89:3d:be:fb:b9:
26:91:6c:fd:1b:bb:7b:3c:b7:42:5f:c2:31:c0:83:
f8:1e:1f:34:02:f4:09:ad:39:e6:01:ac:d8:ab:5e:
9b:0d:1c:d1:62:d2:d9:89:ff:6f:61:af:31:2e:f8:
04:6c:54:80:aa:e4:62:78:64:dd:3d:ed:df:f0:8b:
1e:62:d4:68:01:6e:b3:7e:ac:c2:0b:b4:68:f1:27:
7b:2a:c7:ae:4d:ea:52:86:fb:21:d0:93:08:98:17:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E2:7B:E9:14:BC:18:7A:0A:10:DD:59:EB:69:E0:6F:35:C1:FF:A1
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LuJ76RS8GHoKEN1Z62ngbzXB_6E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:3d:a3:32:18:df:5f:20:80:45:2a:00:96:35:a3:1f:79:8f:
12:7a:4f:ca:15:1b:09:2c:f2:6c:c8:7a:ad:75:ca:04:98:ab:
e0:fa:39:55:8b:fc:4d:65:1d:9a:92:77:de:db:0f:8e:ba:39:
15:27:99:ef:40:a6:ed:a0:87:ba:5b:ff:46:ea:00:06:c3:55:
bd:e0:4a:a2:b0:47:6d:99:46:8e:2f:2f:97:b5:48:50:84:4a:
9e:13:09:50:69:97:30:31:9c:9b:ad:be:e4:1c:4e:fc:b3:24:
2a:b9:b8:16:ca:34:2b:d3:19:7a:01:2e:ff:a1:63:95:1d:06:
55:d1:ec:45:da:97:af:24:ac:f5:93:7e:fd:c6:2e:fc:18:d5:
ff:5e:cb:04:76:23:e5:80:85:f4:9d:17:1f:74:cc:f7:94:00:
9e:75:1b:a7:c9:a2:65:73:85:ab:7e:95:31:e3:64:48:b3:c2:
a3:c0:bb:81:f2:37:74:02:b0:8c:5b:79:f7:00:a4:cd:e1:92:
40:5d:8f:15:c4:37:7d:ae:74:2a:31:4c:2f:11:b4:a8:e5:99:
1c:54:51:52:59:f6:b5:e9:65:78:48:a3:99:0b:de:1f:5a:0e:
fc:91:ad:5d:52:d7:63:01:c9:97:2b:aa:25:b9:c6:7f:ac:f5:
af:25:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:31:01 2025 by rpki-client