Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NXz7Z4RnBqtMMyLAZN_Wp4AFp1c.roa
File: NXz7Z4RnBqtMMyLAZN_Wp4AFp1c.roa (raw, json)
Hash identifier: VIcZl5FxnbsGf0bp/alQwHeZKjKKtqdBTFT3WEtrY24=
Subject key identifier: 35:7C:FB:67:84:67:06:AB:4C:33:22:C0:64:DF:D6:A7:80:05:A7:57
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0437
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NXz7Z4RnBqtMMyLAZN_Wp4AFp1c.roa
Signing time: Wed 18 Dec 2024 02:22:19 +0000
ROA not before: Wed 18 Dec 2024 02:22:19 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 27.87.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:22:19 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=357CFB67846706AB4C3322C064DFD6A78005A757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:1a:8b:46:3e:e9:0c:fd:8f:63:80:e3:f0:
53:e1:13:b5:06:f0:40:62:e6:22:31:b7:d4:a3:b4:
9c:3d:17:fb:6b:8b:71:7f:da:b5:17:c9:f1:11:a4:
4d:bc:9d:9e:49:41:73:16:a4:db:5a:a8:22:87:c6:
c5:ce:d3:14:e7:c4:02:08:dc:d4:4b:c6:2a:8e:e9:
eb:04:17:f2:cc:32:bb:8e:46:4b:a7:e9:2c:c2:90:
f0:ef:42:20:d4:1f:8b:ef:a3:3a:6f:28:00:9c:5b:
68:90:01:77:34:86:85:9b:07:f7:41:5f:db:91:b1:
bb:de:5a:5b:67:82:58:77:76:b0:fa:34:3e:18:4d:
af:49:54:32:03:06:7a:66:ba:75:2b:bd:a4:22:1c:
75:9b:90:72:58:0c:92:cd:4f:da:1a:6c:99:cf:02:
91:d3:d0:03:2d:74:c8:bc:34:9d:10:d5:81:1b:81:
03:93:7a:68:d1:2c:c0:6f:f2:b5:7b:07:19:41:0f:
fe:27:cc:56:9f:2c:fd:b6:73:cb:9a:85:60:f3:ba:
80:2f:dc:2c:65:42:05:d9:40:8a:df:23:39:cf:a5:
6b:d1:50:5c:c7:68:09:43:85:f3:19:8e:fb:8b:8c:
86:c3:e6:b4:21:c8:b0:e3:7e:b9:c9:5f:6b:8d:d1:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7C:FB:67:84:67:06:AB:4C:33:22:C0:64:DF:D6:A7:80:05:A7:57
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NXz7Z4RnBqtMMyLAZN_Wp4AFp1c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:40:83:b3:dd:b0:68:7e:18:55:0f:71:90:f1:1f:d6:f1:bb:
6b:ba:a8:f5:25:8c:ec:8e:34:c8:ac:79:99:eb:df:e1:03:4b:
8d:a7:c4:25:79:86:3a:9a:f5:50:e5:ed:18:a7:9c:e8:de:6d:
1f:ee:57:b0:0a:40:27:ee:f4:83:c4:01:e8:d2:ee:25:6b:e4:
de:c4:ba:c8:da:56:4c:27:50:8d:65:a4:34:c4:bf:6c:cd:9f:
f0:44:38:97:8b:9c:04:56:d4:4a:6c:4d:48:a9:2e:53:90:69:
5a:33:49:e3:81:2d:19:a2:a9:78:76:c9:fc:f1:d3:26:e7:6e:
74:c4:48:77:b5:65:f4:5e:17:a7:6c:ec:5c:6e:9f:fd:8b:bb:
00:61:c3:e0:4b:e4:44:a7:a3:e6:ec:ce:e2:82:fa:1a:1b:54:
04:ee:a1:e0:6f:f6:a6:40:b0:99:ed:a0:46:63:81:38:3f:35:
d0:d2:1e:36:ac:9f:bd:15:74:4f:30:1e:73:5b:83:03:90:17:
6f:b2:7b:df:d3:36:ca:f6:0c:42:66:4c:3b:b6:c5:46:75:be:
01:5a:10:e8:dc:14:8e:ec:3b:a6:87:0d:24:98:42:08:37:ee:
09:7d:41:f1:24:62:4f:ef:da:ea:3f:7d:27:bb:f2:1e:94:e4:
96:33:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:56 2025 by rpki-client