Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_k-ggkRRS-knkDM6elTWKYnJ-1M.roa
File: _k-ggkRRS-knkDM6elTWKYnJ-1M.roa (raw, json)
Hash identifier: JO7MLI7oDLgNXj6scH+RuOCThYKZPLTuf4704xGhTOM=
Subject key identifier: FE:4F:A0:82:44:51:4B:E9:27:90:33:3A:7A:54:D6:29:89:C9:FB:53
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 043F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_k-ggkRRS-knkDM6elTWKYnJ-1M.roa
Signing time: Wed 18 Dec 2024 02:22:22 +0000
ROA not before: Wed 18 Dec 2024 02:22:22 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 59.134.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:22:22 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=FE4FA08244514BE92790333A7A54D62989C9FB53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:c0:6a:e0:0e:20:11:9e:cb:b2:d9:48:2a:
b7:19:1b:4f:c8:b0:22:a5:03:2b:36:4f:27:a9:6e:
22:be:de:2a:93:61:35:b4:00:b0:0c:cd:88:39:3d:
f6:98:86:f7:08:8a:a1:a3:97:4c:59:f6:4f:8a:cf:
db:2e:aa:79:4e:b2:6b:f8:fd:e2:28:df:cc:74:71:
ec:f4:0d:58:f1:99:2e:6e:42:25:e0:1e:4a:30:5b:
5a:ea:1a:29:03:8b:cc:a9:12:53:a0:6e:a3:1a:aa:
75:68:73:1f:4b:4b:a2:62:6c:52:cb:f0:84:14:d9:
37:74:9f:c1:9b:1e:4a:4d:9f:59:5b:9e:69:03:34:
d7:49:c7:ed:77:51:a5:be:d5:81:5f:25:fd:fb:10:
9a:6c:77:7c:f9:8f:96:9c:cb:a8:56:c2:1d:63:dd:
37:9c:da:ad:0b:3b:4c:dd:a6:56:43:86:84:51:d5:
4d:bf:80:d3:7c:1f:52:c9:a9:91:00:03:52:56:16:
d0:3d:c6:d9:8b:7a:ed:af:60:f0:2f:01:75:bb:40:
2a:e9:c2:51:5e:fa:1e:6b:92:a2:f9:fc:1c:7f:7a:
ce:23:3e:a9:ef:8f:32:d5:42:5a:c7:a6:58:99:a1:
ec:40:53:40:da:d2:c8:9e:1b:ca:3e:90:32:52:02:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:A0:82:44:51:4B:E9:27:90:33:3A:7A:54:D6:29:89:C9:FB:53
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_k-ggkRRS-knkDM6elTWKYnJ-1M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:52:2e:53:1a:cc:d8:58:08:a3:c8:ff:49:1d:2c:00:16:84:
c2:82:3b:cc:72:c0:76:25:20:1a:00:65:d9:c6:7b:7a:db:09:
fd:c4:cd:0a:30:3b:fe:c1:ea:af:9c:26:e5:fc:2a:d6:be:17:
96:91:52:33:f6:5b:8d:35:4e:af:10:eb:b6:ab:07:5b:82:78:
33:a2:ed:32:07:c9:a0:c1:21:86:09:2f:89:42:7f:8f:69:34:
81:4e:77:90:dc:35:3a:54:f3:cf:41:04:00:b1:a3:f7:3f:00:
a2:0b:1a:95:86:0a:d7:e6:94:49:8f:3c:75:26:02:15:0c:e7:
d5:61:4b:45:75:ab:08:b4:8f:6a:11:58:c2:f2:da:ca:c3:d4:
2e:5e:3d:6c:92:5d:04:19:3f:19:48:91:84:32:b6:07:ab:ce:
7e:dd:0d:bc:35:7e:97:a9:d4:81:d4:a8:12:c1:05:cd:d2:78:
9b:9b:8e:aa:ae:1d:94:58:2c:c7:86:63:37:33:b1:34:57:c3:
0e:dd:4b:e8:22:be:a5:35:03:42:14:b9:86:58:cf:b1:70:d7:
56:fe:2a:32:4c:d9:1b:9f:5a:f7:19:23:05:94:ca:35:f9:c0:
10:40:46:79:4d:0e:82:93:11:53:8b:e7:9c:98:12:d1:47:6f:
64:ec:db:1a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjIyMjJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZFNEZBMDgyNDQ1MTRC
RTkyNzkwMzMzQTdBNTRENjI5ODlDOUZCNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOCcBq4A4gEZ7LstlIKrcZG0/IsCKlAys2TyepbiK+3iqTYTW0
ALAMzYg5PfaYhvcIiqGjl0xZ9k+Kz9suqnlOsmv4/eIo38x0cez0DVjxmS5uQiXg
HkowW1rqGikDi8ypElOgbqMaqnVocx9LS6JibFLL8IQU2Td0n8GbHkpNn1lbnmkD
NNdJx+13UaW+1YFfJf37EJpsd3z5j5acy6hWwh1j3Tec2q0LO0zdplZDhoRR1U2/
gNN8H1LJqZEAA1JWFtA9xtmLeu2vYPAvAXW7QCrpwlFe+h5rkqL5/Bx/es4jPqnv
jzLVQlrHpliZoexAU0Da0sieG8o+kDJSAl+nAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU/k+ggkRRS+knkDM6elTWKYnJ+1MwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL19rLWdna1JSUy1rbmtETTZlbFRXS1luSi0xTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA7hjANBgkqhkiG9w0BAQsFAAOCAQEAE1IuUxrM2FgIo8j/SR0sABaEwoI7
zHLAdiUgGgBl2cZ7etsJ/cTNCjA7/sHqr5wm5fwq1r4XlpFSM/ZbjTVOrxDrtqsH
W4J4M6LtMgfJoMEhhgkviUJ/j2k0gU53kNw1OlTzz0EEALGj9z8AogsalYYK1+aU
SY88dSYCFQzn1WFLRXWrCLSPahFYwvLaysPULl49bJJdBBk/GUiRhDK2B6vOft0N
vDV+l6nUgdSoEsEFzdJ4m5uOqq4dlFgsx4ZjNzOxNFfDDt1L6CK+pTUDQhS5hljP
sXDXVv4qMkzZG59a9xkjBZTKNfnAEEBGeU0OgpMRU4vnnJgS0UdvZOzbGg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:53:02 2025 by rpki-client