Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/g-07Rh272tm55o_OzHvLkPJ4ku0.roa
File: g-07Rh272tm55o_OzHvLkPJ4ku0.roa (raw, json)
Hash identifier: zMAo0XKBHbUD/GquZEZbNbhbUQ2BxbVAa+Z39LGkf5c=
Subject key identifier: 83:ED:3B:46:1D:BB:DA:D9:B9:E6:8F:CE:CC:7B:CB:90:F2:78:92:ED
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0552
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g-07Rh272tm55o_OzHvLkPJ4ku0.roa
Signing time: Wed 18 Dec 2024 02:44:27 +0000
ROA not before: Wed 18 Dec 2024 02:44:27 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 124.109.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:44:27 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=83ED3B461DBBDAD9B9E68FCECC7BCB90F27892ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:40:b2:95:dc:87:b7:e6:40:a9:2a:a7:10:
1d:cc:96:20:28:21:7e:e4:3c:82:52:f2:21:a2:75:
52:3f:48:54:73:2a:17:f4:24:7e:6c:80:6b:da:5f:
68:0b:75:e4:e6:1f:2e:bb:fc:ef:ce:ee:fc:1b:d0:
3c:9a:e1:b6:fc:6e:7f:5b:92:c0:0f:a2:f5:f6:75:
34:28:62:26:d8:54:3f:29:cf:47:67:4f:0c:1a:f5:
cb:c3:1d:84:5c:be:d0:5b:f6:ae:34:e0:90:ec:ce:
e0:d9:bf:75:73:1a:3e:0a:d4:51:a2:a9:aa:f1:d9:
f2:c2:9f:d7:e0:ef:50:fc:19:3c:13:c9:d2:e9:ff:
6a:97:c0:43:63:54:fa:30:fe:8d:06:a2:ed:56:62:
7c:48:f3:da:f1:57:43:9f:fc:ac:a8:89:fb:e5:d5:
58:1b:74:6b:20:5e:50:c9:06:a2:6c:03:bd:bf:cb:
c0:e7:71:57:75:a2:40:f0:cb:e4:b2:0c:fb:ea:1d:
c7:82:99:2b:89:a9:0d:48:84:9c:71:c8:c7:81:44:
cd:48:82:d7:a0:fd:21:72:27:c4:ea:ac:7f:28:e8:
28:c6:bc:14:ff:02:92:a7:16:81:cb:6f:0d:c7:2b:
22:5b:c1:77:71:1a:1e:77:be:c5:ef:56:ec:48:73:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:3B:46:1D:BB:DA:D9:B9:E6:8F:CE:CC:7B:CB:90:F2:78:92:ED
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g-07Rh272tm55o_OzHvLkPJ4ku0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.109.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:13:8f:60:d0:af:30:11:f1:ed:71:94:d7:ac:27:fe:45:1f:
3d:58:f4:49:91:cb:6f:55:02:4f:de:c2:d1:28:34:49:4c:b3:
aa:13:1e:ed:52:8b:78:ef:ce:19:d1:c8:7b:50:52:b1:6c:ad:
15:e0:0c:77:a8:28:d5:a6:3a:bc:90:da:59:d2:bf:5e:bc:e5:
90:17:ea:44:04:87:6b:01:42:25:27:9a:36:7a:2b:40:16:32:
8a:54:f8:28:9a:58:e6:bf:fd:0c:a4:c4:af:7a:c1:16:dc:d5:
8f:b2:14:21:1e:2a:f6:48:1c:42:e1:a3:fd:96:6e:39:53:fb:
25:21:bb:d8:d5:58:e8:c0:17:17:08:01:2e:27:c3:f6:3f:f1:
40:b7:5f:fa:21:ec:f4:f5:df:f0:2d:99:98:55:cd:c3:19:da:
a6:6f:9b:ea:1a:23:b3:e7:55:c6:e1:f0:3b:2c:48:66:87:18:
d1:03:26:e8:40:32:a7:82:3b:1d:2f:88:fe:c6:9a:01:a1:28:
32:36:ba:14:ad:86:ae:71:30:e6:be:72:a1:92:22:07:20:5d:
fe:be:61:4f:66:93:50:9a:65:d3:46:e3:57:a0:40:71:9b:62:
f0:c1:b2:51:9f:56:6c:0d:09:6f:b7:dd:46:73:ad:43:e5:43:
73:58:d6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:38:56 2025 by rpki-client