Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jZsz5TJy9CfQtPEDGYJenZQLkR8.roa
File: jZsz5TJy9CfQtPEDGYJenZQLkR8.roa (raw, json)
Hash identifier: CELt/z/2KLMa2maeTzFsaW0wWor+lgMGsvZsotTbduI=
Subject key identifier: 8D:9B:33:E5:32:72:F4:27:D0:B4:F1:03:19:82:5E:9D:94:0B:91:1F
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04BC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jZsz5TJy9CfQtPEDGYJenZQLkR8.roa
Signing time: Wed 18 Dec 2024 02:32:22 +0000
ROA not before: Wed 18 Dec 2024 02:32:22 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.174.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:32:22 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=8D9B33E53272F427D0B4F10319825E9D940B911F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:51:29:a0:a1:22:d6:16:7c:b5:fa:a0:08:
fd:24:4c:06:ae:17:a3:59:be:ca:3a:f5:ef:e4:11:
ab:7f:74:42:4e:4a:24:d6:69:f3:76:5d:98:fe:3d:
8f:e3:a4:bb:87:1e:81:65:0d:45:ab:7b:c8:17:24:
87:77:78:9e:d9:b6:ee:ca:b7:16:37:cc:6c:c5:cb:
33:62:61:3c:bd:15:37:ab:5d:35:a2:6c:2d:5e:78:
ab:be:82:04:36:75:c8:f5:e4:c7:6f:84:56:96:76:
f3:1a:47:0a:f1:e1:b6:8f:78:fd:c6:6b:07:d4:99:
ef:58:82:d7:19:bc:98:dc:e8:87:87:4b:b1:6b:65:
ec:a6:ce:1b:71:da:65:4b:09:77:58:ed:01:d2:d7:
54:bd:16:de:ef:8f:5a:9b:b5:84:d9:34:b9:0a:c3:
f3:bf:1c:cc:2c:0a:f5:62:db:11:0c:b6:38:59:f8:
ee:4f:b8:12:ba:05:64:11:34:e2:0e:84:d2:4f:72:
7f:c8:99:45:82:cd:d8:49:cb:4d:bf:8c:83:db:b3:
e9:e1:43:78:11:6f:0a:40:37:37:f3:9a:cf:36:f0:
c9:9c:5e:b4:de:0e:7a:c0:e8:0b:10:98:83:d1:1a:
49:b8:f4:95:d4:49:fb:16:54:30:20:b7:c0:24:a9:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:33:E5:32:72:F4:27:D0:B4:F1:03:19:82:5E:9D:94:0B:91:1F
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jZsz5TJy9CfQtPEDGYJenZQLkR8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.174.64.0/18
Signature Algorithm: sha256WithRSAEncryption
39:8e:e0:f0:17:fe:19:8e:7e:3f:3f:88:38:27:25:28:8a:c2:
61:1f:72:d8:e0:46:9f:c8:e0:ce:5e:e7:63:b1:5a:b2:16:b0:
5c:5d:68:ee:18:14:1f:43:93:3b:d3:c9:80:c1:cf:65:5e:02:
89:1d:52:9c:42:02:b7:04:5e:4e:aa:9f:10:ff:2d:8b:1c:e7:
d3:19:33:f3:36:80:60:49:13:a7:b6:1e:44:01:d8:18:3d:04:
a6:7f:c1:ca:fa:ac:0b:be:e7:62:d5:83:a4:b9:cf:2c:f0:76:
34:dd:70:f2:69:81:b7:f1:fd:78:b2:f4:99:30:55:2b:69:e1:
51:ae:90:7f:b1:e3:79:71:5c:c2:f0:ff:72:66:7a:0f:ca:98:
05:48:83:89:5f:6d:3f:d8:9b:81:01:65:e7:49:49:32:4f:e3:
d1:8a:c2:99:6f:ca:18:ed:a5:f2:24:98:85:a6:83:56:4f:60:
ee:80:22:bf:8a:c9:7f:05:81:16:d4:43:de:0b:8b:ad:86:7e:
d3:74:94:5f:d4:5d:9f:db:5b:c8:77:3c:fe:83:3d:96:c6:5c:
d2:7d:94:9d:e4:e9:40:15:ee:42:3e:32:87:22:7e:16:0d:8e:
be:76:37:d5:29:1b:7f:d8:d8:7a:15:4e:9d:3a:ca:b9:9e:71:
fc:f8:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:10:18 2025 by rpki-client