Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nY8WGwLaaYFa7lB4iphsijfoFys.roa
File: nY8WGwLaaYFa7lB4iphsijfoFys.roa (raw, json)
Hash identifier: RKLO7q6KAYliDTDdNtAJNK+/y1ts0xyHK9TIEFntzHM=
Subject key identifier: 9D:8F:16:1B:02:DA:69:81:5A:EE:50:78:8A:98:6C:8A:37:E8:17:2B
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 03E8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nY8WGwLaaYFa7lB4iphsijfoFys.roa
Signing time: Wed 18 Dec 2024 02:16:34 +0000
ROA not before: Wed 18 Dec 2024 02:16:34 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 119.107.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000 (0x3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:16:34 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=9D8F161B02DA69815AEE50788A986C8A37E8172B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:19:b3:38:db:27:d0:cf:f8:96:b2:53:f1:61:
ba:1b:b6:2a:38:74:ee:63:d6:dc:ea:6c:4c:d6:85:
17:bb:60:6e:b7:0b:4e:f7:f2:bd:76:47:13:6c:a3:
92:88:b6:cd:7b:6f:3c:3a:c2:d2:35:d7:89:1d:72:
96:f6:10:18:48:d5:06:6e:a8:25:73:e8:a9:e9:7d:
a7:a0:03:e8:64:3b:e7:89:86:25:bb:27:9d:c4:b9:
7e:0d:95:d3:5a:87:ef:29:20:09:33:68:3b:34:70:
b7:7f:3d:6d:42:c5:13:2c:2d:36:26:8c:96:30:e0:
35:27:79:53:db:3b:d7:37:2e:cc:53:2b:53:c5:8f:
9f:ba:b8:5a:61:65:3d:52:be:0b:e3:20:c8:33:8a:
b7:ea:1d:5a:47:a3:7d:ac:a4:8e:b2:b2:e9:e8:24:
ad:92:46:51:43:ae:98:1b:18:a3:61:99:20:99:2b:
6e:ed:b1:eb:cd:60:2f:1e:c3:38:a5:2b:8c:b7:c9:
57:99:5e:14:bc:8b:41:0c:6a:a4:dc:91:6c:5b:8f:
96:ea:a7:ce:c6:3c:47:48:64:6f:9a:92:dd:af:2b:
d8:73:95:7b:3d:2c:cf:86:0f:a9:76:58:89:04:ef:
5c:e8:9f:e6:18:6a:71:af:8a:69:ad:86:08:df:10:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8F:16:1B:02:DA:69:81:5A:EE:50:78:8A:98:6C:8A:37:E8:17:2B
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nY8WGwLaaYFa7lB4iphsijfoFys.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.107.128.0/18
Signature Algorithm: sha256WithRSAEncryption
78:71:51:b6:00:80:7b:07:08:65:33:e1:06:46:2d:ea:e9:03:
cb:c8:5a:00:ed:37:81:d5:b5:c3:9f:62:d1:3f:c8:aa:48:ff:
c2:83:b0:f1:33:3c:e4:4f:10:48:de:cc:46:ed:18:03:d5:d2:
28:30:14:2f:7d:bb:16:b6:e7:42:6e:0e:ea:f1:ac:9c:3a:e5:
fe:77:b7:87:7e:b5:33:b3:96:ef:b4:1e:5d:b2:4a:e5:82:2a:
11:25:a5:f8:e8:59:db:03:8c:5a:24:5a:d3:07:58:6b:fa:f0:
78:6c:d5:04:b5:14:f7:15:95:f8:30:c8:e9:e0:ae:b7:31:86:
17:b7:1e:8a:39:82:97:4c:17:7c:0d:1f:85:32:4a:e2:4d:09:
1f:66:39:42:02:d7:52:6e:85:3e:0e:5c:f6:a1:c7:4a:b3:c5:
97:8f:30:65:84:92:d4:2e:b3:98:75:35:36:6b:7d:4d:8a:24:
2f:3b:ec:d4:fb:a7:f5:f0:a5:32:fa:06:92:ae:08:a0:cc:b5:
83:5e:5e:14:b2:31:55:43:66:2f:a2:ce:72:64:ae:01:92:cd:
aa:16:6c:28:66:e4:e5:f3:a2:da:8b:d2:ad:e0:35:6d:5d:c1:
2a:b3:0a:d5:d4:ff:3a:9b:59:44:3f:8c:e8:97:90:51:83:55:
8f:6d:6a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:27:51 2025 by rpki-client