Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/u64nlAD1LQMzmM4bLCNMCRQt3jU.roa
File: u64nlAD1LQMzmM4bLCNMCRQt3jU.roa (raw, json)
Hash identifier: g5gYZUwzLh2l6TpntRdEvOBXBeTptO+yP8RAmQDo8NM=
Subject key identifier: BB:AE:27:94:00:F5:2D:03:33:98:CE:1B:2C:23:4C:09:14:2D:DE:35
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04E6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/u64nlAD1LQMzmM4bLCNMCRQt3jU.roa
Signing time: Wed 18 Dec 2024 02:37:07 +0000
ROA not before: Wed 18 Dec 2024 02:37:07 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.7.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:37:07 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=BBAE279400F52D033398CE1B2C234C09142DDE35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:49:8b:49:32:70:be:38:97:a6:65:9a:1e:bb:
72:12:8d:80:51:04:a1:d9:3d:2a:06:01:2c:2a:6c:
97:bf:8c:21:ae:94:04:c2:d3:86:2b:e7:75:0b:bc:
57:da:04:f3:9a:f8:ae:1c:f5:6d:6d:2a:2c:c8:7e:
46:3d:f6:0c:78:62:a1:16:cf:98:04:b2:cd:18:8f:
7a:14:01:f3:72:2f:84:32:31:41:0f:0c:b3:a0:48:
c6:07:04:77:53:79:6f:77:d2:b5:93:52:26:54:a8:
fd:ea:85:80:56:87:b2:e8:25:a7:6e:05:a8:bd:0e:
52:e3:7b:bd:0a:fc:9b:d1:e7:04:db:5c:37:3e:3f:
10:e4:69:6f:20:31:d1:f3:11:81:e4:41:b1:2e:47:
67:29:3c:64:86:e8:bf:24:56:30:21:b0:eb:b6:93:
f4:c1:3f:a5:cc:fb:22:1f:41:77:7c:08:7b:cb:7e:
c5:9a:76:24:b4:eb:3d:7e:ae:18:90:be:bd:d7:35:
d5:00:06:62:1b:50:f6:31:40:50:f8:e4:da:f6:f6:
62:80:53:b7:ac:08:d6:11:3d:85:50:e2:a1:b6:ea:
77:ca:f8:69:49:40:c3:89:51:58:46:e4:5c:f1:d6:
1c:38:42:cc:ed:21:0d:b3:01:8c:a4:a2:58:19:1f:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:27:94:00:F5:2D:03:33:98:CE:1B:2C:23:4C:09:14:2D:DE:35
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/u64nlAD1LQMzmM4bLCNMCRQt3jU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.7.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:61:c6:4a:a7:63:cc:3d:16:f5:d9:f2:dd:e3:33:d3:06:cc:
1c:15:78:f6:89:f8:68:f1:b9:67:ac:76:c3:34:d3:1e:46:96:
03:c2:14:49:e1:69:77:eb:4c:d0:fb:c0:68:53:36:e1:2e:2c:
55:1a:ec:75:b2:30:e7:f7:23:65:7c:b0:d2:c6:b5:a2:3a:7f:
92:8c:ba:c7:e9:da:1c:59:af:c3:58:2c:cd:33:1c:2c:75:7d:
76:f0:6a:42:69:10:e2:db:38:4d:85:2e:92:fd:c3:33:7b:ee:
3c:38:64:94:84:88:60:70:a2:1a:f7:7b:0c:08:b5:19:e3:5a:
c2:72:5f:28:44:6c:a2:95:39:42:7c:9a:db:66:b9:04:fc:65:
15:13:cd:9e:f0:74:a7:d6:e1:7d:c4:43:5a:fb:5d:bc:ea:a2:
72:4a:89:57:88:d9:75:89:e2:2f:6a:bc:2c:dd:90:9f:c4:f0:
62:f1:bc:d6:2c:9a:a1:24:f8:c1:e4:75:cc:4a:b2:32:fd:25:
27:03:01:9f:e1:e0:79:32:9a:7f:b9:33:d7:ef:f4:17:5f:50:
bf:9a:e6:31:32:b4:9f:b2:f6:95:d6:7b:55:fa:b9:06:52:1e:
ea:f6:70:4a:fc:0b:61:51:3d:b8:3d:49:70:8c:67:83:55:6f:
08:bc:43:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:37:01 2025 by rpki-client