Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/K2dj9TpX9RyLNdtqZmTdDbj_qz4.roa
File: K2dj9TpX9RyLNdtqZmTdDbj_qz4.roa (raw, json)
Hash identifier: yrtO12nmrP7PVYsxSaO8YsPM7KUKD2Au8wYCn66lQmI=
Subject key identifier: 2B:67:63:F5:3A:57:F5:1C:8B:35:DB:6A:66:64:DD:0D:B8:FF:AB:3E
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: 64
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/K2dj9TpX9RyLNdtqZmTdDbj_qz4.roa
Signing time: Mon 01 Jul 2024 06:19:30 +0000
ROA not before: Mon 01 Jul 2024 06:19:30 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 38631
IP address blocks: 203.104.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Jul 1 06:19:30 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=2B6763F53A57F51C8B35DB6A6664DD0DB8FFAB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:35:48:64:d4:50:48:61:2d:a7:ac:88:1b:
14:1a:58:e7:44:3f:e1:1b:00:b6:66:dd:8f:e5:ae:
ef:74:38:7c:64:c9:37:f9:a9:08:1b:5f:9f:87:21:
0f:7d:fa:d5:cc:ed:27:f3:55:17:92:19:d6:71:18:
f5:68:c5:e2:ef:24:bb:6c:b6:4c:bc:db:b3:10:51:
a4:40:be:02:6b:c1:5c:55:ba:45:58:b8:c2:6a:c3:
bd:e7:8a:40:10:1b:d2:86:77:04:2a:47:96:73:4c:
62:40:d3:d1:f8:c9:9d:94:52:76:93:88:30:2f:75:
d7:bc:90:58:36:70:30:60:f3:83:e6:cc:0b:f1:0d:
68:85:93:a6:72:2f:a9:b4:5c:c6:53:89:33:ad:23:
4a:84:a5:c6:9a:45:97:2a:19:bc:0b:fb:bf:f1:c4:
01:fe:3c:2a:7d:72:25:f5:01:f9:22:1a:60:11:58:
a3:24:d5:09:e7:bc:6e:49:99:3b:8d:79:d9:e2:4d:
aa:3c:b9:86:d6:c7:cf:33:e7:e9:1e:3d:1a:98:28:
fe:2c:95:b5:86:9d:c5:cb:81:70:4c:b7:52:04:50:
c0:05:31:1d:fa:bb:71:ba:e8:a4:84:a7:7b:28:c6:
7c:09:fc:49:e0:04:10:6c:52:87:98:89:32:29:8b:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:63:F5:3A:57:F5:1C:8B:35:DB:6A:66:64:DD:0D:B8:FF:AB:3E
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/K2dj9TpX9RyLNdtqZmTdDbj_qz4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e0:0a:be:13:3d:73:c8:68:d6:c0:59:d5:b9:3d:76:4b:7f:
85:05:ca:5b:0e:29:ec:c7:45:68:71:59:1f:33:b0:01:d9:9b:
40:30:06:f4:50:21:1e:5d:a9:ca:7e:29:11:e9:f5:84:49:95:
8c:df:33:b9:19:e5:b1:15:39:b0:35:fc:f3:7f:39:90:6d:c1:
6c:24:d9:7d:bf:32:f3:63:33:24:48:27:1c:09:9d:b4:9a:08:
39:48:79:2e:a1:51:b1:dc:57:b2:92:7c:12:82:30:87:f0:16:
76:63:ec:01:b6:fa:b5:bd:5e:f1:1a:4a:cb:66:08:d8:8f:6c:
87:b4:3f:de:3e:83:a1:4c:3a:6e:36:7e:82:21:ee:45:a9:53:
ef:fd:42:8b:1e:97:e0:54:52:88:78:09:b1:77:f1:00:28:a9:
02:16:ae:8a:b9:29:b5:7d:c5:33:9f:37:7a:82:b6:85:ae:ce:
4b:06:a2:1d:5c:a9:83:d5:ca:2c:6d:2a:f5:f9:25:8a:b9:68:
f3:62:21:c2:7a:d9:38:b4:96:92:74:2c:47:f2:c3:c8:f4:9c:
09:25:a8:ad:4a:69:73:53:33:cd:d0:b2:18:45:a1:be:c6:ad:
59:b4:75:99:a3:c5:4e:d2:2a:c7:76:9d:6c:24:0b:cb:06:1b:
e3:28:ff:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 10:29:27 2025 by rpki-client