Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/IIvGSTQTes9DVaG4pIoi07lQOjs.roa
File: IIvGSTQTes9DVaG4pIoi07lQOjs.roa (raw, json)
Hash identifier: pQGIaMkUuBEYlkjbC34N0bEZ8N1fqTAjjV0lAERJHmU=
Subject key identifier: 20:8B:C6:49:34:13:7A:CF:43:55:A1:B8:A4:8A:22:D3:B9:50:3A:3B
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 91
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/IIvGSTQTes9DVaG4pIoi07lQOjs.roa
Signing time: Tue 03 Dec 2024 17:56:26 +0000
ROA not before: Tue 03 Dec 2024 17:56:26 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 2914
IP address blocks: 61.200.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 14:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 3 17:56:26 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=208BC64934137ACF4355A1B8A48A22D3B9503A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:79:f6:af:73:f5:57:1d:41:cd:8d:e7:b6:
e1:06:3e:17:dc:f2:16:ad:e8:28:18:40:9a:3b:43:
08:56:19:fa:0c:83:01:ca:9e:06:64:55:44:c7:fb:
03:13:8c:71:3b:47:05:54:20:20:d2:cc:1b:f3:36:
85:3a:3c:5b:ad:11:3d:8e:5a:c2:22:1a:3a:1b:85:
b8:cd:52:dd:89:e3:32:73:0c:44:2b:e8:91:e3:e6:
43:42:35:95:5c:dd:32:e1:3c:3e:81:f7:f5:2c:0f:
d5:c0:82:22:15:3d:5b:d4:74:b6:c5:cf:75:5c:45:
02:bc:80:8f:17:4c:6d:5e:28:dd:47:25:43:08:30:
74:5e:80:83:43:ab:c1:b4:da:9c:a5:00:48:53:b9:
3c:bd:65:7d:0d:84:0a:6d:8a:99:74:8d:7f:a7:27:
2a:93:bc:2b:84:b7:47:bf:b0:f7:ca:83:59:b3:74:
62:c2:32:06:99:52:54:85:79:9c:d9:6e:c9:31:15:
a3:3a:cf:83:e9:2a:97:7a:11:c5:d6:0f:a5:ea:e1:
11:1e:32:f8:90:66:7d:56:8b:74:2f:63:0d:71:e5:
30:7b:43:58:69:85:b0:ba:37:f4:b8:3e:ae:80:50:
dd:d8:68:f2:fb:a7:ba:07:b3:97:d3:21:d0:1a:2c:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8B:C6:49:34:13:7A:CF:43:55:A1:B8:A4:8A:22:D3:B9:50:3A:3B
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/IIvGSTQTes9DVaG4pIoi07lQOjs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.200.80.0/20
Signature Algorithm: sha256WithRSAEncryption
53:0d:21:98:bd:cc:5d:b7:80:76:7d:fc:1e:cc:d0:60:9b:13:
52:36:5b:8f:46:7b:63:82:e3:11:1d:fd:31:2c:16:5d:1d:0e:
80:fc:3d:20:3f:04:fd:de:f2:28:a0:0d:78:74:5d:29:2f:37:
1a:1e:5b:9b:cf:77:78:c8:17:5c:5f:7a:c4:7b:47:05:55:25:
8a:c5:b7:4a:49:f7:c3:20:b8:47:ba:54:40:3a:46:c8:1e:03:
54:12:41:e6:71:8c:56:16:8c:26:7d:99:57:26:74:74:05:ea:
72:28:d3:a0:3c:ca:cf:b4:6a:8c:46:d8:be:6b:15:0a:f3:ba:
4b:39:df:78:bb:cb:66:96:96:16:55:95:42:8d:e1:7e:60:2b:
a1:b0:66:a1:10:dd:0c:16:d0:74:bd:33:21:45:da:81:1b:fc:
8a:05:53:70:09:5f:55:b6:36:db:19:80:86:0f:fb:44:c4:f1:
24:c3:70:8a:ed:3f:ab:c8:90:6b:ea:08:9a:cf:9d:e7:05:ed:
6f:e6:be:ff:14:59:c8:fd:e9:6f:bc:94:c9:c8:50:25:50:d0:
85:d3:c0:39:3c:b3:7c:3d:79:09:80:ed:fd:69:9f:84:e7:aa:
1e:a6:95:cf:10:ea:9a:e4:e7:ff:54:b0:e4:68:41:e0:95:30:
ae:f4:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:56:32 2025 by rpki-client