Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KWMLT-y-FPFcThZmw13kO32QtfQ.roa
File: KWMLT-y-FPFcThZmw13kO32QtfQ.roa (raw, json)
Hash identifier: VydMup2objEABhiI0J/ivZTZ3mXZ2UAeTuH0fpQukRw=
Subject key identifier: 29:63:0B:4F:EC:BE:14:F1:5C:4E:16:66:C3:5D:E4:3B:7D:90:B5:F4
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 8D
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KWMLT-y-FPFcThZmw13kO32QtfQ.roa
Signing time: Tue 03 Dec 2024 17:44:24 +0000
ROA not before: Tue 03 Dec 2024 17:44:24 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 2914
IP address blocks: 61.120.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 3 17:44:24 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=29630B4FECBE14F15C4E1666C35DE43B7D90B5F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:cd:c2:b9:0d:0a:26:fa:df:cf:22:47:a6:
d0:90:5c:34:c6:b8:a9:fe:a8:d3:9d:92:90:03:ee:
73:fb:cf:81:8f:0c:ca:66:17:9f:a5:2e:01:38:76:
3a:38:94:63:1e:50:de:c6:d3:cc:2f:57:7d:16:16:
59:27:cf:63:dd:e9:8b:b7:54:89:4f:8c:4e:31:19:
e3:7b:ab:76:3e:38:7c:d1:9d:7d:9c:ad:ac:64:ab:
76:0d:a8:ad:cd:ab:d4:32:03:d5:06:e2:81:b9:d8:
b8:a6:5b:5e:f0:5e:d0:85:09:60:5b:94:b1:a2:43:
d6:12:d0:d0:9a:b5:0e:61:3e:14:49:19:d6:79:3d:
47:3f:67:5a:b9:c9:e8:29:5d:8d:5e:7a:3f:04:da:
ca:6d:08:c4:ff:b6:b1:ad:1b:55:a5:2a:5b:8a:6d:
06:03:cc:0a:b7:9b:43:5a:e2:ea:ca:20:e6:fe:82:
68:1b:3d:97:be:ee:a1:90:a7:2b:aa:c6:53:6d:78:
b6:36:d4:02:ef:3b:1f:79:60:06:47:0f:e9:01:95:
d2:5b:73:93:6f:81:89:97:4e:1c:9d:07:37:69:04:
ad:29:8a:8c:0c:ed:90:61:8d:1d:ae:31:c4:99:17:
7c:fd:d8:29:3c:30:1c:39:23:41:aa:14:93:8a:c5:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:63:0B:4F:EC:BE:14:F1:5C:4E:16:66:C3:5D:E4:3B:7D:90:B5:F4
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KWMLT-y-FPFcThZmw13kO32QtfQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.120.152.0/21
Signature Algorithm: sha256WithRSAEncryption
16:c5:8c:f1:00:a6:8e:9d:b9:ef:1f:e5:31:91:4b:67:12:1d:
ec:d6:6f:0d:1f:20:2f:8f:64:c9:eb:ca:12:3a:3b:c1:75:68:
ec:33:ac:6a:1a:3c:ed:61:33:40:af:11:28:3b:c5:74:4d:05:
05:a6:bb:3f:ef:3d:f9:52:72:2f:e7:c6:e1:01:fd:fe:3f:07:
bb:42:48:ac:0e:4f:a6:f4:57:bf:a5:fd:64:ea:94:31:0d:73:
8c:af:57:97:e6:3d:1b:a6:0f:bf:d3:fe:8d:9f:77:6c:92:0e:
8f:52:d5:10:56:a4:93:1d:87:63:5f:05:9a:0f:c0:fd:78:c9:
fb:3b:61:ac:9a:91:0a:85:bf:ec:09:df:5a:69:20:86:9f:75:
ca:d8:90:84:3e:84:19:a9:ba:2c:41:d7:2f:40:e8:f3:12:39:
c5:c6:3c:db:32:55:0f:9a:3e:78:5e:5c:c5:f5:b4:57:66:4e:
85:12:be:84:4d:5c:15:56:7a:fb:e8:64:48:61:1c:1a:f4:c4:
2f:f3:45:62:d3:69:99:5d:2e:3f:8b:1c:f4:c6:ba:11:66:81:
c2:82:e9:a2:bf:62:43:3e:f5:fc:89:e9:a1:88:0c:f7:e1:7b:
e1:0e:d9:6a:b0:da:3e:2d:5a:df:68:96:70:ef:37:ba:4e:43:
d4:46:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:38:57 2025 by rpki-client