Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/T-giy6W7lmF2Jem2Aa5-tb6ehUE.roa
File: T-giy6W7lmF2Jem2Aa5-tb6ehUE.roa (raw, json)
Hash identifier: FP/bDT4oxpX9/G4ZevlLdy6imn2Z3QTg0JUjPa0eHI8=
Subject key identifier: 4F:E8:22:CB:A5:BB:96:61:76:25:E9:B6:01:AE:7E:B5:BE:9E:85:41
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: B8
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/T-giy6W7lmF2Jem2Aa5-tb6ehUE.roa
Signing time: Thu 05 Dec 2024 16:39:11 +0000
ROA not before: Thu 05 Dec 2024 16:39:11 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 2914
IP address blocks: 203.205.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 5 16:39:11 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=4FE822CBA5BB96617625E9B601AE7EB5BE9E8541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:48:da:53:d0:7e:38:b5:ed:f0:b6:91:43:
88:59:53:c1:8f:5f:2b:3c:f6:19:ca:a9:5c:9e:50:
7b:43:f0:6b:c8:40:fe:bb:26:24:5b:73:1c:e4:dd:
40:44:eb:e7:61:fc:e1:f6:09:0e:40:d5:3e:94:76:
58:15:58:52:ab:96:4e:df:68:aa:18:6d:4a:b3:f5:
a6:82:5b:cb:ba:50:51:23:d3:c5:34:fc:ac:47:25:
6b:72:c8:41:a8:07:e3:a6:33:66:2c:75:a3:6d:64:
4a:0e:c2:4e:db:e7:72:ba:ef:d7:25:f6:17:42:03:
f1:af:6a:58:12:42:83:80:30:bb:88:ac:95:6a:86:
13:61:62:83:1b:47:4c:e8:3c:ae:de:65:e6:9e:a1:
f0:93:29:ad:08:77:90:15:ee:9b:a3:4a:e2:0f:02:
0c:7e:0b:91:b3:ea:24:5c:f0:cf:33:9f:12:65:ef:
75:08:b1:7f:4f:43:04:50:2f:75:65:df:20:95:e7:
c1:0f:6d:3e:19:5e:19:55:ee:cb:2c:ed:5d:db:04:
af:59:f5:1e:6c:94:ba:52:dc:2e:ce:26:60:68:37:
1c:ee:da:74:f6:4d:43:e4:3c:b2:98:51:a0:f9:88:
d5:8f:93:5f:8b:67:47:5b:ed:42:fb:dd:c7:86:45:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:22:CB:A5:BB:96:61:76:25:E9:B6:01:AE:7E:B5:BE:9E:85:41
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/T-giy6W7lmF2Jem2Aa5-tb6ehUE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.205.112.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:c0:fc:94:0d:26:d5:46:f2:5f:b6:3f:f2:31:95:a6:9b:38:
5a:2f:04:4f:5c:d9:03:34:ca:b5:5e:e1:84:ed:59:cf:30:30:
f3:fa:67:59:dd:73:f5:ce:da:36:58:ab:9c:f2:a0:10:3d:5b:
f7:71:b3:7c:02:90:f3:49:3c:b7:b8:4d:ef:b9:08:28:4a:a1:
f6:0c:64:45:0a:13:bf:d3:51:33:45:9a:66:86:36:33:a5:42:
da:b3:85:48:eb:95:0b:64:16:74:5b:ba:6b:64:27:ba:d5:c6:
c1:60:23:d2:69:84:4e:ca:da:1a:77:3d:59:37:c9:9c:d1:96:
93:71:bb:0a:5b:f2:5d:31:35:68:f5:31:cc:94:39:be:a0:6e:
f9:e5:b7:bf:0f:27:c9:70:2c:f0:5b:52:df:3c:26:25:80:dd:
d3:40:1e:33:45:26:6c:3a:42:12:31:fc:9b:10:c0:15:b9:8f:
44:b2:c2:c2:fd:5e:34:bb:bd:95:b5:81:b6:db:21:bd:64:eb:
d8:5c:fc:41:d6:45:48:c7:ac:e3:50:62:27:db:d0:23:3c:b8:
99:a7:12:b7:07:ca:a3:75:1a:2c:29:28:e7:a8:42:09:89:dc:
2a:45:19:fc:58:42:f3:d5:5c:33:7c:b8:eb:f4:44:11:75:35:
f0:5b:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:27:24 2025 by rpki-client