Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20252/P0F-ckXxBE3CebHxI3EQhfXGVdc.roa
File: P0F-ckXxBE3CebHxI3EQhfXGVdc.roa (raw, json)
Hash identifier: LC9xjF7IZHi/dvHNstdhrypDnCfBR2i3nPQ1quLP0CE=
Subject key identifier: 3F:41:7E:72:45:F1:04:4D:C2:79:B1:F1:23:71:10:85:F5:C6:55:D7
Certificate issuer: /CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Certificate serial: 1C
Authority key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/P0F-ckXxBE3CebHxI3EQhfXGVdc.roa
Signing time: Tue 01 Apr 2025 01:31:12 +0000
ROA not before: Tue 01 Apr 2025 01:31:12 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 151350
IP address blocks: 157.15.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Validity
Not Before: Apr 1 01:31:12 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=3F417E7245F1044DC279B1F123711085F5C655D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:80:b5:d8:bb:4c:e8:1f:e9:46:82:86:ea:ef:
89:0d:de:21:e9:37:0b:85:6a:36:55:8a:61:54:26:
e1:21:59:6d:49:95:38:1e:c5:84:b4:2a:4b:93:62:
ce:66:33:b6:8c:de:93:3c:32:fe:b4:72:02:fd:25:
9b:9e:13:01:9b:51:11:56:30:b1:73:74:ed:8b:7e:
04:3b:e2:44:32:a6:5f:b2:9b:df:97:ef:23:87:f0:
13:b8:b3:4d:4c:d5:07:d9:b9:55:b4:fb:a9:72:d0:
c2:49:f5:62:b3:ff:10:c4:99:b0:f8:93:c5:a6:43:
a8:6a:54:26:21:19:f3:c8:be:e1:b0:16:79:d5:52:
0b:9c:ae:2c:b0:9d:5d:cf:0b:c6:23:31:52:d3:c4:
1f:da:04:e0:ea:ce:75:db:74:dd:a9:95:8c:e4:25:
d2:c8:6a:95:db:5f:5b:a4:60:ef:52:ae:4b:7a:c3:
8f:31:51:e4:73:3f:de:16:cd:96:9f:fa:ea:1e:87:
48:4f:5b:61:83:92:f5:c0:25:87:84:fe:8d:6c:9a:
3a:8b:d1:9f:f3:56:61:55:21:ef:61:e8:5a:d9:a9:
77:fd:e0:65:be:d7:1d:60:c9:53:46:0d:d3:26:27:
73:ac:02:01:a0:82:1c:67:23:d1:4b:34:65:ad:1c:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:7E:72:45:F1:04:4D:C2:79:B1:F1:23:71:10:85:F5:C6:55:D7
X509v3 Authority Key Identifier:
keyid:46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/P0F-ckXxBE3CebHxI3EQhfXGVdc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d5:89:5e:48:e6:bf:62:bb:23:68:14:63:a2:72:be:2b:b3:
4e:76:e9:57:1a:9a:91:d1:4e:ad:f5:cc:df:35:8b:02:65:ac:
47:5c:b7:18:86:91:7d:af:19:93:3b:dd:48:3f:1d:d7:00:75:
dd:cf:1c:e8:76:de:09:a6:6f:ea:4c:c7:af:4d:17:7e:30:10:
2c:d5:c1:b8:92:db:f8:e8:33:36:f2:91:35:24:d3:0d:c8:78:
cf:5c:be:84:2e:f7:7e:77:3a:1c:5d:27:74:eb:de:73:da:6b:
b7:4d:11:46:00:18:14:51:dc:cb:c0:70:4f:f0:ba:4d:40:37:
1d:c1:95:47:79:62:e5:6e:a3:36:1e:17:c2:1e:51:29:da:00:
b6:54:8b:e4:2e:f4:1d:f1:8c:47:d4:94:96:d4:a2:b5:33:4f:
09:5f:20:fe:d8:e2:5b:92:ac:00:f9:78:9d:c9:d2:71:a9:2d:
82:cf:eb:2b:18:24:1a:12:0a:05:a3:b7:50:d1:00:15:c9:c6:
07:35:37:28:b4:4c:dc:4d:ef:fb:d9:be:a8:6a:b1:12:bc:b8:
33:a4:d6:a7:15:66:0d:a9:78:37:bb:74:10:ef:31:97:74:61:
97:d1:0a:d2:4c:db:cf:5f:54:34:83:9c:8f:fc:15:07:b6:3f:
24:b3:b2:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 09:54:41 2025 by rpki-client