Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/x_Fa0hDzyJiYcsL7inemGsuUNME.roa
File: x_Fa0hDzyJiYcsL7inemGsuUNME.roa (raw, json)
Hash identifier: oQju65NLtb6cXDOlveq+G+cIMmtL1n+dDFjPvNHFO2Y=
Subject key identifier: C7:F1:5A:D2:10:F3:C8:98:98:72:C2:FB:8A:77:A6:1A:CB:94:34:C1
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: AE
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/x_Fa0hDzyJiYcsL7inemGsuUNME.roa
Signing time: Sat 30 Nov 2024 01:31:24 +0000
ROA not before: Sat 30 Nov 2024 01:31:24 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 9351
IP address blocks: 113.20.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Nov 30 01:31:24 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=C7F15AD210F3C8989872C2FB8A77A61ACB9434C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:3d:d8:19:a8:38:76:c6:c1:47:a3:d8:f1:
31:b8:8b:11:6e:2e:ab:94:ca:67:d7:b8:9c:b1:4b:
a2:59:96:04:ce:f6:ac:cc:26:f9:9b:c3:65:39:0e:
75:d0:7f:6b:14:03:5d:37:d3:1e:7f:8d:d6:62:98:
4f:b0:bc:a5:3f:2f:5a:6e:58:9d:ce:74:96:9a:7f:
6b:f1:72:6f:15:e9:18:23:52:e6:b8:75:59:bc:ee:
7d:84:9e:74:d2:6f:23:07:a8:c7:4e:3c:34:cd:bc:
84:d0:15:9f:e8:8d:f6:c8:91:62:fe:35:29:40:5e:
a2:0d:1d:af:5f:e0:0d:9f:4d:e0:ca:2d:08:1e:8f:
ec:a3:93:66:37:8f:2e:69:0f:3c:70:2c:61:51:02:
62:ef:21:74:02:c9:7f:98:7c:40:58:bf:84:8a:79:
03:c5:6a:9a:e0:5e:f2:5d:06:87:5e:7e:bd:f3:68:
58:86:72:dc:a8:89:86:0f:dd:ee:e1:2f:ab:56:89:
1c:02:11:36:4d:16:cc:a9:75:a9:49:44:f8:0f:3c:
63:f4:a8:ac:a4:e2:bd:e6:9a:52:66:34:be:59:62:
bf:c5:77:56:ca:a1:10:01:1c:78:a5:5b:b7:57:d5:
62:8d:4b:36:0f:17:06:ce:b8:2a:f7:57:84:83:f0:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:5A:D2:10:F3:C8:98:98:72:C2:FB:8A:77:A6:1A:CB:94:34:C1
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/x_Fa0hDzyJiYcsL7inemGsuUNME.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.20.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:aa:8f:c6:69:03:14:db:0b:7b:e8:96:1f:4b:26:a1:c9:3f:
c5:d2:be:55:78:23:72:08:a8:88:e5:da:7f:6a:b6:62:59:63:
d8:19:a4:55:21:14:3b:8c:b9:33:01:93:ac:8f:d0:e4:1c:96:
d1:93:01:45:73:e4:f5:7f:79:8e:4c:4b:3e:bf:91:21:5d:c8:
8d:94:62:33:d1:8c:00:34:ef:4d:93:8d:54:a6:ac:c2:f3:e0:
93:56:cc:8b:ed:72:79:30:59:21:7b:d0:c2:3e:fb:85:95:34:
b3:11:60:ab:15:5b:f4:68:48:9a:d5:28:8b:d8:dc:58:6a:0a:
cf:e0:12:c4:ab:01:27:cb:45:9a:e1:4d:63:f0:69:ad:39:93:
e8:44:7c:ca:fd:ce:a9:99:c4:6b:fa:a7:98:a6:5c:ca:f9:0b:
8e:0c:25:70:f9:7e:f9:3c:47:25:3b:80:04:f9:d4:34:19:50:
fa:5d:2d:9d:ea:67:51:0f:3d:d7:69:cc:e4:6c:72:8d:b1:04:
dd:09:9e:f7:d9:40:a3:16:15:12:ef:f6:84:4c:d8:18:8f:5a:
0c:ee:54:65:52:ee:95:f4:be:7f:1b:58:2c:42:65:f5:ce:ec:
81:3e:a9:c3:1e:e8:94:bd:a5:27:45:20:3c:a5:90:55:ac:ba:
c1:73:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:38 2025 by rpki-client