Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TcEbg7IYynd13ATaPENysYT-HO8.roa
File: TcEbg7IYynd13ATaPENysYT-HO8.roa (raw, json)
Hash identifier: ZY1xyBY8xh/OYyXMjpgtJ3GTMfCnF+3+qN8aDYlXCPk=
Subject key identifier: 4D:C1:1B:83:B2:18:CA:77:75:DC:04:DA:3C:43:72:B1:84:FE:1C:EF
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 02EB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TcEbg7IYynd13ATaPENysYT-HO8.roa
Signing time: Fri 11 Oct 2024 01:16:46 +0000
ROA not before: Fri 11 Oct 2024 01:16:46 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 10013
IP address blocks: 36.52.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747 (0x2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 11 01:16:46 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=4DC11B83B218CA7775DC04DA3C4372B184FE1CEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:95:1f:a7:07:02:2a:62:2f:67:ee:a0:81:
3b:aa:0d:13:d1:2d:f0:dd:0d:74:58:c3:20:23:1a:
e5:a3:6f:e6:e2:9a:17:e4:d0:b9:86:57:19:64:48:
c5:50:2e:aa:cc:12:79:ec:5d:20:e3:91:05:58:96:
f3:87:e1:e7:73:5d:92:ca:38:fe:54:66:c5:1d:46:
6c:70:a7:bb:95:2c:27:55:9a:b6:e3:39:91:9d:83:
62:d4:7e:62:b8:cc:19:e5:19:02:a3:63:7f:07:16:
da:a0:d2:a0:f0:13:d8:57:b6:8b:5d:9c:b5:72:a0:
b3:0e:08:9e:03:4a:df:fc:cb:5e:03:63:ad:e7:d1:
5c:10:71:2e:ff:70:cb:c8:af:68:7b:2f:7d:89:57:
a3:21:1f:12:e1:2b:d4:ff:27:60:e9:c4:be:18:c8:
7a:d9:a7:46:ba:24:d5:47:d7:97:bb:90:8c:32:64:
6f:a4:3b:be:af:c4:05:1f:7b:b2:eb:b9:bd:1d:ad:
92:de:fc:70:7d:1e:d6:2a:48:ac:aa:80:ea:04:d5:
9b:7d:d1:43:b2:dd:64:93:cf:99:b0:0c:d3:f9:81:
80:c6:b1:4d:c5:65:85:54:ac:bb:7f:4f:0b:52:af:
eb:b4:af:f9:0c:58:29:f5:ed:d7:c3:06:ff:53:fa:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C1:1B:83:B2:18:CA:77:75:DC:04:DA:3C:43:72:B1:84:FE:1C:EF
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TcEbg7IYynd13ATaPENysYT-HO8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.52.174.0/23
Signature Algorithm: sha256WithRSAEncryption
87:fa:c2:82:46:70:cc:5c:d6:bb:be:48:e6:e6:af:2c:3c:0c:
fe:dc:7d:8e:29:25:b7:3a:97:5f:b6:77:8d:a2:37:7f:2d:48:
8e:9a:f7:26:c2:6a:cf:af:2e:a0:ab:e6:49:dd:50:c6:69:28:
2a:b3:b4:24:f5:7e:ba:e1:eb:90:e2:6c:ad:fa:66:82:20:2f:
fd:d6:83:02:76:96:8b:32:fb:a1:a3:8f:66:64:2e:1e:3d:ed:
d0:e3:cc:88:bb:ef:93:f9:72:b2:0a:80:89:79:6d:49:a7:84:
95:8a:a2:b7:d7:a1:94:69:d4:f6:d2:3d:7a:e3:ea:ad:f7:9b:
7f:d1:6f:04:b0:c7:6a:43:a6:e3:80:86:c8:3b:6e:8e:21:12:
9b:3a:65:12:6e:8f:ec:e5:c4:90:c4:bf:ec:19:cd:75:c1:30:
08:d7:3d:65:6c:b4:d0:21:e4:be:11:57:76:74:2a:1c:10:bc:
f8:45:7d:9d:33:0f:1b:10:99:a1:fe:15:63:64:2d:84:58:f1:
70:58:2f:98:e6:e2:58:06:7c:9c:1f:05:87:0f:0d:be:5f:3c:
83:58:c3:bb:b7:93:4f:34:41:99:10:19:e2:31:8c:78:6c:a2:
a9:fe:f4:69:3b:f8:1c:50:f9:ea:5e:03:7e:22:8f:b5:3f:e1:
79:d4:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:17:30 2025 by rpki-client