Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/6LKAS8tOVJT9gnNq8Jsm_f3Ls4c.roa
File: 6LKAS8tOVJT9gnNq8Jsm_f3Ls4c.roa (raw, json)
Hash identifier: rsJTsQ2zR4MCD6f668PvkN5qEG/QJFD5Weo/d4qzL6Y=
Subject key identifier: E8:B2:80:4B:CB:4E:54:94:FD:82:73:6A:F0:9B:26:FD:FD:CB:B3:87
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 0150
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/6LKAS8tOVJT9gnNq8Jsm_f3Ls4c.roa
Signing time: Thu 31 Oct 2024 01:30:48 +0000
ROA not before: Thu 31 Oct 2024 01:30:48 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 2527
IP address blocks: 210.250.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Oct 31 01:30:48 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=E8B2804BCB4E5494FD82736AF09B26FDFDCBB387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:77:69:1d:e2:e3:58:15:11:bd:61:fc:f0:
bd:2c:ac:31:d2:0e:f2:cf:81:22:72:a5:8d:8e:fd:
2b:e9:f4:a5:30:25:18:0b:e0:e8:c1:9b:b7:1a:ba:
2e:8c:ca:d7:4a:ed:74:f4:45:70:ec:80:1a:e7:da:
e0:e9:00:96:1e:8c:b8:d6:ca:10:db:a6:f1:54:2a:
2c:85:fa:72:73:5a:a8:34:7c:0b:02:fe:12:58:8a:
ae:bd:e0:8c:af:d7:9b:0f:d0:fa:0e:4d:6e:56:64:
84:66:e9:ed:51:d3:75:cd:cc:f0:57:51:41:d9:52:
f9:31:60:4d:2f:38:8d:ed:bc:75:2c:66:72:9d:52:
af:a7:31:75:96:46:b4:4a:d7:9f:6f:a0:96:a0:b4:
4e:b9:f9:c9:a2:97:17:a9:9f:cd:11:77:72:e9:b8:
1a:04:be:70:2d:70:60:92:89:80:c8:0c:88:73:88:
35:ce:3c:3b:28:01:ea:5b:e1:86:0f:85:99:19:f7:
03:e2:bc:fc:9d:a0:f5:1d:1d:67:3b:3f:8c:df:38:
c2:8d:6e:77:ad:8c:18:d2:1e:67:bb:60:1e:38:2a:
53:7c:a1:11:94:cb:3f:6b:10:ea:0c:e6:38:ad:44:
27:b7:a3:32:5e:93:bd:df:a8:5c:8f:c8:16:9d:88:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B2:80:4B:CB:4E:54:94:FD:82:73:6A:F0:9B:26:FD:FD:CB:B3:87
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/6LKAS8tOVJT9gnNq8Jsm_f3Ls4c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
81:58:ed:c5:13:18:b3:36:be:06:70:bc:27:75:4f:ff:1d:e1:
da:a8:a1:6d:27:2a:83:bb:f7:24:f7:eb:e5:c1:52:36:ee:18:
a5:21:d4:e8:30:1b:17:68:7d:b0:af:23:0b:1e:47:01:63:b0:
49:33:a9:ff:18:41:eb:44:65:29:d6:af:7e:d1:0b:fc:e1:46:
31:d5:ca:ba:2f:17:31:b6:5b:81:70:50:b4:f1:81:21:d2:50:
0d:3b:0b:14:0c:d0:70:83:27:8d:1f:4e:f4:38:ea:67:ce:4c:
37:10:66:d8:7c:62:43:54:86:da:05:17:d5:2d:6d:37:54:e4:
48:68:38:61:d3:ee:7e:f6:3c:ae:3b:b7:09:53:64:45:00:34:
ed:6b:44:2c:6b:d3:49:8b:53:d3:1e:00:d6:ef:7c:9d:3b:b6:
4b:ec:3f:41:6f:e5:89:06:39:bb:fc:7a:1a:a6:38:bf:55:30:
77:97:f1:2e:70:bb:1a:d7:d6:2f:f2:07:e3:cd:14:6c:14:44:
99:98:9d:2b:a9:4a:53:7f:3a:d0:56:94:a3:32:c0:92:54:04:
93:7a:ea:00:22:61:8d:6a:2f:fc:12:c7:32:7a:e3:b0:0c:b6:
b0:e4:b5:95:40:09:10:14:3c:b8:90:56:d0:51:1c:15:29:01:
8c:63:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:33:45 2025 by rpki-client