Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/wuPUPc9hhM1QkyDiHngmqb27XaI.roa
File: wuPUPc9hhM1QkyDiHngmqb27XaI.roa (raw, json)
Hash identifier: Bb3x/A1SokMora76iJI8N7DdOa5CurIuKVzGuPNx7iA=
Subject key identifier: C2:E3:D4:3D:CF:61:84:CD:50:93:20:E2:1E:78:26:A9:BD:BB:5D:A2
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 016C
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wuPUPc9hhM1QkyDiHngmqb27XaI.roa
Signing time: Thu 31 Oct 2024 01:34:22 +0000
ROA not before: Thu 31 Oct 2024 01:34:22 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 2527
IP address blocks: 220.211.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Oct 31 01:34:22 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=C2E3D43DCF6184CD509320E21E7826A9BDBB5DA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:a9:62:90:6c:2f:93:8a:d9:a0:44:46:09:
fd:7c:aa:ba:5c:58:11:fd:d9:2b:09:d2:84:a4:2f:
84:4c:5a:af:de:eb:fa:3b:98:61:17:45:12:d6:76:
54:bd:56:9b:b3:82:88:31:cf:24:3d:ca:25:70:fa:
0c:ee:f8:c0:3b:1a:8a:40:1a:8b:17:d1:9c:68:d1:
34:d8:30:99:78:aa:49:68:bd:bc:d2:b8:58:0f:41:
e6:56:99:0b:71:63:88:ca:5f:9e:95:62:6c:c9:39:
8d:90:60:5e:22:c3:2a:2a:e4:8e:79:92:a4:a6:64:
24:3c:d6:7f:1b:9a:1a:fd:2b:7a:be:84:4f:c6:2d:
cf:ea:2c:fc:a4:65:cd:9d:e4:9e:2f:74:dd:90:c2:
f2:07:72:82:f8:a6:c8:ce:05:6b:2e:57:4d:f4:df:
68:78:79:1b:e3:8a:75:6e:e7:24:a9:3d:2d:3e:4c:
0e:6b:e3:2e:1b:ca:19:61:4a:8e:36:a5:59:0c:ea:
5f:81:ca:71:53:e2:c2:6f:83:02:af:ff:ef:79:bf:
99:ea:45:58:8c:b0:c8:ba:db:a9:4d:44:34:59:22:
8b:c3:c8:54:a2:17:1d:3a:b9:3e:3b:4f:4c:8f:e8:
fb:b5:67:d3:bf:a3:7d:7f:31:80:3d:d3:73:c4:bf:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E3:D4:3D:CF:61:84:CD:50:93:20:E2:1E:78:26:A9:BD:BB:5D:A2
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wuPUPc9hhM1QkyDiHngmqb27XaI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.211.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:b6:60:b9:0b:b2:93:b3:80:68:19:86:29:85:42:b7:e0:24:
9e:16:fd:4c:0b:f9:a1:4b:e1:d9:6f:de:39:4b:53:cb:67:b8:
10:bb:6a:5b:52:7e:77:aa:4e:e2:b8:54:7b:15:e1:1e:9e:de:
15:bb:11:67:c5:82:65:86:8c:ec:ab:5a:37:d3:f2:9e:9e:fc:
fe:d5:89:d2:c7:c5:14:92:a3:dd:b5:c8:ef:b0:ec:47:a7:2d:
e2:5e:56:15:b0:70:fe:60:75:06:e4:eb:b6:a1:b2:f5:3d:b3:
58:bb:36:09:12:bc:74:1e:10:c2:db:d7:71:2d:91:f8:38:a2:
68:ec:2f:ca:b1:cd:87:26:13:a6:23:c0:8e:37:3e:98:6a:cf:
e5:b1:21:13:4a:7a:7e:16:d2:87:9e:7e:8c:40:88:04:b5:cb:
38:db:b3:fc:27:b8:60:b5:c3:8a:8c:a8:fe:de:4b:d8:4b:3d:
09:28:39:dc:f3:0d:96:c0:0e:31:d0:3b:cb:47:37:f1:95:22:
10:7a:ff:d9:bf:df:15:01:50:a0:7c:15:15:9e:86:19:8e:37:
67:da:f1:18:28:9d:b5:32:f6:08:57:50:56:ac:6f:80:03:53:
56:2c:86:e7:1b:55:a8:25:b7:3f:b0:1d:f2:31:fb:21:52:e4:
98:47:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:35:08 2025 by rpki-client