Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/COFij7dOtPGExTGHsZSyHXaB8Gs.roa
File: COFij7dOtPGExTGHsZSyHXaB8Gs.roa (raw, json)
Hash identifier: tJremUO8WIlvblQuPKfUe4m4LBVRII2FBLSg8zKR9Ww=
Subject key identifier: 08:E1:62:8F:B7:4E:B4:F1:84:C5:31:87:B1:94:B2:1D:76:81:F0:6B
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0557
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/COFij7dOtPGExTGHsZSyHXaB8Gs.roa
Signing time: Fri 31 Jan 2025 01:36:12 +0000
ROA not before: Fri 31 Jan 2025 01:36:12 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 42.124.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1367 (0x557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:36:12 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=08E1628FB74EB4F184C53187B194B21D7681F06B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:77:04:58:ff:7e:9d:02:ca:0b:ab:f0:5c:
f8:fc:71:19:31:72:e4:e2:22:41:0a:83:97:bc:d3:
85:0e:46:64:c1:74:92:64:89:12:98:5c:1d:88:1d:
07:54:34:f8:7d:6e:27:97:0d:b8:2a:6c:a2:48:9a:
0e:1e:06:74:fd:2b:4b:45:48:57:dd:8c:30:23:4a:
96:57:0e:98:47:1d:53:54:22:c3:c9:00:79:d1:6d:
ab:fc:92:4d:d4:db:bd:7c:6f:2b:08:b5:96:3c:d8:
56:6d:35:4f:1d:38:b5:68:6b:f3:42:21:2d:67:88:
cf:95:60:09:1d:fa:75:69:a0:bd:7b:2b:8d:38:ea:
e2:66:a9:06:7e:7e:1e:b1:09:55:cd:1c:fb:93:e0:
74:4b:b3:95:f2:46:60:fd:4e:fd:73:bc:8d:3e:87:
55:98:f8:22:8f:ad:14:78:f1:13:74:9d:b2:1a:db:
a2:a3:e1:89:98:94:a8:2f:ee:a7:91:d1:98:20:28:
cd:00:8d:73:be:1b:c8:6c:aa:37:38:8d:31:9f:ec:
0c:19:a6:5d:4d:23:20:73:94:b8:c0:c0:65:17:1e:
13:21:b1:3a:ed:ec:1e:59:8f:bf:cf:10:8b:a7:ef:
ff:09:ad:92:44:c7:8f:91:ae:af:f3:4d:0d:d1:2c:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E1:62:8F:B7:4E:B4:F1:84:C5:31:87:B1:94:B2:1D:76:81:F0:6B
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/COFij7dOtPGExTGHsZSyHXaB8Gs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.124.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:a0:a9:4c:0b:67:dd:c3:49:b3:52:a0:71:c1:25:cd:9d:d6:
0d:f6:88:c4:9a:43:fb:ee:e6:9e:54:89:33:38:1f:10:4a:fb:
ff:9d:6d:52:de:3a:2f:51:20:94:13:2b:5c:f4:90:51:b6:81:
77:bd:73:7a:92:ff:13:ee:50:95:01:81:d7:78:06:5a:e5:01:
6e:49:b3:9e:48:39:4e:c4:52:1e:4d:82:82:f3:e0:30:15:21:
d3:a2:e3:e7:7d:f1:50:d1:c2:78:c1:ac:ef:22:5a:ba:93:42:
0b:b7:87:96:d8:e1:3a:db:ed:c2:19:c6:08:fa:ab:21:0d:d8:
ab:0f:35:d9:d1:10:1d:97:b0:6a:78:d0:b5:90:81:e2:08:29:
1b:6d:76:a6:66:1e:a8:b7:fe:8f:29:dd:33:bd:8e:7d:b1:24:
b6:09:aa:0c:75:a5:a3:73:64:ff:53:0b:d6:34:35:44:1b:74:
ed:07:80:3b:71:57:fd:13:d1:ec:c9:b4:7d:b0:97:a6:9f:ed:
2d:c1:07:00:fc:48:92:45:b2:ee:b2:8e:b5:af:e9:de:dc:39:
c8:6f:d9:55:42:c4:c9:48:67:6a:1a:ec:67:9b:54:6c:10:68:
86:28:2a:a5:3b:33:43:b7:0a:dd:e3:62:c7:c6:70:9a:8f:ba:
d9:5c:e0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:27:41 2025 by rpki-client