Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/556/P8yPV5p3afiI-t2zcs4ng80HMGQ.roa
File: P8yPV5p3afiI-t2zcs4ng80HMGQ.roa (raw, json)
Hash identifier: sL6CJTbe4qbTWtGox0CuqrRrS9jZaolVqu78RYK5nDc=
Subject key identifier: 3F:CC:8F:57:9A:77:69:F8:88:FA:DD:B3:72:CE:27:83:CD:07:30:64
Certificate issuer: /CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253
Certificate serial: 04
Authority key identifier: 5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/P8yPV5p3afiI-t2zcs4ng80HMGQ.roa
Signing time: Tue 17 Dec 2024 15:43:13 +0000
ROA not before: Tue 17 Dec 2024 15:43:13 +0000
ROA not after: Wed 17 Dec 2025 04:31:27 +0000
asID: 58648
IP address blocks: 103.30.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253
Validity
Not Before: Dec 17 15:43:13 2024 GMT
Not After : Dec 17 04:31:27 2025 GMT
Subject: CN=3FCC8F579A7769F888FADDB372CE2783CD073064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:63:02:e5:3d:3b:69:fc:a2:08:63:c6:e1:
31:67:ce:2c:c6:fd:47:62:1d:f8:be:10:7c:fc:95:
3d:95:ce:d8:d8:44:40:20:76:ec:35:65:9c:73:d8:
da:1d:15:a5:08:a3:f2:b0:60:94:3b:e6:7d:5e:27:
e5:54:66:d7:b5:26:3f:bf:ad:a9:08:29:8c:dc:3d:
47:b8:4d:df:96:72:21:6f:ab:d8:d5:dc:f8:52:47:
65:77:13:ff:2d:48:03:28:de:2e:4f:c7:43:3a:35:
fe:13:2d:ab:2a:9b:9b:a6:df:39:fb:32:02:a1:8d:
7d:78:fe:f6:39:c3:b4:46:21:a2:e3:db:66:55:bc:
10:5b:6d:5b:a4:0b:3f:1f:ad:bb:b7:4c:00:53:1c:
8d:50:86:61:97:46:20:e9:51:fb:c5:18:5d:9e:37:
3c:55:c7:aa:43:72:e5:c4:58:54:13:c8:9f:97:25:
62:47:c1:9d:f7:c6:c3:5a:16:da:07:65:c9:96:fc:
0f:27:4d:d8:e6:a9:b7:bb:02:66:a4:87:29:e7:91:
9f:11:7c:2a:29:6a:45:72:af:cb:f0:dc:dc:0b:5d:
43:07:db:1c:2a:05:16:4d:80:21:8e:42:e0:3e:81:
44:76:4d:99:5a:5d:54:68:05:6f:16:2d:d4:9e:29:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CC:8F:57:9A:77:69:F8:88:FA:DD:B3:72:CE:27:83:CD:07:30:64
X509v3 Authority Key Identifier:
keyid:5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/P8yPV5p3afiI-t2zcs4ng80HMGQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.164.0/22
Signature Algorithm: sha256WithRSAEncryption
87:50:15:12:1c:a1:02:77:d3:33:e8:e1:84:eb:8f:41:5e:f1:
ee:f5:43:26:d6:87:2b:24:15:6a:95:43:be:cf:ce:e6:3d:e7:
91:9d:01:82:06:5e:cc:5a:ef:75:0a:5f:91:db:88:75:6c:78:
04:c4:e4:33:10:dd:04:e5:24:25:26:7b:d2:a8:33:b2:65:93:
be:d4:0a:1a:60:49:bf:62:1a:b5:45:66:d3:23:7d:f5:af:c4:
1c:51:02:e4:06:a4:8b:0b:57:3b:f3:1f:da:71:27:70:72:92:
b6:65:11:d4:99:5e:f0:58:48:34:f0:d5:d4:c2:0d:57:b9:6e:
ab:99:5a:11:01:14:de:e4:a9:e3:96:26:98:7d:ca:87:df:89:
c8:c3:ec:cd:02:04:8d:56:ae:bc:c0:9d:a3:76:da:fa:03:ff:
19:be:a3:dc:f5:7c:43:9b:24:83:d3:0d:7c:2e:b0:4a:82:2a:
81:6c:9e:52:99:b8:ee:7a:27:04:e0:63:d6:e4:c0:e9:10:7f:
58:01:ea:ce:be:d3:21:b9:4e:9e:38:3a:56:d6:b1:48:78:17:
8a:95:0e:91:34:c0:de:9b:61:13:bc:88:11:a7:35:84:55:92:
de:06:07:f4:75:25:41:3b:93:90:e0:25:41:9e:98:a0:fa:33:
67:a2:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:58:14 2025 by rpki-client