Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/P1cLxS-rdDQGjFpXyIZfaFX5gUs.roa
File: P1cLxS-rdDQGjFpXyIZfaFX5gUs.roa (raw, json)
Hash identifier: m7zs6cHPFD3fPzpvt8sMzRJVM1R/ge3bXS9J/gt8jWM=
Subject key identifier: 3F:57:0B:C5:2F:AB:74:34:06:8C:5A:57:C8:86:5F:68:55:F9:81:4B
Certificate issuer: /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial: 02
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/P1cLxS-rdDQGjFpXyIZfaFX5gUs.roa
Signing time: Thu 06 Jun 2024 07:46:04 +0000
ROA not before: Thu 06 Jun 2024 07:46:04 +0000
ROA not after: Fri 06 Jun 2025 02:52:04 +0000
asID: 59093
IP address blocks: 103.230.168.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
Validity
Not Before: Jun 6 07:46:04 2024 GMT
Not After : Jun 6 02:52:04 2025 GMT
Subject: CN=3F570BC52FAB7434068C5A57C8865F6855F9814B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:83:61:14:c8:12:9a:50:39:fd:07:3c:dc:
5b:98:90:96:a8:1c:08:5b:75:18:08:76:5d:e7:ab:
ad:0e:ce:4e:a3:27:4f:f9:68:bc:76:34:2a:ab:b6:
b1:fa:f6:1b:6e:5e:1a:89:d4:bd:25:2a:41:1d:02:
81:a3:65:32:1f:c1:ea:53:56:fc:a5:ea:21:df:14:
bc:c2:c0:fa:c8:75:c9:e3:c1:af:42:35:17:ec:da:
83:eb:00:5f:46:fd:82:3b:79:ee:5a:d9:9c:04:78:
34:fc:8d:48:ae:34:ed:f9:4e:24:22:d0:12:6a:65:
39:59:ab:5d:76:e3:f9:2c:68:00:20:5b:af:d5:47:
bd:99:f1:da:8c:82:34:6f:44:81:76:d6:bd:f2:dc:
2d:65:cd:9c:eb:f6:6c:ea:e5:70:e8:60:e5:bf:ec:
94:f0:03:b1:a0:18:81:3d:b0:b0:2a:33:78:de:62:
a4:aa:7d:ba:06:1c:85:92:98:ec:1f:9f:c1:1b:cd:
f1:98:3d:2a:87:29:20:0c:11:1f:12:f2:4d:20:24:
0f:8e:6c:89:ed:f1:57:d2:5c:68:a9:50:f3:7b:92:
33:30:01:3f:27:78:ac:2f:41:af:a9:18:e7:50:1a:
3b:54:75:1c:36:fd:7b:23:70:0b:b6:39:ea:44:6f:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:57:0B:C5:2F:AB:74:34:06:8C:5A:57:C8:86:5F:68:55:F9:81:4B
X509v3 Authority Key Identifier:
keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/P1cLxS-rdDQGjFpXyIZfaFX5gUs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:08:5f:7c:c0:75:ff:d0:71:5a:2b:4b:94:be:83:b9:08:d5:
61:f6:44:2b:7b:a3:51:cb:b7:9d:b7:36:df:7b:0e:ca:4a:6a:
f7:f5:a3:23:33:cf:d3:43:17:30:8a:1b:a0:7b:ba:e3:bd:ca:
30:0d:2d:6b:ed:1f:13:ae:3f:da:25:1f:54:72:26:b6:6c:60:
1d:1b:bb:38:4e:57:a8:6e:11:2f:e6:12:01:24:1f:10:30:73:
cd:4c:65:72:cc:46:8e:17:b9:9f:3f:56:67:66:49:ae:7e:12:
30:e2:8e:e1:1e:b1:aa:8e:8d:0d:05:92:0b:9d:5f:77:e9:3e:
d8:0a:46:0c:76:4e:83:2a:77:65:45:04:36:1d:5f:72:09:7b:
c6:d8:5e:44:66:58:9a:82:8c:38:0d:7e:09:4a:8f:7b:e8:05:
1c:3f:3a:82:bf:b9:8a:8f:02:b2:d7:a7:cc:45:64:de:a3:c7:
6b:6d:39:14:c4:7b:b4:e1:cc:af:d7:5a:7d:b1:f7:69:6c:21:
75:6f:d5:6f:61:f1:6b:60:70:31:79:56:d5:0d:41:ac:ea:81:
2b:af:87:10:73:d9:82:cf:ab:3d:bd:2f:a2:96:10:83:1e:8d:
4e:e5:db:42:c2:ec:ff:42:57:62:88:b1:e9:47:70:d3:e9:a4:
04:7d:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:34 2025 by rpki-client