Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/IsN5ClA339gX7ZW_RHq_4RCv9jU.roa
File: IsN5ClA339gX7ZW_RHq_4RCv9jU.roa (raw, json)
Hash identifier: 0OtkUqMK8hP1XcPCxkp191ZNSeNWyF/rUtvITPuF8NI=
Subject key identifier: 22:C3:79:0A:50:37:DF:D8:17:ED:95:BF:44:7A:BF:E1:10:AF:F6:35
Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial: 3F
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/IsN5ClA339gX7ZW_RHq_4RCv9jU.roa
Signing time: Wed 05 Jun 2024 07:28:40 +0000
ROA not before: Wed 05 Jun 2024 07:28:40 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 0
IP address blocks: 101.203.104.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
Validity
Not Before: Jun 5 07:28:40 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=22C3790A5037DFD817ED95BF447ABFE110AFF635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:93:0a:fb:8b:cf:5b:48:0b:e7:16:2d:3b:
4b:6e:ee:20:e5:8d:27:97:1d:0d:bb:75:00:2f:31:
d9:f2:e6:43:82:97:31:0d:55:05:89:45:7d:b1:8a:
14:1e:d6:6c:e3:f9:30:09:7b:85:6e:fe:a3:a4:24:
16:ef:db:4c:35:d6:0d:8d:dd:c7:70:4e:ff:19:9a:
34:a7:02:01:51:7c:71:26:ab:7e:c1:6a:d2:fc:42:
f2:fd:9f:e6:41:f8:32:53:fb:10:a0:59:87:09:bc:
e6:9f:fd:ab:0f:5d:84:1b:e4:0e:1a:9d:e3:df:47:
ad:b2:47:8a:0c:ed:d8:76:27:58:10:51:a0:4e:65:
6c:e4:f8:b3:13:1a:9d:1b:e6:3b:ee:7d:72:e2:d4:
e9:16:d2:34:35:58:1b:b3:42:a9:7c:5d:98:57:4d:
d2:84:37:5f:fa:c9:bd:78:bf:10:ae:0b:02:5b:a0:
0a:6e:42:5d:04:36:98:6e:24:09:ac:19:06:1b:24:
ed:1b:79:e2:7a:fe:53:76:6d:42:85:57:1b:57:53:
96:e2:7b:3d:a3:42:67:59:73:d0:7b:c1:31:6e:93:
7d:ba:97:70:a0:d8:cb:1b:9b:0b:6f:1b:e7:cb:18:
43:f7:07:df:c3:a5:40:da:8a:79:e2:f8:bd:ce:32:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C3:79:0A:50:37:DF:D8:17:ED:95:BF:44:7A:BF:E1:10:AF:F6:35
X509v3 Authority Key Identifier:
keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/IsN5ClA339gX7ZW_RHq_4RCv9jU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.203.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:17:46:77:40:b5:8b:64:da:ec:64:ca:9c:72:77:7e:e1:e4:
1f:7e:12:7b:d4:fa:d1:ae:0d:cc:28:fc:da:ac:86:b5:5d:71:
1d:49:e8:f6:3e:a9:55:d1:1a:7b:56:9d:b9:57:2b:0e:55:7d:
37:12:dd:cb:a9:69:c1:e4:6a:00:06:7a:05:e4:36:03:4f:73:
08:21:3d:e5:85:51:29:0b:1b:cf:64:62:12:ae:98:59:83:b6:
64:e6:73:35:5b:c4:a8:79:14:a6:2b:9b:f3:1a:d2:45:52:65:
f5:3e:3d:a2:88:96:3d:54:d3:d5:5e:6c:fb:c6:70:d3:76:11:
48:9c:31:7d:21:f5:94:ed:da:55:ab:fa:7c:39:1a:03:06:a5:
b7:01:10:52:da:49:74:31:bc:10:a9:0f:d4:5e:a8:a1:50:b6:
7a:bf:58:8c:74:79:bb:16:f1:05:42:65:4c:dd:b0:f5:25:e8:
49:88:0e:a0:ba:3d:31:81:66:7f:fc:05:d2:9f:ba:5c:f8:5b:
ed:56:72:46:be:ac:3c:9f:ca:9e:7c:b4:0d:7c:08:be:f1:b4:
78:79:d7:e4:11:34:b5:47:43:e0:e0:ae:c1:9c:a9:a3:09:7e:
63:5c:58:ad:dc:ef:46:4e:bf:2e:10:05:5c:4b:fb:79:17:9f:
6e:04:f7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:36 2025 by rpki-client