Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/TeFIAGh8mHNW7jDEdYkliGIdtO8.roa
File: TeFIAGh8mHNW7jDEdYkliGIdtO8.roa (raw, json)
Hash identifier: 5b0Y94Vigzy7DrmZGS1PbZ4/u13TJN0XsRkIi/YX71o=
Subject key identifier: 4D:E1:48:00:68:7C:98:73:56:EE:30:C4:75:89:25:88:62:1D:B4:EF
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0158
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/TeFIAGh8mHNW7jDEdYkliGIdtO8.roa
Signing time: Wed 31 Jul 2024 01:31:20 +0000
ROA not before: Wed 31 Jul 2024 01:31:20 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2497
IP address blocks: 202.141.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Jul 31 01:31:20 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=4DE14800687C987356EE30C475892588621DB4EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:d7:14:de:c9:54:a5:09:fb:43:72:09:d4:
65:3d:a7:70:42:29:11:ca:fd:7b:43:1f:19:e4:fb:
b9:f4:95:dd:fd:7c:32:d2:6b:e7:6a:c2:52:db:d7:
3f:d3:52:f6:e3:79:5b:32:96:85:23:db:f1:7b:4d:
ce:3b:6a:e0:2d:21:82:8d:ae:66:e5:00:e4:16:f2:
4a:6b:e3:ae:1f:2f:0f:34:79:69:c8:5d:c4:dc:15:
5d:a7:71:6d:94:6f:aa:4f:97:77:aa:0c:7a:a3:34:
67:99:7d:f6:f9:58:5a:f1:95:76:86:05:dd:dd:ef:
ed:c8:f0:18:76:32:f3:58:4c:97:d6:d6:86:51:01:
b5:82:9b:cd:c5:64:d0:33:ae:84:98:b7:4d:37:5d:
ae:f1:36:2d:e9:81:89:8d:e0:0f:a1:db:18:d2:e7:
05:bc:c0:2b:8e:b9:00:dd:ed:6b:d9:85:a0:ac:90:
be:33:63:de:29:4a:97:3a:da:8c:d7:3f:78:05:b5:
49:c7:e5:4f:d8:17:95:44:0c:25:1a:4c:55:64:85:
0e:e9:1c:7f:f2:d4:49:6a:7a:cb:14:db:02:50:e1:
0c:07:86:04:f1:4c:56:f2:df:3e:50:03:c5:51:ef:
05:2a:27:56:38:39:c6:e3:fe:34:2e:b1:92:09:16:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:48:00:68:7C:98:73:56:EE:30:C4:75:89:25:88:62:1D:B4:EF
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/TeFIAGh8mHNW7jDEdYkliGIdtO8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.141.192.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:52:5c:93:fe:db:a9:18:63:d6:e5:b7:f8:38:09:38:07:3c:
9c:97:ce:71:e2:d5:76:db:25:39:6a:fc:4a:2f:95:ee:09:97:
e8:68:26:99:52:37:29:38:c3:23:91:49:5c:da:55:48:1b:28:
9c:9b:e1:4a:db:2a:1e:0d:fe:63:fd:7c:4a:df:a8:76:98:b4:
9a:fe:f6:d2:41:60:87:50:ba:91:a7:74:50:c7:26:ab:1f:0d:
5f:b7:9b:b5:3c:f3:84:1f:b7:16:4d:ff:43:af:04:43:27:76:
5c:b8:9b:6c:8e:a4:b3:17:07:e4:fc:99:4c:4c:cb:b5:5c:1d:
65:19:1c:3d:4e:5b:5c:b3:77:0c:3a:d3:3c:f9:3c:72:c5:e5:
1f:0f:08:61:2c:5b:a3:a6:37:65:fa:49:b3:b6:38:a7:26:f0:
75:07:12:e8:1d:32:bc:04:c1:db:83:0d:1e:c6:6b:4f:01:ed:
86:bf:ce:ee:b0:19:d1:f9:63:35:5d:c8:50:3d:fa:1a:a9:4e:
cc:25:66:41:68:82:00:f6:c7:7d:11:6d:1f:c0:86:91:79:b0:
a2:9a:b8:14:e4:c2:74:73:69:f0:0f:37:da:e7:1f:aa:14:87:
d0:01:80:73:d5:8e:18:37:0b:78:40:05:9b:6d:5a:cb:a4:3b:
fc:ff:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:36:10 2025 by rpki-client