Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/dIPmzrHxAIgUuaiFqzz7VEKlSMk.roa
File: dIPmzrHxAIgUuaiFqzz7VEKlSMk.roa (raw, json)
Hash identifier: Nbi2yg9rankbYrMZJl1qjynW+zUeZuwItlavG+vq/Bc=
Subject key identifier: 74:83:E6:CE:B1:F1:00:88:14:B9:A8:85:AB:3C:FB:54:42:A5:48:C9
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0173
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/dIPmzrHxAIgUuaiFqzz7VEKlSMk.roa
Signing time: Wed 31 Jul 2024 01:34:17 +0000
ROA not before: Wed 31 Jul 2024 01:34:17 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2497
IP address blocks: 210.149.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 14:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Jul 31 01:34:17 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=7483E6CEB1F1008814B9A885AB3CFB5442A548C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:26:f7:05:8e:85:42:85:ca:31:88:9e:16:
b5:97:dd:1b:11:b8:80:65:f6:79:ee:c1:07:2d:6e:
41:d8:fc:21:03:25:61:4d:ac:c2:a2:ec:c5:a7:fe:
c8:a3:12:c1:1e:21:08:1e:a3:a7:d9:e1:47:4d:eb:
54:c3:dc:90:7e:86:f0:ea:0c:c1:c0:09:46:cf:8e:
1d:8c:9a:34:19:80:8b:0c:42:45:cd:a6:60:1e:18:
80:e5:c9:a5:ab:19:27:f6:fb:ed:12:eb:bc:da:27:
47:e7:9c:dc:15:6c:11:8d:97:e4:df:67:1c:86:be:
49:17:35:0f:fa:bb:fc:63:c4:66:f9:95:de:3c:a3:
f0:bd:0c:5a:88:ea:c6:e3:e1:02:51:97:28:9f:5a:
78:66:b5:5d:d7:f9:2d:24:6d:da:f9:7c:8c:f8:cd:
2a:d1:70:f4:68:40:6a:db:8c:bf:9a:5a:14:d4:c5:
84:94:0a:26:35:24:b4:ee:4b:aa:ad:99:c9:fe:9b:
53:6c:57:8d:5b:e5:44:12:56:29:03:f9:ea:87:35:
d7:02:ce:0d:79:2e:82:77:57:6e:4e:ec:12:cc:ad:
47:b7:7c:93:a1:cb:32:e8:24:62:58:0c:82:5d:35:
f2:26:fb:ff:fd:cf:23:a1:d5:ba:34:d0:d6:a6:1d:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:83:E6:CE:B1:F1:00:88:14:B9:A8:85:AB:3C:FB:54:42:A5:48:C9
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/dIPmzrHxAIgUuaiFqzz7VEKlSMk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.149.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:3f:82:69:cd:ef:22:d6:75:48:c7:44:32:7d:e3:8c:a3:ea:
b6:ec:6e:43:18:d3:75:ab:68:97:26:c1:6e:b0:7f:a6:2c:e5:
dc:9c:69:9a:7e:4a:d7:30:eb:46:53:ce:9c:ed:0c:3c:5d:55:
ae:24:e8:b4:27:bd:54:1f:fb:87:f4:ae:f6:27:a1:e0:f4:9b:
3d:7f:c0:74:f0:12:dd:13:ce:4a:1b:cd:10:86:09:68:c0:a8:
79:87:fa:d4:1d:a1:4b:a0:d1:2f:8c:78:3d:02:e1:6f:83:45:
5f:b7:40:7e:3c:04:52:1c:5e:d5:a9:4d:f6:60:09:2d:12:da:
72:c8:e8:91:34:bc:bc:49:51:b0:5b:b6:0b:77:e3:05:cf:a0:
d3:e0:1e:cb:69:7f:4c:f4:fc:7a:10:80:99:3d:95:53:e0:ea:
f0:0a:c1:8d:12:8d:ef:60:3b:b6:e2:fe:7d:6a:f2:80:f7:57:
17:b0:36:d9:84:6b:a8:21:0e:08:51:f7:69:b6:fe:8e:3e:f6:
00:08:c6:cd:bb:6f:fe:40:04:c1:8c:0e:38:6f:37:74:a3:17:
61:60:82:ff:d2:46:34:2a:ad:88:d6:df:10:df:e7:30:43:fd:
18:ab:1e:8a:7e:d9:19:43:17:62:ba:73:34:dd:62:6d:72:75:
28:fb:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:12:57 2025 by rpki-client