Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/H9YWHZKk_PtV9OLfBf_165uQngE.roa
File: H9YWHZKk_PtV9OLfBf_165uQngE.roa (raw, json)
Hash identifier: LD1aJw11bSVMSKi3jwsRtDP5GhhefANpjhBzy/QdN8Q=
Subject key identifier: 1F:D6:16:1D:92:A4:FC:FB:55:F4:E2:DF:05:FF:F5:EB:9B:90:9E:01
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0254
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/H9YWHZKk_PtV9OLfBf_165uQngE.roa
Signing time: Sat 31 Aug 2024 01:36:40 +0000
ROA not before: Sat 31 Aug 2024 01:36:40 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 23788
IP address blocks: 110.172.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Aug 31 01:36:40 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=1FD6161D92A4FCFB55F4E2DF05FFF5EB9B909E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:2f:2f:c1:aa:c9:ad:a6:e8:70:59:f5:06:
13:6d:4e:f0:72:89:46:b1:8e:99:33:ea:3b:19:0e:
5b:8d:e5:28:67:63:1a:ab:ed:c8:94:e0:ba:e9:6c:
54:55:57:d2:5e:e8:a0:ad:33:a5:8a:e3:f4:05:e6:
15:58:16:87:bf:15:46:07:f8:e6:03:a9:90:51:a2:
9b:f0:d5:bc:73:1b:f5:ce:cf:ce:67:fd:c2:72:09:
61:d3:2e:f9:b2:68:d8:c7:f7:40:96:d3:8c:20:de:
20:d6:fa:5b:59:3d:49:26:d2:ec:3a:f0:07:ab:6c:
c6:8e:42:ed:66:1a:43:f3:0f:a6:f7:b8:a0:93:ae:
f4:cc:5f:c1:9f:1d:c6:3d:c4:da:49:00:9d:47:ca:
70:4a:05:fd:93:82:1d:8a:2d:57:5d:b5:51:c7:97:
8f:10:39:7c:e2:0a:8f:fb:03:d5:d7:84:f4:26:42:
57:0a:56:59:d9:a0:90:d1:cd:ff:30:be:48:e7:29:
18:f6:99:15:78:10:03:28:75:fa:31:a4:b4:55:68:
aa:35:05:8f:13:b2:5a:62:52:ec:96:25:0d:83:b2:
25:44:cc:94:02:a3:2e:5d:4c:8a:18:ff:62:fb:52:
eb:d3:0e:8b:6c:08:5e:6d:76:65:11:70:49:75:17:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D6:16:1D:92:A4:FC:FB:55:F4:E2:DF:05:FF:F5:EB:9B:90:9E:01
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/H9YWHZKk_PtV9OLfBf_165uQngE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.172.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:28:64:a0:07:f5:96:93:44:9a:67:d7:90:2f:e2:dd:ca:ae:
c7:1f:ec:89:5b:34:da:a2:ae:6c:78:e3:78:5e:5b:1c:e0:20:
de:1e:10:c4:31:03:bf:2c:fc:73:70:ce:a2:76:1f:38:a7:55:
9f:df:56:62:a5:fc:02:95:8e:8e:2a:6a:fe:52:16:7b:97:98:
dd:2b:21:e8:86:71:76:70:cd:2c:24:9c:cb:05:b6:c9:63:55:
da:fc:4d:9f:d6:c6:5c:54:f8:7b:9c:25:ec:50:18:64:09:e3:
b1:78:bc:11:b1:31:d8:be:5c:9b:fa:eb:68:fb:8c:04:a3:75:
01:5d:9a:7a:66:7a:88:3a:f5:45:0d:73:c3:7b:44:c0:0b:49:
b7:6e:6e:e6:6c:92:03:d3:cc:c8:b7:eb:db:23:b4:0e:03:bb:
7c:35:37:b8:65:de:48:ce:9a:b6:ed:23:c3:8e:20:57:39:63:
2e:58:e9:f2:fe:67:01:67:ff:1c:2e:b8:c8:10:09:c7:c5:7d:
8c:bd:17:bf:64:db:bf:8f:75:65:46:4e:00:4f:81:17:65:da:
e7:53:e1:6c:5d:fe:bc:9c:e4:af:af:b6:08:fa:76:14:1a:f3:
17:2a:df:9c:3d:0b:97:5e:e3:b3:e6:50:d9:8f:42:05:ae:38:
4e:b4:e7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:33:52 2025 by rpki-client