Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/OASoP45-VUgwsloNkR_W_hCa8hM.roa
File: OASoP45-VUgwsloNkR_W_hCa8hM.roa (raw, json)
Hash identifier: DsnomAW9SwtVg78Mk48kLElRNT4VaSKzTsqQP5j7sf0=
Subject key identifier: 38:04:A8:3F:8E:7E:55:48:30:B2:5A:0D:91:1F:D6:FE:10:9A:F2:13
Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial: 39
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/OASoP45-VUgwsloNkR_W_hCa8hM.roa
Signing time: Sat 01 Mar 2025 01:29:03 +0000
ROA not before: Sat 01 Mar 2025 01:29:03 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 131954
IP address blocks: 121.58.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Validity
Not Before: Mar 1 01:29:03 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=3804A83F8E7E554830B25A0D911FD6FE109AF213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fa:51:a1:c9:23:38:d0:85:1c:eb:02:12:6e:
9e:57:0e:eb:83:44:fa:0f:d4:75:dd:0f:d8:1d:7a:
1b:3d:56:b0:92:66:5a:0d:3c:df:93:90:1b:2a:00:
db:96:92:7f:ab:01:8d:20:8f:e5:10:43:0c:32:bb:
50:e5:ae:43:8f:48:df:42:96:a1:22:65:40:8b:9a:
eb:5d:2e:f6:f1:e5:dc:0a:01:ab:9b:bf:68:9b:88:
4a:2a:e9:1e:87:e9:e4:bb:8d:65:11:8d:2d:ce:9c:
06:f2:16:9a:89:b0:0e:a4:36:95:fb:23:05:9d:54:
fe:d8:2e:f9:17:a4:02:97:f5:15:06:1d:05:22:88:
30:70:4f:b4:68:40:5c:0e:73:7d:a6:d2:f5:e5:8b:
72:3e:87:2c:57:7e:fc:26:f0:40:c2:e0:ee:39:85:
1e:7a:58:ff:c5:6f:31:fd:be:a8:f7:92:a1:f7:5d:
fb:a9:95:71:05:23:66:86:43:a4:a1:3c:4b:1d:02:
ed:01:2d:53:9e:23:31:41:29:7e:a0:9f:6a:3e:12:
c9:90:a4:15:62:75:95:3f:9f:aa:76:d2:cc:85:78:
34:7b:97:75:e3:ea:10:dd:d9:c7:38:55:34:e1:9a:
1f:b3:85:71:aa:04:90:4a:98:da:c2:af:cf:72:3e:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:04:A8:3F:8E:7E:55:48:30:B2:5A:0D:91:1F:D6:FE:10:9A:F2:13
X509v3 Authority Key Identifier:
keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/OASoP45-VUgwsloNkR_W_hCa8hM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.58.128.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:e8:59:eb:06:45:29:96:8b:c0:09:dd:5d:9e:c8:34:31:c2:
80:29:f2:8d:b7:ed:7c:ad:3b:b3:3d:e0:ee:87:6b:b0:a8:9d:
cc:15:7b:5e:50:13:e0:e1:c1:53:c9:9b:bc:25:fc:35:a9:6b:
ad:a9:37:2f:c3:85:9e:b0:fc:ce:24:cc:85:5e:2b:d5:76:c3:
bf:12:c1:49:15:48:6c:60:dc:cf:f0:ec:f4:aa:3f:95:44:33:
e5:b4:30:af:b8:3b:0b:2c:b6:c7:4c:2e:6a:91:19:27:f4:5d:
f3:ab:b6:f5:86:5f:bb:51:83:4e:64:f3:83:1c:31:96:24:c2:
5a:9d:05:64:ac:c9:1a:0c:fc:73:6d:9f:fb:4c:59:22:47:e1:
8b:e1:5d:6a:04:d9:92:1f:bd:dc:53:79:c9:e4:c4:28:dc:e9:
ff:4c:5c:02:62:e4:56:34:6f:49:f1:d2:36:76:a9:8e:fc:18:
2f:66:46:29:f8:dd:98:7b:60:81:b0:c0:ae:3b:cf:4b:80:89:
1a:6a:cf:c7:8f:ee:a2:7d:c4:71:c2:64:df:3e:5d:3c:fb:ad:
cd:20:d0:35:cb:43:d2:a5:cd:25:82:5a:f9:8e:49:8a:b7:b0:
34:8c:b1:66:93:d3:42:04:18:53:79:58:11:c8:e9:85:d5:8c:
d1:2e:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:54:41 2025 by rpki-client