Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/bZZrp3XrummqiId2VQAJRNgzoaw.roa
File:                     bZZrp3XrummqiId2VQAJRNgzoaw.roa (raw, json)
Hash identifier:          72IrkH8iY1YaJbH/EhNRnARoTug4EzT8qshaIUlrjSI=
Subject key identifier:   6D:96:6B:A7:75:EB:BA:69:AA:88:87:76:55:00:09:44:D8:33:A1:AC
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       023B
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/bZZrp3XrummqiId2VQAJRNgzoaw.roa
Signing time:             Thu 01 May 2025 01:31:55 +0000
ROA not before:           Thu 01 May 2025 01:31:55 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: May  1 01:31:55 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=6D966BA775EBBA69AA88877655000944D833A1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:0f:02:85:e2:28:25:7d:fc:9f:6d:8a:4b:
                    84:99:dd:60:2a:8c:2c:cf:27:97:40:ae:0d:95:29:
                    2e:17:ad:50:c7:ba:5e:a0:55:99:78:0d:20:f7:be:
                    6c:1d:42:0c:89:22:8b:62:d5:29:68:c0:05:de:13:
                    3a:94:70:ea:8b:8b:d5:3b:4f:60:b4:6b:1b:6b:cc:
                    48:c9:95:64:e6:b9:16:ea:00:e2:37:60:5c:21:34:
                    6a:86:30:3e:9c:75:54:d0:6d:de:7d:26:65:48:5f:
                    93:85:c8:9a:6f:63:7f:ba:d7:a7:7a:23:aa:ef:91:
                    89:45:50:6f:45:b4:75:90:67:b3:a6:39:6a:56:fc:
                    4e:c5:70:e4:4d:f5:ed:79:d9:8b:44:64:f3:e3:6d:
                    f7:33:1a:c7:94:fa:0f:fd:f1:04:3f:02:b3:cb:73:
                    42:07:d8:e5:19:98:53:0c:62:95:e6:d7:a0:09:12:
                    95:a3:5f:0a:32:3b:b2:46:60:6b:25:e8:ff:b9:51:
                    f0:7b:b1:de:ae:ff:89:8c:60:84:a0:41:57:6f:ae:
                    ea:76:b5:a4:a8:18:50:97:f9:15:01:40:ac:eb:22:
                    c7:81:43:a4:2c:76:cd:25:de:52:7e:85:a2:90:ac:
                    3f:1f:ec:f7:dc:71:77:f5:87:4e:85:c7:c7:6e:bb:
                    3b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:96:6B:A7:75:EB:BA:69:AA:88:87:76:55:00:09:44:D8:33:A1:AC
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/bZZrp3XrummqiId2VQAJRNgzoaw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:54:37:5a:0f:a7:fc:83:0d:f2:39:72:1e:87:31:bc:cb:10:
         c6:01:b1:a5:0f:2e:d1:61:3f:f8:d8:fc:f0:79:de:1a:10:a2:
         1d:89:80:d8:ac:ba:55:96:8f:47:12:37:8b:bc:93:25:17:a9:
         b6:cb:ee:6f:60:ed:97:99:fc:84:04:aa:5e:c2:b4:98:4c:98:
         63:2f:c0:21:58:10:bf:41:91:92:45:47:ba:0a:c7:bb:74:52:
         37:94:e2:01:7c:c0:87:0b:28:61:17:b0:f4:55:91:b1:9e:fe:
         24:58:11:d5:ab:71:e8:06:f1:7e:52:87:29:15:3c:6a:4a:7b:
         f7:e5:74:ea:fd:f5:a3:02:d6:17:ce:0f:70:6b:a8:ef:10:9a:
         c7:e8:98:36:6c:73:80:60:c8:cc:38:17:b9:27:41:19:23:31:
         1a:53:e1:1c:73:d0:6c:fa:6a:e0:76:cb:9f:c1:ea:8f:ca:a9:
         17:a0:76:02:94:7b:cf:28:a3:9a:75:8d:9a:7a:06:77:d5:dc:
         8f:96:7b:06:4e:a9:91:d9:f8:40:64:ea:94:af:5e:2d:65:5f:
         1f:80:93:4d:fb:91:16:70:34:8a:bb:e6:11:70:3f:a5:f9:2c:
         07:9d:ba:a8:5d:0e:3e:19:01:44:7e:12:0f:d9:fa:ff:1c:b8:
         00:eb:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 18:16:11 2025 by rpki-client