Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/atYYF6xa-5XhCb99_svb7ujnR4s.roa
File:                     atYYF6xa-5XhCb99_svb7ujnR4s.roa (raw, json)
Hash identifier:          FjScNVbUM7ylJZw2OZLX6RxOL7CbCrX19B8Y6oQxGX4=
Subject key identifier:   6A:D6:18:17:AC:5A:FB:95:E1:09:BF:7D:FE:CB:DB:EE:E8:E7:47:8B
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       80
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/atYYF6xa-5XhCb99_svb7ujnR4s.roa
Signing time:             Thu 01 May 2025 01:31:58 +0000
ROA not before:           Thu 01 May 2025 01:31:58 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        153.126.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May  1 01:31:58 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=6AD61817AC5AFB95E109BF7DFECBDBEEE8E7478B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:dd:30:b4:d3:5f:13:f4:0c:96:0b:4b:98:
                    76:bc:f0:f3:a1:6f:b5:eb:6c:b5:d5:18:4b:18:79:
                    3d:35:fa:47:5d:51:35:45:fd:81:21:d6:6f:80:2a:
                    4e:a3:cf:79:d9:d8:45:6f:73:11:38:fb:1a:c5:c8:
                    8a:90:cb:af:ef:9a:cf:b2:74:34:93:69:ca:2a:fd:
                    2e:f7:62:d3:bd:66:a8:d1:d0:c7:b9:1d:d3:7c:23:
                    bb:4b:3c:7f:51:0e:41:07:49:63:ff:1b:e3:2e:27:
                    80:d4:06:d3:84:6b:1d:26:a8:6d:73:21:02:bb:ee:
                    79:93:16:15:f5:67:23:d4:78:ec:e5:a1:5e:71:1b:
                    d7:bc:98:36:ca:b6:51:5d:df:14:40:46:7b:95:b6:
                    d9:ed:e5:c8:52:d5:2f:f7:ee:a1:5e:18:8e:03:b1:
                    d8:dc:77:d1:1a:32:3a:65:59:a3:17:ba:dd:79:98:
                    ba:71:2f:01:d6:da:33:88:86:5e:3b:4d:9f:3a:b6:
                    0f:13:c7:c6:f7:40:3b:4f:60:ad:b4:32:74:44:61:
                    f2:2b:4e:4b:80:22:ab:6d:a2:8b:68:2b:77:7e:1d:
                    eb:90:ec:54:39:f0:ef:cd:7a:1b:16:db:31:d9:c7:
                    97:49:a7:25:27:e1:57:cb:58:98:60:fb:27:9d:5d:
                    89:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D6:18:17:AC:5A:FB:95:E1:09:BF:7D:FE:CB:DB:EE:E8:E7:47:8B
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/atYYF6xa-5XhCb99_svb7ujnR4s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.126.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a3:9b:f1:a9:bc:a6:6a:ba:c9:16:1e:28:8d:db:c4:14:4c:04:
         26:31:e7:a9:0a:f5:dd:76:6f:3d:0a:d9:99:de:36:c0:b1:58:
         a8:f8:60:22:2f:d0:a6:57:5e:0c:5c:ad:2c:e7:87:1f:d2:a7:
         14:b7:34:de:52:a7:4d:ea:9c:83:7b:75:ad:c7:18:4d:bf:8e:
         e5:d1:2f:f0:2b:98:5a:58:46:02:7d:97:f3:68:71:56:5f:d8:
         3f:37:63:3d:9f:b2:74:e1:41:76:2d:a6:9a:d7:02:f3:92:fe:
         00:69:b1:73:2e:2b:ba:0b:c8:23:f2:9b:41:ad:ec:d2:70:6c:
         d3:01:1b:93:08:4e:d2:ca:c5:4e:67:42:d0:a9:f2:09:23:ab:
         dd:68:7e:04:4d:43:df:68:f1:9d:f5:ff:d9:0c:f9:6c:cc:4a:
         17:e1:0c:14:cd:42:45:ef:77:b4:06:21:9e:45:c2:0d:82:fa:
         c9:d2:60:9c:99:3a:58:d7:12:ba:96:e2:23:ce:cc:fa:b1:79:
         84:78:17:4a:7e:92:ca:aa:4e:60:64:80:0d:2d:1e:be:42:05:
         d0:39:27:59:8e:b1:a4:27:03:7c:16:01:2b:34:6c:95:85:dc:
         7e:f3:a2:91:de:1a:7f:b9:ae:e4:9e:d2:55:4c:d9:32:4b:15:
         66:84:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:48:36 2025 by rpki-client