Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/sVR65t-bPNhidf2hi83lbwtAPA0.roa
File:                     sVR65t-bPNhidf2hi83lbwtAPA0.roa (raw, json)
Hash identifier:          MD81EtYZVjeXc7xCVP2/U1JpOGAl1Vm1mSCTi8wJiqg=
Subject key identifier:   B1:54:7A:E6:DF:9B:3C:D8:62:75:FD:A1:8B:CD:E5:6F:0B:40:3C:0D
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       7D
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/sVR65t-bPNhidf2hi83lbwtAPA0.roa
Signing time:             Thu 01 May 2025 01:31:57 +0000
ROA not before:           Thu 01 May 2025 01:31:57 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        153.125.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May  1 01:31:57 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B1547AE6DF9B3CD86275FDA18BCDE56F0B403C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:92:48:a7:66:dd:0a:6e:d2:c9:7b:3b:71:
                    5e:c5:48:bf:61:d4:15:b5:3b:d5:98:f1:52:66:60:
                    21:8e:f7:04:84:05:4d:c6:33:6d:ea:66:ab:31:e0:
                    78:77:f1:bb:9b:50:36:4d:21:ab:51:77:f0:21:88:
                    6a:1f:82:c6:2e:47:16:71:d9:22:8c:e0:eb:c4:52:
                    f2:6f:c1:86:c0:9c:16:28:e2:b4:c9:e1:7b:5f:66:
                    af:fc:29:80:b4:32:04:3b:8e:68:bc:9d:cb:17:7e:
                    45:d1:0c:a7:c5:26:06:05:34:18:85:b6:3e:1d:ab:
                    43:27:62:3b:69:e3:2a:9d:0b:d5:24:ff:57:82:ba:
                    80:c0:e0:7b:24:e2:c2:90:90:cb:06:bf:9f:f1:02:
                    95:95:40:bf:c8:b1:53:29:b5:23:77:45:e1:1c:60:
                    ad:5f:ea:c4:b5:2e:ef:12:c1:6b:8a:08:48:fa:91:
                    76:26:3e:e1:08:37:00:77:b9:21:33:d0:01:ef:64:
                    ab:53:e8:b3:7b:4e:d3:47:a4:07:f1:4c:8c:ae:bd:
                    67:04:5a:09:45:21:e0:7f:ca:11:0c:4c:25:eb:dd:
                    da:f8:cf:4c:0d:b8:92:8b:85:0f:ad:06:61:18:b1:
                    46:69:c3:54:cb:77:d4:fd:58:0d:a0:05:df:36:3c:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:54:7A:E6:DF:9B:3C:D8:62:75:FD:A1:8B:CD:E5:6F:0B:40:3C:0D
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/sVR65t-bPNhidf2hi83lbwtAPA0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.125.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:a4:f9:2b:c4:8f:69:b2:e1:9c:c4:b5:aa:e1:9d:6e:f7:c1:
         ac:86:02:91:7f:f5:87:d1:09:b4:18:5c:10:ef:c5:24:a2:11:
         66:65:2a:8f:59:f6:71:d1:bf:1d:e3:cc:df:3e:57:73:fa:87:
         11:41:cd:ce:e0:a2:7b:18:1d:05:7b:fb:93:4e:ec:1d:47:cd:
         30:a6:fc:3e:50:de:74:b8:bc:2e:97:47:f5:5b:44:fb:d6:34:
         cc:7d:2d:68:c0:84:ee:02:26:32:07:b5:fe:80:31:3e:19:a6:
         85:b2:3a:63:c7:16:7e:77:fd:13:05:03:1a:54:7a:0a:ea:cf:
         fa:07:64:3c:bf:2a:78:e7:71:23:70:5d:5e:88:b8:a6:22:9e:
         de:98:05:42:78:3b:f5:9b:36:1e:cd:bb:1c:92:8c:d2:df:5e:
         b0:0b:9d:b7:99:51:47:01:3a:25:45:7a:1c:1e:66:2b:30:24:
         7d:c4:de:1d:3f:a4:cf:b4:4a:52:35:f0:62:6e:33:64:a0:37:
         7e:ea:f4:f0:df:73:ff:20:3a:79:5c:13:4a:9a:5b:ad:e0:cb:
         af:60:d6:c5:54:0e:08:90:87:a9:ff:0e:6d:67:b0:8b:e7:3c:
         66:b7:15:ec:aa:61:d6:7d:a4:f0:c6:27:77:93:44:c1:cb:2e:
         ad:1c:be:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 05:52:57 2025 by rpki-client