Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/0VZJAMbTd91jHXgkChNqbWJSXzo.roa
File:                     0VZJAMbTd91jHXgkChNqbWJSXzo.roa (raw, json)
Hash identifier:          zqKIY88oJaLxGpdEBYcjbKVGiB9icL4iatZZ/hAgc1Q=
Subject key identifier:   D1:56:49:00:C6:D3:77:DD:63:1D:78:24:0A:13:6A:6D:62:52:5F:3A
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0219
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0VZJAMbTd91jHXgkChNqbWJSXzo.roa
Signing time:             Thu 01 May 2025 01:31:33 +0000
ROA not before:           Thu 01 May 2025 01:31:33 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        153.240.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:33 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=D1564900C6D377DD631D78240A136A6D62525F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:0f:97:2d:5a:34:6e:f5:81:7d:e7:20:ec:
                    fb:87:d4:3a:ab:df:9d:9a:ec:26:3d:0f:fa:5f:6a:
                    59:3e:e4:6f:17:2d:4c:f4:b8:f2:fd:39:17:68:c8:
                    cc:f2:97:73:8f:33:db:7b:78:09:70:9d:fd:c6:b4:
                    90:40:d7:7a:d3:91:0c:9c:71:10:79:1d:85:1b:e5:
                    ea:3f:cf:46:11:c9:f6:b7:87:6a:4d:15:7a:1e:bb:
                    23:c4:f7:c0:13:c1:83:67:4a:4a:56:b5:ac:67:94:
                    83:41:e1:42:c5:98:41:a6:ff:31:23:e5:fd:24:da:
                    9b:5d:60:0d:04:32:9b:cc:47:89:22:8f:11:42:73:
                    ab:b5:71:50:74:87:c6:ce:24:2d:ef:ab:bc:6b:d7:
                    04:13:cb:04:cb:1e:69:25:56:6a:4b:87:b9:3a:99:
                    3b:d8:6f:6b:05:39:74:7e:28:3d:65:86:22:95:e1:
                    32:d8:11:e8:3d:70:92:7e:ea:ba:ae:e1:d9:aa:9a:
                    72:e5:0e:c8:d0:c3:00:39:40:0d:57:3c:02:e3:d4:
                    91:98:24:d1:db:08:fd:40:35:d2:26:59:be:fe:43:
                    4c:40:27:7c:02:5f:17:cd:c3:af:fe:2e:be:55:18:
                    df:2b:9f:d7:23:84:a4:b0:b6:01:c2:32:75:82:44:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:56:49:00:C6:D3:77:DD:63:1D:78:24:0A:13:6A:6D:62:52:5F:3A
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0VZJAMbTd91jHXgkChNqbWJSXzo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.240.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         63:01:24:fe:75:ac:57:13:16:c7:63:74:da:d0:22:4e:50:e6:
         d5:d0:89:1a:48:a0:f8:fa:b7:76:97:2a:82:2c:a3:d2:b1:94:
         fe:97:5e:17:01:83:3d:1b:25:b5:da:dc:79:f9:84:2c:b3:4c:
         3c:98:89:85:cd:ef:70:96:c4:3f:53:ba:52:7f:7b:0e:94:fc:
         fa:15:17:42:db:91:cb:f1:30:f3:52:62:37:ab:3c:4d:0c:9d:
         2d:90:9b:99:93:d6:25:54:06:69:e1:79:44:95:64:56:e1:7f:
         48:5e:5d:98:a2:b8:7f:22:c7:7f:6a:a4:b7:b5:ba:dc:b5:28:
         d6:a3:87:c4:30:26:e5:fb:b4:27:69:88:78:21:da:43:c5:2f:
         30:b0:75:35:da:41:32:12:65:33:3b:d8:6d:b4:d0:81:3e:26:
         3d:27:f5:d2:c8:a1:62:c0:30:df:09:ab:70:db:1b:68:8e:91:
         19:f5:66:61:d9:52:41:f5:37:3f:3c:87:01:af:fa:76:0c:67:
         45:5d:d8:81:88:f7:35:e9:cc:7f:13:07:76:2e:d6:67:42:98:
         47:3e:4e:e8:3a:3d:67:3a:ad:cc:96:c7:f3:7d:ec:1b:21:e1:
         5d:f7:da:46:e8:63:60:8f:a3:a1:a7:1a:0e:27:c8:03:69:45:
         ae:33:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:33:39 2025 by rpki-client