Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/2CRbkoiUcZy98lyjvMe3lqtKiYQ.roa
File:                     2CRbkoiUcZy98lyjvMe3lqtKiYQ.roa (raw, json)
Hash identifier:          G7rHAA+yEIQWlHqf1BGTytkURNHQ2ZKgc1/qGVfaowc=
Subject key identifier:   D8:24:5B:92:88:94:71:9C:BD:F2:5C:A3:BC:C7:B7:96:AB:4A:89:84
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       022B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/2CRbkoiUcZy98lyjvMe3lqtKiYQ.roa
Signing time:             Thu 01 May 2025 01:31:42 +0000
ROA not before:           Thu 01 May 2025 01:31:42 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        210.248.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 10:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:42 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=D8245B928894719CBDF25CA3BCC7B796AB4A8984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:fe:b3:77:90:06:8c:93:de:33:e6:62:1c:
                    12:9b:d2:1e:61:c2:0e:77:7a:36:b4:81:71:af:ca:
                    cb:fa:08:27:78:85:0a:6a:47:91:3f:2a:b9:cf:a8:
                    e1:a2:52:43:51:6d:ab:54:54:4b:1a:fc:a0:e3:f8:
                    81:9e:a5:a9:24:96:57:e3:ac:ec:b3:52:24:00:ca:
                    c3:a8:82:7b:19:ed:02:f4:4e:08:18:11:4f:bf:58:
                    2d:f2:3e:67:19:2d:8c:63:cc:59:e8:01:df:b3:79:
                    49:0d:74:f2:6d:49:4b:60:1e:c8:40:7e:88:df:c8:
                    33:9a:4f:ed:a5:16:47:49:b1:16:4b:e0:1e:e4:8d:
                    17:3d:0c:cb:a6:69:a3:32:e6:38:3f:e2:c4:a9:55:
                    11:c9:37:7e:d1:e5:31:cd:fe:cf:25:07:27:07:b1:
                    ae:3b:2a:74:0d:6d:ea:84:9a:1e:4d:be:e7:24:78:
                    13:b5:11:24:1c:f9:d3:ba:90:85:08:15:69:04:55:
                    0a:1e:65:1d:8a:7a:a1:c4:73:0d:0a:43:b6:c0:da:
                    ed:2b:31:b7:5f:09:6f:90:30:81:92:fd:ad:96:f9:
                    8c:c9:6f:43:4c:d0:a2:df:1b:a4:e1:85:34:a9:94:
                    33:76:b8:91:53:23:4b:0a:3a:0b:85:55:93:c8:cf:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:24:5B:92:88:94:71:9C:BD:F2:5C:A3:BC:C7:B7:96:AB:4A:89:84
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/2CRbkoiUcZy98lyjvMe3lqtKiYQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:27:89:ce:05:3d:f3:c6:68:4a:9b:66:59:7d:00:f4:78:
         c9:bc:f4:26:ea:c4:b8:61:5c:ca:2b:2e:3b:4f:00:fd:d3:0f:
         06:cc:d6:2c:07:b6:6e:a9:9f:b4:84:9b:db:1e:b2:4b:b1:46:
         25:5a:de:b3:81:94:9c:0e:94:f2:d1:f8:41:50:99:c4:ed:1a:
         b9:26:59:5d:d1:ed:11:09:d1:93:6a:c0:a0:f0:90:1a:95:fd:
         4e:b7:06:70:60:7b:94:84:31:bd:3f:75:88:c5:0d:6f:7f:98:
         3d:5d:fc:47:28:e3:3a:66:b5:38:6e:77:ef:07:40:e4:15:bf:
         6e:2c:56:5e:d0:a7:d5:bc:3c:1f:41:4a:ad:06:80:0c:ae:21:
         22:74:ec:2b:8e:27:0f:8b:03:dc:0c:8d:d1:24:83:5e:01:ac:
         89:b4:16:97:8a:48:e5:cf:75:b9:58:08:7d:b8:c5:aa:c1:fb:
         9f:e3:90:ae:c5:af:3b:45:e4:68:a3:5b:71:57:0b:a2:77:16:
         2b:27:b9:1f:b0:c7:1f:b2:a0:77:fc:a4:fa:43:85:18:aa:a7:
         35:1b:bc:aa:3a:e1:82:22:7e:9d:d0:e6:7d:86:b8:98:ef:f8:
         dd:e4:6d:99:ec:72:f6:b4:04:75:7e:8b:d0:10:f1:5d:5a:d7:
         fe:9e:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:56:30 2025 by rpki-client