Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/K6M52KE_eGYHUU4CoU3_Zxfr58s.roa
File:                     K6M52KE_eGYHUU4CoU3_Zxfr58s.roa (raw, json)
Hash identifier:          A49mUuO6HGyFhnbar3w9t02vZkvU836xczfpaWo0Gjk=
Subject key identifier:   2B:A3:39:D8:A1:3F:78:66:07:51:4E:02:A1:4D:FF:67:17:EB:E7:CB
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0229
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/K6M52KE_eGYHUU4CoU3_Zxfr58s.roa
Signing time:             Thu 01 May 2025 01:31:42 +0000
ROA not before:           Thu 01 May 2025 01:31:42 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        210.226.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:42 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=2BA339D8A13F786607514E02A14DFF6717EBE7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:52:86:bb:06:71:8c:73:5b:fa:9f:0e:a6:
                    60:a8:e6:b2:7b:25:a0:99:9b:f0:c2:4f:a2:06:06:
                    21:f7:cf:6f:94:79:02:57:bc:55:7a:fe:df:f0:5e:
                    35:65:4a:84:97:18:31:d7:d8:dd:f1:2f:bd:56:00:
                    50:80:dc:a8:60:80:24:d2:6b:d9:57:8c:47:30:c0:
                    fa:68:7d:10:e8:da:89:14:7c:f2:f2:f7:9a:05:70:
                    86:26:e4:e7:13:61:e7:ce:99:22:0a:48:43:2e:65:
                    8c:f6:f7:4a:d1:95:ee:4d:40:2e:48:32:32:4c:ca:
                    d1:07:d4:3a:af:68:08:8a:cd:35:1c:d7:88:84:78:
                    fb:2d:9e:76:9b:42:8c:59:1f:85:5f:1c:07:f7:06:
                    9d:bf:2f:cb:df:22:8d:62:77:00:35:bb:4d:46:6c:
                    15:f4:81:7c:14:80:c0:a8:a5:78:d5:c4:c8:83:ec:
                    fe:8c:26:46:08:f6:7e:7e:79:ee:09:a6:8d:1f:bb:
                    1e:52:4a:42:ea:d3:15:54:12:b7:71:80:2a:5f:05:
                    97:a4:40:0c:71:43:64:1c:fc:e5:8b:94:23:e3:eb:
                    84:9e:f2:1d:35:db:f8:f9:9b:e7:4e:2f:1b:b1:fc:
                    d0:85:72:b5:1d:63:16:da:16:7a:fa:64:e1:4b:3b:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A3:39:D8:A1:3F:78:66:07:51:4E:02:A1:4D:FF:67:17:EB:E7:CB
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/K6M52KE_eGYHUU4CoU3_Zxfr58s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.226.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         64:1b:70:ea:2e:12:ca:f5:cf:d8:9d:27:dd:35:9d:5c:03:ca:
         78:22:e2:9b:66:0d:2e:ba:6e:9c:b5:2a:44:ba:ce:4f:2d:92:
         ec:89:f9:25:58:15:5d:4e:e3:02:e4:ad:ef:12:f0:13:3d:2e:
         c8:c1:ce:aa:4f:6c:03:95:60:d2:e7:2a:8f:8f:5e:5b:b0:1c:
         d5:18:0d:13:67:3b:66:59:61:74:aa:ab:54:b7:6d:88:5b:75:
         e2:59:8e:fc:31:54:1b:a9:d7:43:25:0c:84:d7:5e:4a:2d:1c:
         e8:0a:d2:02:47:ae:03:5d:18:f6:bf:39:35:b6:f1:1e:67:fd:
         ce:41:5b:aa:84:b9:ba:f8:05:f6:d8:5d:2a:b1:0b:3a:83:11:
         f7:e2:5b:4f:61:e2:c2:c1:09:36:ef:a2:5c:8f:22:1b:63:1c:
         2e:44:a7:45:fc:20:65:7f:34:58:30:ee:20:a8:a9:14:29:d5:
         f8:88:b4:28:2d:c3:4e:ad:5b:50:e1:6f:03:16:b4:e1:8d:f4:
         79:bb:ac:41:62:56:02:9a:22:a5:ef:44:89:22:09:87:b2:d3:
         a9:20:33:5a:92:18:43:30:b6:5f:68:a8:a6:64:53:f3:de:67:
         3c:3d:80:62:4b:f9:f9:b4:48:ca:9e:cb:cb:4d:65:55:d5:b4:
         cd:26:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:53:39 2025 by rpki-client