Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/noHC9oYXkma81bJtlur-GGV8sx0.roa
File:                     noHC9oYXkma81bJtlur-GGV8sx0.roa (raw, json)
Hash identifier:          GcHml9LDVVoK4mDhMfpQM5Z8Wa5DVrfqfHoT9FFRXBs=
Subject key identifier:   9E:81:C2:F6:86:17:92:66:BC:D5:B2:6D:96:EA:FE:18:65:7C:B3:1D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0234
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/noHC9oYXkma81bJtlur-GGV8sx0.roa
Signing time:             Thu 01 May 2025 01:31:46 +0000
ROA not before:           Thu 01 May 2025 01:31:46 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        218.230.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:46 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=9E81C2F686179266BCD5B26D96EAFE18657CB31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:2b:d8:23:58:22:61:a4:1e:c4:7d:05:2f:
                    ce:3f:f3:78:bc:1c:98:53:57:f6:fd:0c:51:41:c7:
                    37:b0:02:e4:44:c7:70:1a:d7:1c:bd:14:ac:30:7e:
                    a1:3f:a0:57:9b:e6:09:4b:ed:fe:c3:49:cd:ab:0f:
                    2a:8d:1d:f0:9d:6e:25:7f:5c:d6:b7:ee:83:90:85:
                    bd:85:2a:4d:69:77:67:ee:83:3c:df:41:70:02:1c:
                    3c:0e:e1:fa:f6:5e:f6:a6:f7:7c:c0:fe:b4:e3:a9:
                    c5:df:3a:c6:cd:8c:90:7d:26:d3:d5:4c:6c:f9:a7:
                    22:31:71:d0:df:c6:53:17:2d:84:a4:e2:f8:5a:bd:
                    29:5a:af:0c:d5:f3:b2:d2:69:87:e0:98:58:80:a5:
                    07:8d:2c:17:b7:9c:71:78:4f:54:9d:de:3f:43:c8:
                    4e:c3:73:65:d3:02:0f:cd:16:2f:c1:f2:13:b6:a1:
                    4a:f9:e5:7f:76:30:4b:d5:a5:46:f9:39:aa:9a:c4:
                    2c:1e:e4:79:d2:5d:ee:df:f7:51:19:47:df:80:d4:
                    d2:72:e9:ad:fa:21:f9:b6:b1:12:be:3a:b3:90:fd:
                    29:aa:62:e1:3d:e6:e8:10:c8:ae:c0:71:35:ad:44:
                    89:8c:f6:98:6b:a8:04:15:d4:bb:1e:89:12:b1:44:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:81:C2:F6:86:17:92:66:BC:D5:B2:6D:96:EA:FE:18:65:7C:B3:1D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/noHC9oYXkma81bJtlur-GGV8sx0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.230.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         df:ce:c5:af:6b:d4:9a:28:f2:c0:56:82:b9:d6:09:b3:be:9c:
         bb:69:b9:5c:17:70:40:2e:25:d6:5a:13:41:18:b8:f3:b8:e4:
         0f:5e:a7:88:68:02:f8:d8:5d:6b:aa:56:76:a3:9a:28:11:d9:
         83:66:27:30:79:e0:a7:ea:18:f3:a8:38:58:ae:61:4e:88:3e:
         44:dd:3d:b4:d9:20:26:33:3e:bc:06:69:58:f6:8e:57:92:5f:
         63:24:61:38:61:ec:1d:78:43:35:ba:6f:ee:ab:85:5e:38:79:
         12:a0:be:71:e7:fd:f6:59:ea:7e:ef:74:c5:ac:c3:57:d7:f1:
         13:af:1d:2a:8b:f5:f7:f9:34:c2:38:dd:59:36:3e:b2:5f:7b:
         fc:78:d7:6a:06:8d:7b:bd:93:31:ba:66:1a:50:47:51:19:3f:
         a3:41:37:ac:9e:40:a3:3d:22:13:39:40:10:85:e1:3d:78:b1:
         49:25:42:a5:17:4c:ab:0b:ee:a8:ea:57:9d:b8:fe:67:9c:89:
         e8:bc:6f:4c:58:1b:13:1f:1e:ba:e8:a3:34:0a:69:0a:f8:1b:
         7e:80:89:1d:0e:07:85:34:9a:12:66:78:f0:0b:df:50:6c:8f:
         82:97:24:64:19:2c:f0:51:5c:4d:69:6f:27:2f:2a:af:dc:bc:
         e8:4b:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 17:51:41 2025 by rpki-client