Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1453/B1eejM_KKA01jG7wzjTfktXwhSg.roa
File:                     B1eejM_KKA01jG7wzjTfktXwhSg.roa (raw, json)
Hash identifier:          hpJWN8i7+QAlyFwyrhLcrFG42v/upTu1p08czN0muIw=
Subject key identifier:   07:57:9E:8C:CF:CA:28:0D:35:8C:6E:F0:CE:34:DF:92:D5:F0:85:28
Certificate issuer:       /CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
Certificate serial:       11
Authority key identifier: 01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/B1eejM_KKA01jG7wzjTfktXwhSg.roa
Signing time:             Tue 13 May 2025 01:11:52 +0000
ROA not before:           Tue 13 May 2025 01:11:52 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     8220
IP address blocks:        202.255.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
        Validity
            Not Before: May 13 01:11:52 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=07579E8CCFCA280D358C6EF0CE34DF92D5F08528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:16:6a:90:cc:9c:99:4e:a2:bd:fe:1e:23:
                    2a:26:60:30:f0:0a:a4:66:f7:d2:cd:1c:9c:fe:87:
                    7f:a1:46:0c:df:72:a9:d6:c2:e2:15:62:0c:9c:32:
                    94:9f:6b:98:99:22:12:03:ea:d0:99:b0:f8:10:25:
                    d7:05:99:ee:ec:70:49:99:23:68:01:e8:5f:8b:9e:
                    19:34:c1:8a:3e:93:db:19:e5:64:cc:61:12:3e:21:
                    a3:1d:bb:f1:de:10:7d:c0:f8:78:a6:60:e8:ea:9c:
                    ce:c0:1c:2c:fd:fd:f4:59:f2:44:d8:8b:a5:3e:af:
                    4a:76:3a:b9:01:5b:36:7d:1a:78:b2:07:43:f3:e6:
                    9d:3f:59:b1:b7:d3:5c:1d:15:7f:8e:04:c4:6f:a2:
                    17:d5:80:d8:6c:54:bf:01:c7:44:8f:62:e2:72:6f:
                    4e:be:53:d1:c2:9d:9b:48:01:e6:b9:78:97:77:f3:
                    a2:db:00:71:eb:bf:8c:ee:7e:56:eb:0f:e8:3d:8d:
                    42:8b:5d:31:8e:24:7f:07:9f:b4:ce:26:60:a0:f3:
                    d2:7a:d1:2f:d7:2f:b8:7d:f9:bb:3e:d9:ca:e8:ed:
                    87:9a:1e:74:66:aa:81:4d:37:bd:d8:78:69:f2:40:
                    1e:b7:ac:13:f6:c9:90:bf:d3:b5:3a:e5:fa:9c:b3:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:57:9E:8C:CF:CA:28:0D:35:8C:6E:F0:CE:34:DF:92:D5:F0:85:28
            X509v3 Authority Key Identifier:
                keyid:01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/B1eejM_KKA01jG7wzjTfktXwhSg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:29:4d:f7:60:e0:d1:6b:c8:31:31:6b:f1:dd:74:3a:db:da:
         81:8e:45:f9:6c:75:d9:f4:0f:ac:bb:61:ea:6a:85:14:ef:18:
         af:92:2e:1c:f4:b7:56:e2:6b:06:1a:b4:2f:4d:c6:1c:eb:9a:
         83:18:c2:2a:54:68:09:07:27:f2:11:48:17:84:34:7e:b9:44:
         ac:d3:48:e7:0b:e4:8b:dc:09:ad:ac:f7:69:f0:85:6f:cd:8b:
         7f:80:29:e0:48:8e:7a:72:51:10:ae:88:1d:12:b8:ac:22:7b:
         4f:a5:21:5c:e1:91:f0:1d:55:e7:b9:87:04:68:6c:4c:2a:54:
         26:53:bd:58:05:f9:93:ff:3f:d5:4f:61:02:2b:65:aa:a0:d2:
         fa:a5:18:6c:b1:a2:43:59:6d:22:1a:cf:91:24:2f:fa:b0:41:
         f9:d2:b2:e3:bd:0d:66:7d:b6:aa:52:79:a5:37:7b:41:33:56:
         c9:1b:a2:4d:51:cc:72:f5:36:9e:72:48:80:80:60:22:aa:9c:
         86:13:8f:6d:87:ef:20:ca:92:8c:9a:a4:38:1b:87:8b:76:28:
         bd:0b:91:0b:50:85:e3:19:66:71:1f:be:6b:a9:79:1a:96:a6:
         05:fb:ba:ab:a7:6d:62:f5:7b:e2:b2:a7:ce:ab:b4:b0:98:fa:
         12:23:16:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:24:01 2025 by rpki-client