Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/5mS3o3UF5oddSZTEGSkp_8Qe2jQ.roa
File:                     5mS3o3UF5oddSZTEGSkp_8Qe2jQ.roa (raw, json)
Hash identifier:          f4rwKKFJHU0iWEBwZUCKSAsVHCQfdZnl/KZmWVd7pfg=
Subject key identifier:   E6:64:B7:A3:75:05:E6:87:5D:49:94:C4:19:29:29:FF:C4:1E:DA:34
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       42
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/5mS3o3UF5oddSZTEGSkp_8Qe2jQ.roa
Signing time:             Tue 01 Jul 2025 01:32:01 +0000
ROA not before:           Tue 01 Jul 2025 01:32:01 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9597
IP address blocks:        27.34.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Jul  1 01:32:01 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E664B7A37505E6875D4994C4192929FFC41EDA34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d4:f4:33:4e:ec:b3:7c:80:5a:31:c1:a1:53:
                    7f:4f:68:4e:57:d6:20:88:e1:88:fc:de:b9:ba:78:
                    68:61:36:8b:74:a7:1b:e8:ea:ed:40:7b:42:66:8c:
                    24:b2:32:7e:31:7e:e7:06:e1:a0:fc:90:c2:4a:f5:
                    7f:37:3a:4b:52:db:27:38:f6:d6:72:ce:bb:f2:ab:
                    ab:0f:b4:95:05:a7:18:b7:34:1c:e8:9d:38:a9:a0:
                    9e:51:ff:7e:69:6d:9c:0e:26:ae:69:46:fb:44:64:
                    be:0a:b0:ba:ec:83:95:a8:7d:90:67:9e:61:ee:d0:
                    82:c9:3e:45:3a:f3:ee:d8:6c:15:34:94:e1:00:32:
                    ae:9c:ab:b9:33:f7:d9:98:6e:fa:87:c7:d9:c4:5d:
                    4d:72:7e:40:f9:d7:c8:53:4c:f9:94:19:ff:07:61:
                    da:89:73:fc:ee:61:72:1e:62:8a:a7:f5:df:84:81:
                    0f:81:41:2f:9a:49:13:f4:f2:5f:ce:43:c9:a8:5c:
                    37:2f:1e:7b:33:b3:c8:18:b6:28:f9:56:71:fe:aa:
                    f3:10:fa:ff:ea:a4:f1:31:f8:1e:c5:05:1d:e1:20:
                    b7:5a:f1:8b:7a:b3:4d:d9:11:d9:dc:b7:1e:79:58:
                    02:28:07:5d:c8:ca:a5:81:a1:a9:87:5b:2e:b6:6b:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:64:B7:A3:75:05:E6:87:5D:49:94:C4:19:29:29:FF:C4:1E:DA:34
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/5mS3o3UF5oddSZTEGSkp_8Qe2jQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c4:c6:36:f5:19:34:fa:b6:24:e1:12:b2:3f:ca:e3:29:66:8c:
         65:0e:5e:d4:98:76:1d:65:a6:8d:f5:40:44:e7:36:39:41:52:
         32:30:96:f2:16:a4:b4:bc:4d:aa:82:7b:9f:56:d4:8c:4e:da:
         1f:93:02:2a:ed:21:fa:fd:02:e2:85:8f:6a:4f:09:49:28:78:
         0c:6b:9b:cb:3e:fb:b9:0b:1f:f4:1a:9a:7d:78:b7:e2:23:a5:
         90:85:03:23:99:a4:20:0f:49:3f:3d:a7:86:eb:df:51:6b:50:
         a9:b1:47:97:ce:8b:6b:ad:0d:0d:3a:70:d6:63:4c:1b:2f:70:
         c3:c5:48:4f:f5:c5:a6:0e:ea:f5:52:5b:35:7e:19:36:e1:ae:
         9c:c7:4d:57:84:62:2a:4e:44:27:e9:fa:1f:91:a4:09:45:f7:
         cf:6d:96:59:fd:8c:77:53:21:7b:55:9a:29:0c:a7:dd:2b:49:
         67:d2:11:3d:6f:64:92:71:54:c7:9e:e2:43:f7:e1:17:d0:1d:
         dd:0b:92:e0:6f:c1:83:5f:8c:3a:88:34:a8:53:af:94:dd:f8:
         63:9f:fa:4a:41:3f:26:21:8b:e8:00:cd:a7:6e:0f:1a:df:e3:
         f6:f9:3b:0f:48:a1:f6:29:a3:84:a9:ba:75:86:84:cb:02:9f:
         7b:86:fd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 00:13:23 2025 by rpki-client