Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/4Dkd0yKgZtgTCdM0m7C1wzLbux4.roa
File:                     4Dkd0yKgZtgTCdM0m7C1wzLbux4.roa (raw, json)
Hash identifier:          dj8VxHLTkdq5lQk10tlPSWol0r1C0ul8k6vYCeVTihI=
Subject key identifier:   E0:39:1D:D3:22:A0:66:D8:13:09:D3:34:9B:B0:B5:C3:32:DB:BB:1E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03A0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4Dkd0yKgZtgTCdM0m7C1wzLbux4.roa
Signing time:             Thu 01 May 2025 01:37:36 +0000
ROA not before:           Thu 01 May 2025 01:37:36 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        210.159.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:37:36 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=E0391DD322A066D81309D3349BB0B5C332DBBB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:19:09:bf:f0:bd:7d:89:a0:46:83:38:10:
                    21:82:c8:e4:30:8b:76:65:7c:2a:6d:a8:76:df:3b:
                    05:e0:16:d3:b0:7f:41:e6:53:17:01:5f:17:25:15:
                    b6:ad:b0:6b:bd:18:b6:1e:ee:9f:df:6e:27:7b:c6:
                    43:51:51:6d:64:a8:f3:db:86:ec:06:cc:65:9f:f1:
                    b7:ca:d1:85:d0:b4:94:a1:ff:d5:40:b3:e1:3a:9d:
                    47:d9:34:34:d4:63:1b:14:a2:e8:47:0d:0b:79:d2:
                    b2:10:be:c3:8e:ce:13:02:37:f2:d4:ed:e9:12:a4:
                    cb:fb:8d:1a:35:55:0f:db:3c:01:6c:88:f4:f9:95:
                    df:6f:26:79:2c:2b:05:4a:f6:b9:e8:71:49:23:b1:
                    05:51:99:eb:49:47:28:95:a3:39:3a:81:9d:72:a2:
                    a1:58:5b:c4:6f:6d:ab:74:b5:09:ad:41:98:a3:40:
                    2c:63:da:ef:fc:d2:ef:41:c5:21:6c:db:4a:15:64:
                    cd:8d:09:09:a0:06:ca:a3:f8:d4:62:ee:a9:78:07:
                    e2:f7:38:7f:d4:4e:e2:13:cd:e1:b4:d4:e5:c7:c2:
                    17:57:b1:de:a7:4f:c2:0b:8f:7a:33:d9:4a:34:22:
                    c4:f0:57:55:c8:2f:cf:10:64:51:5d:e3:b1:36:be:
                    f6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:1D:D3:22:A0:66:D8:13:09:D3:34:9B:B0:B5:C3:32:DB:BB:1E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4Dkd0yKgZtgTCdM0m7C1wzLbux4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:46:53:0f:ee:b7:70:b5:55:8d:22:36:e1:17:39:e9:bb:2c:
         7e:54:dd:c5:9a:42:0a:11:04:1f:d0:80:d5:88:42:6e:70:0a:
         b2:21:ea:5a:cf:bf:a9:e8:47:b7:18:50:9a:7d:ec:b1:a9:cb:
         3e:12:50:35:c3:79:9b:54:08:ff:41:70:a6:10:87:e0:32:b4:
         3a:a2:b1:59:54:97:9d:da:fa:2f:44:28:2d:73:c2:20:13:48:
         e2:7f:d0:ca:41:04:1f:1a:f4:be:a5:ee:bc:b4:36:2c:6f:64:
         d9:80:88:5d:f5:77:14:0d:de:8c:06:13:d7:3e:16:a0:17:d8:
         4e:08:e4:90:a4:7e:9f:16:a1:69:c8:0f:3c:2d:83:5c:a2:4a:
         68:0d:74:c8:6a:74:ea:48:56:09:ac:d9:6b:a6:ee:8f:3f:26:
         e0:48:71:84:5e:a8:b3:a0:c3:1b:a4:35:d1:58:aa:14:08:10:
         41:06:a7:4a:67:fe:96:9f:2a:15:b9:a0:51:02:62:e1:b6:88:
         3b:b0:89:dd:ed:8a:fc:15:4f:30:7d:d9:94:c2:09:f9:0f:49:
         f6:4d:39:19:d7:c3:de:ed:39:f0:3e:2c:a2:2d:f4:65:df:5c:
         48:69:57:7e:05:3d:77:7b:98:58:4d:6c:ea:fb:a0:31:c8:96:
         11:4e:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:00:35 2025 by rpki-client