Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/5AsXpmDZZ1TQmFYFVa7LuRpxhKk.roa
File:                     5AsXpmDZZ1TQmFYFVa7LuRpxhKk.roa (raw, json)
Hash identifier:          dVSXLvbpObwyz46h0/p0jFovwYdCSCxO4UQCUvhXT2A=
Subject key identifier:   E4:0B:17:A6:60:D9:67:54:D0:98:56:05:55:AE:CB:B9:1A:71:84:A9
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03B0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5AsXpmDZZ1TQmFYFVa7LuRpxhKk.roa
Signing time:             Thu 01 May 2025 01:40:28 +0000
ROA not before:           Thu 01 May 2025 01:40:28 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.135.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:28 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=E40B17A660D96754D098560555AECBB91A7184A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:b3:e8:6e:24:f9:8a:c9:2f:76:37:23:ad:
                    c6:51:23:c3:e6:d5:9e:05:f5:5c:fe:18:76:c6:f1:
                    d4:dc:60:ed:f3:4b:d7:59:fe:11:e2:6b:ff:d1:95:
                    67:b3:d7:03:81:c5:ea:a2:e5:29:c2:53:dc:78:f3:
                    ce:89:aa:6a:33:91:d2:d6:02:e6:7b:b4:d0:a7:b4:
                    58:4b:7b:04:6c:32:0a:b8:40:a0:84:fb:d6:3e:a9:
                    5c:81:d5:6f:58:ee:51:f5:92:11:34:80:79:6f:9a:
                    63:3e:7a:21:79:70:b5:ad:d9:5d:0b:4c:2a:80:80:
                    a9:69:23:14:a1:db:0c:62:ba:2a:bd:f6:8e:c8:fd:
                    f4:4a:da:d7:43:a5:e2:42:c8:fe:97:6d:fc:61:f2:
                    72:10:6c:eb:cd:35:15:54:96:1e:7f:96:1c:6c:48:
                    08:69:60:e2:4e:98:be:8d:4b:df:c0:3b:94:be:3a:
                    a1:80:c5:4e:63:38:17:b8:c5:ba:e0:7b:75:63:98:
                    24:5e:8a:2e:dc:ee:cf:5d:75:15:07:52:64:40:2c:
                    e3:b6:01:73:b3:0e:8d:4a:79:f8:65:3e:8a:bf:eb:
                    ca:20:bd:a7:41:e6:e5:65:76:71:f7:bc:96:15:7f:
                    12:4a:eb:96:bb:70:0e:b9:f0:4d:d8:4f:94:31:cf:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0B:17:A6:60:D9:67:54:D0:98:56:05:55:AE:CB:B9:1A:71:84:A9
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5AsXpmDZZ1TQmFYFVa7LuRpxhKk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:b8:70:db:84:81:de:a2:67:18:33:5f:ea:16:32:e0:cd:
         c0:cd:fc:4e:f1:c6:e5:ff:ce:13:a1:b6:7e:4c:47:44:46:d8:
         83:83:ff:73:97:ea:e6:11:32:de:df:47:44:7b:f1:1a:7e:bd:
         c4:95:aa:28:e8:71:17:5f:d3:5d:ba:11:b3:1c:0e:25:b0:86:
         5c:7e:50:39:b4:ac:06:7c:b1:c2:ab:43:ed:d3:7b:1e:d6:35:
         2b:79:99:6d:9a:98:92:10:6b:96:66:71:f5:22:e6:6d:a9:fe:
         6b:a0:47:48:4b:5e:16:2b:ac:9e:40:40:60:20:5a:b6:61:84:
         48:12:53:c8:68:85:4c:7c:f1:4a:ee:bc:f7:15:2e:29:ef:bc:
         d2:7a:21:60:cb:a2:5e:64:05:36:89:8f:49:af:ef:d8:88:1a:
         ff:7a:4a:78:73:a9:b4:40:c2:6b:2a:c8:1f:9c:bd:f8:a9:02:
         b9:36:5d:43:48:ea:a4:02:f5:06:33:49:00:2f:f7:64:0d:e8:
         56:ef:6e:ec:c4:9f:71:14:cb:0d:b5:95:98:4b:f5:8c:0d:91:
         00:70:be:98:c9:9d:f4:b1:38:be:0f:b7:b5:ce:fc:f8:d0:c8:
         a1:89:2e:c9:63:6d:17:ad:a1:c8:80:e5:be:36:1c:ad:49:dd:
         ad:34:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:34:31 2025 by rpki-client