Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/7stT84oLcEGXBRTkSTWyyR6ujUw.roa
File:                     7stT84oLcEGXBRTkSTWyyR6ujUw.roa (raw, json)
Hash identifier:          ONUO6gMlyblsk9cd3pwp+a+21/Lbe8OF1gzOKiZ4YIU=
Subject key identifier:   EE:CB:53:F3:8A:0B:70:41:97:05:14:E4:49:35:B2:C9:1E:AE:8D:4C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       036F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7stT84oLcEGXBRTkSTWyyR6ujUw.roa
Signing time:             Thu 01 May 2025 01:33:27 +0000
ROA not before:           Thu 01 May 2025 01:33:27 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.133.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:33:27 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=EECB53F38A0B7041970514E44935B2C91EAE8D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:2d:66:e7:1e:fe:a0:2d:65:32:a1:86:38:
                    25:c7:93:cd:02:b6:4b:af:75:83:35:e2:49:ee:5b:
                    9d:31:10:2f:79:59:d6:52:9f:65:09:fd:1a:e5:7b:
                    11:66:ff:d2:8e:53:45:f6:62:9b:33:1f:3e:4d:17:
                    6a:e8:98:fe:4c:5a:1b:91:d8:5c:eb:05:a0:3c:68:
                    00:9c:7f:7c:bb:5e:f1:0b:57:c0:41:eb:b4:62:b5:
                    9d:1b:b5:a2:f9:8c:3d:6d:71:da:a7:5d:f4:6a:e4:
                    87:9f:f9:ef:6c:60:8c:52:d3:b1:fc:f2:75:60:48:
                    90:ba:55:3e:1a:d9:a3:60:3c:1e:2c:a5:85:bb:1b:
                    46:a0:dd:ad:af:fd:46:67:a9:61:0b:af:83:68:cf:
                    e8:e4:1a:f5:dc:b2:f4:30:c9:5f:1f:d9:3a:0d:4e:
                    37:ae:d5:4f:23:cb:b9:8c:c0:6d:7b:b7:99:b1:7c:
                    b0:df:13:81:5b:c1:bf:f1:8f:5f:8a:f1:81:ac:6f:
                    4c:9e:4b:3c:23:ee:cf:50:e7:6a:f7:4e:cd:e6:85:
                    a9:9b:0d:e6:8b:9c:4b:21:89:7c:5a:b4:0a:59:4a:
                    2a:8b:db:6a:59:bb:12:df:94:ad:1e:fa:00:c6:4b:
                    27:58:ef:5b:86:62:7b:55:e2:9e:b9:88:d0:32:d7:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CB:53:F3:8A:0B:70:41:97:05:14:E4:49:35:B2:C9:1E:AE:8D:4C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7stT84oLcEGXBRTkSTWyyR6ujUw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:2b:8f:29:58:be:70:1d:01:b3:5a:e2:a6:cb:7f:1a:0d:
         60:87:3a:bc:0c:10:5c:8b:b4:81:f2:48:6e:5c:b5:0b:09:50:
         1c:80:23:4a:76:9d:61:1a:0e:13:b9:b0:96:fe:d6:49:69:93:
         67:33:f8:87:3c:38:0c:e9:4d:a7:9a:11:c0:5f:d9:15:f5:96:
         67:7e:54:3c:bd:25:2f:c0:d0:78:c4:0f:b8:6b:9f:d4:8b:70:
         db:56:70:07:6a:72:a0:62:02:ea:42:47:b7:f0:b3:69:92:d7:
         79:84:11:bb:20:23:5a:f9:eb:7e:86:67:c7:cd:32:34:c2:ba:
         f1:6a:34:e7:76:32:6e:44:91:c5:4c:b9:5f:46:b1:ce:61:f2:
         59:33:ef:83:09:e4:2e:d9:1a:24:e6:d5:e7:50:a3:87:d8:92:
         d1:83:24:b7:0c:e6:47:4e:3f:22:4c:09:93:86:5a:02:8c:e8:
         90:26:d7:1b:7f:bc:87:2f:96:ba:eb:8a:ff:6a:57:d7:c7:ab:
         6c:94:17:5f:63:e5:cb:fa:26:c5:8a:f9:23:03:83:34:1a:af:
         78:0b:0c:39:ce:70:76:1c:6b:9e:36:a3:8e:8a:ab:76:0d:5e:
         8e:8d:0f:b3:c8:a5:4d:4a:2c:9f:81:68:f4:8d:56:a0:ad:23:
         a3:7b:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:28:06 2025 by rpki-client