Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ce613_rsm_oGkJhiBjqZJyTIfow.roa
File:                     Ce613_rsm_oGkJhiBjqZJyTIfow.roa (raw, json)
Hash identifier:          gnYBJvLUz4uqptDNWN5sOiW/8WRRjOFD9IbkwSv/u4M=
Subject key identifier:   09:EE:B5:DF:FA:EC:9B:FA:06:90:98:62:06:3A:99:27:24:C8:7E:8C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       041A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ce613_rsm_oGkJhiBjqZJyTIfow.roa
Signing time:             Thu 01 May 2025 01:48:44 +0000
ROA not before:           Thu 01 May 2025 01:48:44 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        183.181.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:44 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=09EEB5DFFAEC9BFA06909862063A992724C87E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c4:94:7a:f0:54:44:5b:9b:16:76:e8:61:ff:
                    77:f8:e4:b5:30:a1:a2:d2:65:36:40:43:3c:77:98:
                    8c:18:d2:01:f1:b2:8a:53:33:41:fc:ea:05:1e:99:
                    a5:7b:28:08:f2:ec:47:22:7c:ba:3c:e2:6a:52:e3:
                    2e:b5:fc:cd:37:2d:b8:8d:3d:ee:f2:d7:a4:4d:e7:
                    a2:a9:5b:d8:fe:72:af:6f:3d:3d:75:19:f1:7f:70:
                    c9:2c:cc:cf:88:ae:65:97:60:b2:e4:98:7e:b4:35:
                    5a:ed:d2:0e:53:83:96:4b:b2:a1:37:ce:fe:0b:80:
                    03:d4:64:a9:f9:08:fd:fa:92:3e:98:23:61:ac:4d:
                    ea:f1:1f:f8:6e:a3:f6:d4:29:d6:94:86:4a:74:e2:
                    51:44:93:bf:5c:89:62:12:a6:37:af:0f:08:80:1d:
                    60:79:7e:88:a5:dc:18:da:97:c6:c0:f4:cb:9f:ed:
                    47:cf:ce:8c:b6:19:06:cf:b4:f2:aa:fe:7d:13:b4:
                    fa:d4:05:5e:0a:e7:17:e8:be:08:90:87:e2:1e:32:
                    71:2b:a7:bb:4a:60:9b:b4:1a:15:23:a9:f3:be:4a:
                    96:06:23:96:0b:a9:0b:34:5c:14:21:69:6a:f8:1f:
                    38:00:5e:81:5b:8d:1c:eb:84:68:ae:2f:49:af:5c:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EE:B5:DF:FA:EC:9B:FA:06:90:98:62:06:3A:99:27:24:C8:7E:8C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ce613_rsm_oGkJhiBjqZJyTIfow.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:eb:79:6e:39:e7:95:b1:00:ee:f3:4c:90:17:d1:8c:d6:79:
         55:dc:56:a3:a5:d1:0a:6c:d9:ce:fa:f3:83:0f:d1:49:76:0c:
         96:26:0c:bc:4e:82:c0:67:7f:50:9f:2c:06:4a:c4:52:04:6f:
         75:2c:9c:53:6a:76:a2:55:fe:68:78:7d:94:e5:f3:49:4b:c4:
         71:23:38:9e:c3:a9:30:e6:e3:d0:b0:4e:bb:29:9c:f7:0a:6d:
         c0:35:4e:a0:f6:f4:35:1e:93:6f:f9:3c:1c:5c:51:2d:62:65:
         b1:e5:85:2c:cf:bd:ff:1e:0c:61:db:0f:5c:2f:f9:47:da:0a:
         d2:cf:e4:f0:3c:98:b9:95:ab:ae:10:37:6d:a8:9d:28:63:6e:
         a6:cd:46:ad:71:1c:8e:5a:ef:82:1d:fc:57:21:a7:ea:ab:ae:
         e4:34:85:15:f4:15:e2:e2:84:eb:99:59:b9:a4:9a:a6:aa:72:
         40:b3:e4:6a:12:f5:f7:04:db:20:25:d2:e8:ac:e4:db:6f:08:
         f2:c9:55:12:3d:56:e5:1b:48:e8:e2:9f:d7:d6:b4:58:54:6f:
         b3:32:11:b6:e5:24:eb:50:4c:87:41:e5:ac:6e:b2:f5:e7:d0:
         1f:83:b8:af:d2:32:14:0b:09:2d:1b:f2:32:c6:e6:1d:4c:98:
         bb:57:93:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:43:29 2025 by rpki-client