Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/NLN94n_0zz48E7ns58svHZ8vu_8.roa
File:                     NLN94n_0zz48E7ns58svHZ8vu_8.roa (raw, json)
Hash identifier:          jCQveEFRp25e7CTrhehl8EFsp0Yaz9dpiH3Iglod0DI=
Subject key identifier:   34:B3:7D:E2:7F:F4:CF:3E:3C:13:B9:EC:E7:CB:2F:1D:9F:2F:BB:FF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       036B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NLN94n_0zz48E7ns58svHZ8vu_8.roa
Signing time:             Thu 01 May 2025 01:33:25 +0000
ROA not before:           Thu 01 May 2025 01:33:25 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.132.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:33:25 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=34B37DE27FF4CF3E3C13B9ECE7CB2F1D9F2FBBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:da:0e:a5:36:b1:dd:d0:8e:09:e9:7d:65:
                    eb:6a:68:d6:79:53:5c:85:3f:5e:13:a3:b2:52:2a:
                    c6:cb:ba:0f:2d:27:cc:51:d2:8b:2b:ad:d9:13:28:
                    b5:74:85:69:90:07:56:24:46:70:3e:bf:1e:dc:35:
                    5d:6a:9a:37:06:26:9f:ed:0d:90:3a:88:73:9d:0c:
                    04:29:b9:b9:4a:1d:5c:48:53:1d:d2:9c:71:89:b1:
                    99:6b:bb:96:80:ce:7f:24:cb:ca:9a:63:85:37:97:
                    34:c4:bc:a9:5e:35:84:bf:da:b1:d1:c0:d2:62:e0:
                    d9:60:fe:be:9b:73:33:b9:7a:ba:cb:a1:8d:d4:f9:
                    fc:22:c2:fc:ef:8a:10:10:7c:69:2a:64:d6:21:c1:
                    6f:53:4a:fa:3a:b4:53:4a:76:bd:ec:b8:9e:d7:33:
                    1a:5b:34:14:97:72:78:ca:cc:3f:73:1b:3e:9a:df:
                    a0:25:19:45:1a:ea:5d:0d:14:43:10:d4:46:07:43:
                    fa:f3:de:7b:63:09:e5:52:37:fa:5b:c4:55:a8:88:
                    cf:27:77:4d:51:02:fa:50:e9:e4:f6:e4:d2:02:f2:
                    b9:b9:fd:f0:ec:e5:e0:23:48:20:95:7c:0a:d2:e3:
                    42:d8:cf:db:bf:79:be:7a:de:15:c5:90:a6:4c:99:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B3:7D:E2:7F:F4:CF:3E:3C:13:B9:EC:E7:CB:2F:1D:9F:2F:BB:FF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NLN94n_0zz48E7ns58svHZ8vu_8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:e3:92:91:6c:ca:e2:e7:96:7b:02:89:10:90:5d:c3:ed:
         c3:c6:39:7a:7f:7b:90:2a:80:e5:bb:8a:3b:f8:ca:e4:2e:8d:
         8d:e4:ab:22:07:a7:d7:f7:3d:22:49:68:a9:f9:cb:4e:d6:ce:
         02:42:49:d7:ed:a7:6e:e5:ef:71:4b:c4:fc:b6:de:8a:6a:d6:
         2c:e4:93:0b:ae:62:b9:76:65:85:c9:19:1f:c6:e6:03:2b:08:
         a8:39:16:d8:ce:8e:b7:b9:1f:ba:a9:b5:2f:51:9c:ee:99:f7:
         25:d4:88:f4:ad:b1:1c:b7:cf:2c:94:e5:a6:fd:f5:a4:bc:87:
         89:be:16:ba:e8:dc:16:93:eb:7a:e6:62:52:8e:c8:e9:34:44:
         35:e4:9b:20:e1:79:e0:b7:7e:f0:60:a5:e2:1e:f4:0d:9e:6c:
         86:37:b0:ae:bb:e0:27:f8:3f:d5:74:55:2c:e7:e2:0b:27:ce:
         86:ed:30:e0:d7:9e:08:96:51:de:4b:e4:e9:0d:1e:bb:2f:fb:
         d8:57:be:0f:1c:92:ad:64:5e:24:6c:c3:ff:03:d6:52:f4:65:
         af:9e:be:00:cd:b6:7c:a8:08:59:2b:bb:25:40:7d:69:e3:9d:
         d4:40:03:6f:51:2d:e3:4f:98:53:5a:14:b3:fe:f0:97:10:ff:
         78:04:3b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:31:49 2025 by rpki-client