Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/W1bZphTIV1jKyBScBJgfwKhfg40.roa
File:                     W1bZphTIV1jKyBScBJgfwKhfg40.roa (raw, json)
Hash identifier:          uagfuxiD49pf33boud4kGqc0pDeAQwIVEtLZ1+MfZ6w=
Subject key identifier:   5B:56:D9:A6:14:C8:57:58:CA:C8:14:9C:04:98:1F:C0:A8:5F:83:8D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03BA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/W1bZphTIV1jKyBScBJgfwKhfg40.roa
Signing time:             Thu 01 May 2025 01:40:33 +0000
ROA not before:           Thu 01 May 2025 01:40:33 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        49.242.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:33 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=5B56D9A614C85758CAC8149C04981FC0A85F838D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:e4:00:a4:44:6c:ab:f6:d9:55:97:aa:1e:
                    af:8c:90:48:b6:88:a1:83:68:de:f4:2f:2b:16:8a:
                    d1:df:47:3e:e1:30:db:dc:2e:53:63:22:99:5a:e7:
                    70:08:32:be:c9:e1:07:28:c0:6d:d0:95:5c:eb:4e:
                    e7:9b:58:71:2f:73:8e:b4:ab:c5:90:07:9e:ff:43:
                    a4:4f:97:92:29:03:47:f8:36:0b:11:8b:31:29:4b:
                    e4:f7:88:b1:b6:34:6f:98:70:c6:3f:99:92:48:7b:
                    35:07:d3:d2:55:75:15:a8:5d:35:d4:d1:c7:bb:d1:
                    7b:7c:ac:89:51:7d:99:00:79:18:32:1e:cd:be:ac:
                    37:f4:d3:e8:15:c6:75:69:4d:50:99:b7:9a:98:db:
                    f7:e4:a6:09:7f:a8:4f:b9:37:84:cb:6b:c7:61:12:
                    05:0d:02:54:2f:31:7c:94:d0:78:50:ad:86:43:37:
                    e8:c3:9e:6d:71:94:b1:a0:6d:10:29:a5:61:84:5f:
                    9c:4d:d3:fb:01:e1:bd:f1:80:c0:2d:2b:50:23:34:
                    d6:05:07:de:6b:de:bb:85:2b:2a:db:0a:ff:9c:31:
                    00:e8:46:d8:82:bb:c3:e9:6b:9c:47:d0:f4:aa:ef:
                    b5:1d:58:17:1b:b9:41:cf:b1:30:f4:8b:b0:81:69:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:56:D9:A6:14:C8:57:58:CA:C8:14:9C:04:98:1F:C0:A8:5F:83:8D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/W1bZphTIV1jKyBScBJgfwKhfg40.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.242.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:a6:ec:81:bd:11:54:5d:a6:84:4c:27:a4:26:99:23:37:
         d7:58:15:c3:e1:cf:63:bc:b5:71:5d:3d:35:6e:ac:5f:09:e8:
         2d:24:f0:f9:0b:e1:75:e1:e6:a7:d2:98:04:6e:58:84:8d:ce:
         b8:5b:32:f9:39:6d:61:90:ea:b2:a8:f4:0b:f7:f2:36:f3:79:
         99:1d:76:ff:85:1f:ea:3e:b7:b8:69:47:14:69:4a:a6:9c:08:
         28:35:4d:1f:af:40:98:8d:03:a6:fd:b6:34:eb:a1:0c:d8:81:
         6b:64:b4:39:3d:2c:41:5a:a7:c2:06:92:db:ed:55:ff:c2:48:
         63:ce:74:78:60:b7:8e:f3:74:85:fa:fc:9e:f1:1f:eb:71:50:
         97:2d:26:a8:41:dd:65:f2:e3:09:3f:6c:7d:43:1d:f8:6f:bf:
         0f:74:00:62:39:51:52:d2:61:da:12:b2:9c:6e:b0:ad:4d:ea:
         0b:f9:2f:a2:e4:1e:60:93:53:c0:29:0b:a4:e7:d1:75:5e:39:
         67:ab:65:e2:2a:84:ce:a9:5c:81:f0:82:97:76:75:18:b7:a3:
         c1:fa:27:04:b5:4f:e3:9b:f2:78:1c:e7:66:39:21:e5:b9:e5:
         9d:fd:36:72:8a:c6:83:43:2e:40:37:7e:60:1f:2e:44:16:3a:
         e9:9f:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 18:46:56 2025 by rpki-client