Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bbHOSW6aGkq36O2thcgYd7LuZbQ.roa
File:                     bbHOSW6aGkq36O2thcgYd7LuZbQ.roa (raw, json)
Hash identifier:          9CN+KHYZoScnxtnTlbjH0eZS+AzuXdauNLZ3vQXk8sc=
Subject key identifier:   6D:B1:CE:49:6E:9A:1A:4A:B7:E8:ED:AD:85:C8:18:77:B2:EE:65:B4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03AB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bbHOSW6aGkq36O2thcgYd7LuZbQ.roa
Signing time:             Thu 01 May 2025 01:40:26 +0000
ROA not before:           Thu 01 May 2025 01:40:26 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        210.170.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:26 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=6DB1CE496E9A1A4AB7E8EDAD85C81877B2EE65B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:ed:14:70:1c:32:8a:2f:90:9b:64:49:7a:
                    d7:4b:ce:35:fa:52:e8:40:19:22:4a:c8:37:41:3a:
                    f8:8e:56:22:8f:f5:d9:96:39:9c:79:f0:6f:3c:4a:
                    e1:58:ce:0d:fb:dc:c3:c9:a4:56:a0:9f:4c:36:8a:
                    12:7a:fc:cd:3f:77:39:89:75:26:d2:e1:66:15:79:
                    c2:86:94:c2:07:51:9b:12:78:d8:60:84:81:b3:8b:
                    9e:c6:fc:fb:64:9a:71:91:f6:04:e5:4c:e0:cc:e0:
                    32:16:fe:30:48:a3:43:fe:ad:43:12:58:b3:19:ff:
                    73:79:6f:bb:3e:1a:e2:fd:22:c0:4e:f0:40:ba:b7:
                    1e:22:03:00:f5:c8:63:f3:2e:66:0f:47:62:e8:57:
                    9a:bf:69:df:1e:60:0f:6a:56:09:8d:d5:f3:c7:09:
                    a5:33:e2:1e:02:32:82:01:b7:05:9a:b4:9c:9a:23:
                    36:18:a5:be:ad:f3:bc:7d:bc:f2:b2:85:71:df:9f:
                    91:e5:c3:e4:17:24:61:59:ff:39:b7:75:a9:03:83:
                    11:7e:67:49:9b:71:7d:a3:07:9c:b2:da:85:83:c7:
                    49:47:f9:8d:fe:9d:f0:ae:26:aa:ea:f7:56:24:ea:
                    04:d1:b3:5e:b2:2e:26:30:85:35:c3:16:2d:b2:97:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B1:CE:49:6E:9A:1A:4A:B7:E8:ED:AD:85:C8:18:77:B2:EE:65:B4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bbHOSW6aGkq36O2thcgYd7LuZbQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         53:33:94:ce:a6:fe:fc:5a:f8:ab:14:66:a8:5f:35:d7:d9:1c:
         09:88:92:cc:78:0c:9b:8d:ea:4d:30:a2:c5:07:44:e7:8f:62:
         42:15:74:04:5b:bb:df:22:8c:ff:a6:99:74:54:fb:ac:e2:4c:
         e6:c9:1b:04:f8:f8:17:a4:71:9b:0c:b6:9d:c2:ae:83:11:47:
         70:4f:c9:a0:d7:0f:a7:08:9f:e7:00:85:bc:81:54:1e:a9:f3:
         14:08:57:f5:35:84:85:e8:f7:e2:03:82:d5:eb:bf:04:f8:8e:
         7e:4b:e3:94:78:fc:33:0f:fb:6e:03:ea:06:8b:54:ae:68:b2:
         a8:86:b9:c8:82:cf:f2:8d:cb:6d:f2:90:e8:27:54:c7:82:8e:
         36:7d:3e:be:69:ba:36:ab:4b:55:67:0e:ae:0a:77:69:96:a0:
         20:2a:a1:8d:c3:6b:b3:81:b1:50:de:63:2e:c4:ed:ee:fb:d4:
         41:72:68:30:6e:8e:d2:44:bc:bb:d0:19:42:cf:15:57:a5:c8:
         5a:60:97:9d:75:8e:60:f6:51:ef:09:00:eb:6f:3a:29:07:1a:
         a2:1e:36:62:a6:b0:d1:1e:f1:05:86:42:5f:2a:0e:14:60:f0:
         62:c1:d0:f8:7b:59:80:9e:bf:60:8b:f8:3c:a1:19:84:1a:e3:
         79:f6:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:03:27 2025 by rpki-client