Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/jvr2-7D_CAcSrB3BgB-CQ2urCvc.roa
File:                     jvr2-7D_CAcSrB3BgB-CQ2urCvc.roa (raw, json)
Hash identifier:          LcFOMydN4CQr1ggZtIjgoIPCIBXipd4AmucKXpXui4k=
Subject key identifier:   8E:FA:F6:FB:B0:FF:08:07:12:AC:1D:C1:80:1F:82:43:6B:AB:0A:F7
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       037A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jvr2-7D_CAcSrB3BgB-CQ2urCvc.roa
Signing time:             Thu 01 May 2025 01:33:32 +0000
ROA not before:           Thu 01 May 2025 01:33:32 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        122.145.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:33:32 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=8EFAF6FBB0FF080712AC1DC1801F82436BAB0AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:38:f4:c8:1b:41:01:5c:93:80:cd:60:51:
                    9c:ec:e7:19:48:58:35:3d:bc:20:11:8e:38:9a:c5:
                    44:51:d7:77:39:94:ef:6f:20:17:0e:50:68:15:45:
                    d4:e7:d7:2f:c2:84:e4:b0:ea:f4:c3:8f:c1:d6:26:
                    b5:fc:c8:c4:e1:72:55:ca:35:1e:56:81:2d:02:d9:
                    63:71:35:c0:18:20:2f:00:2f:2e:e4:ba:43:e0:74:
                    6b:98:75:8d:44:30:4a:7b:c9:f3:50:bc:35:0e:ca:
                    30:58:66:a1:41:3c:6b:91:12:68:50:27:3a:c3:5d:
                    4c:d9:84:4d:af:00:32:24:ea:92:6b:1e:85:44:70:
                    7b:d2:3a:6a:a1:c5:85:30:5e:06:31:69:5e:10:67:
                    ce:6a:b4:c8:65:76:54:0b:9c:a3:2f:41:a1:d7:35:
                    7c:67:4b:35:de:17:06:9d:fa:6b:80:c1:03:39:87:
                    14:90:7d:40:9b:6e:c3:cf:c8:18:6d:60:6e:ed:9a:
                    60:3e:1b:c1:2e:ca:d6:80:3f:9a:0d:36:fa:ca:93:
                    f9:b5:54:7f:b6:5e:3f:35:c7:da:c5:f5:bb:4d:ab:
                    bf:f5:17:17:6b:f3:a3:31:03:69:1a:77:f9:28:dc:
                    12:18:d5:32:e9:75:bc:70:16:0c:4c:f7:e6:f0:8c:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:F6:FB:B0:FF:08:07:12:AC:1D:C1:80:1F:82:43:6B:AB:0A:F7
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jvr2-7D_CAcSrB3BgB-CQ2urCvc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:15:35:5e:c2:d5:35:4b:09:f1:f8:10:86:b0:d6:5a:ca:9f:
         b8:44:17:f1:3c:dc:a4:87:2e:0f:29:3f:6c:1f:d8:77:5c:d0:
         83:ca:f9:06:a4:b5:72:9a:73:0a:8f:93:32:89:ca:8a:18:34:
         d1:31:fc:8c:9f:0c:b0:94:0d:a7:f1:dd:22:b8:ae:c3:e9:13:
         fe:ce:79:ce:75:a9:de:78:44:bf:90:9b:e8:4f:4b:a7:e4:8a:
         ba:4c:25:8d:69:9f:14:4c:03:65:52:83:68:5e:51:81:f5:19:
         f8:ed:c1:45:8f:9c:57:08:6e:34:a9:2f:97:49:ad:1a:52:5d:
         41:8d:72:01:e9:c7:fc:84:2a:b2:7e:fa:d9:ab:c4:24:e6:ca:
         cc:ce:80:a5:ff:d2:e9:42:b0:82:46:f9:0e:d9:f7:a3:34:d6:
         df:b3:27:4e:be:6d:ef:7e:34:ad:8a:66:40:8b:65:cf:e3:74:
         2f:e6:c6:34:42:ac:5b:e4:56:4c:40:c8:cf:61:1b:1a:0d:5d:
         27:cb:43:ca:59:72:57:0d:a9:c7:58:03:62:bf:1c:f8:99:b9:
         f4:40:65:28:a0:e8:42:37:10:e5:f3:7d:a6:87:9b:64:1b:28:
         84:22:d3:13:66:fb:1c:2b:31:5b:d1:33:d2:17:e1:87:b1:f5:
         55:7c:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:28:16 2025 by rpki-client