Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ko_w_kTWVcPfu-FqDMqaEGVJL3c.roa
File:                     ko_w_kTWVcPfu-FqDMqaEGVJL3c.roa (raw, json)
Hash identifier:          4Dc9WNto1FaVK3XmynjCVr2MmDG5y5Db3r98n2mixZE=
Subject key identifier:   92:8F:F0:FE:44:D6:55:C3:DF:BB:E1:6A:0C:CA:9A:10:65:49:2F:77
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03B1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ko_w_kTWVcPfu-FqDMqaEGVJL3c.roa
Signing time:             Thu 01 May 2025 01:40:29 +0000
ROA not before:           Thu 01 May 2025 01:40:29 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.135.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:29 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=928FF0FE44D655C3DFBBE16A0CCA9A1065492F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:68:37:f5:5e:42:e8:72:b5:9d:85:dd:a5:
                    9e:2c:e3:22:a8:41:63:b4:ce:51:13:0c:15:fe:26:
                    38:74:0c:9c:43:aa:d7:a8:50:0d:3d:73:26:5c:41:
                    06:82:ab:8b:8b:6f:d5:43:0c:d3:3f:bd:de:26:1d:
                    92:c2:40:1c:3b:4d:23:e7:a7:f0:ba:4b:f8:c2:4a:
                    df:a0:9c:17:6f:b9:4f:b4:27:6b:5a:b5:17:7c:2c:
                    1f:20:41:9b:a8:e3:d5:cb:b7:cf:f7:d2:a6:ad:22:
                    2d:ed:04:c6:2d:fa:84:77:93:af:15:2f:b2:8b:e8:
                    80:67:0b:25:d6:27:bd:28:0d:3e:e0:31:89:7c:0f:
                    e2:0f:9d:59:f0:97:05:04:c6:6d:ad:e9:6d:59:12:
                    c6:3e:42:e3:68:20:dd:49:fe:ae:2d:12:ed:ca:ed:
                    93:5c:ad:05:99:09:34:3f:d6:0d:3b:61:60:e1:5d:
                    3a:d4:13:31:4f:ad:7b:e8:af:77:18:e7:7a:7c:6a:
                    88:71:d8:e0:81:24:17:ac:48:01:d4:0c:07:a7:c3:
                    93:2a:8a:f5:f0:15:a7:63:65:ef:ab:05:7d:a2:47:
                    39:a7:66:3d:71:21:b0:7d:9a:bd:c8:c3:d2:73:89:
                    51:10:47:dc:a8:9b:ea:ec:80:7f:c6:e1:7f:d4:c1:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8F:F0:FE:44:D6:55:C3:DF:BB:E1:6A:0C:CA:9A:10:65:49:2F:77
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ko_w_kTWVcPfu-FqDMqaEGVJL3c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:77:5b:00:38:84:8a:59:21:dc:be:02:6c:56:8c:e4:8a:ce:
         ba:b5:29:ef:6f:e5:05:4a:52:87:20:40:60:c4:81:3c:24:9d:
         d7:ae:bf:c7:35:2d:0d:2b:f1:9c:33:59:90:00:33:5f:2f:d9:
         43:a6:eb:7c:ba:52:fd:52:75:29:81:8e:2e:cb:1a:ce:b6:85:
         5b:7f:6b:c5:54:bc:8e:62:81:24:71:9f:af:6e:d7:2b:e8:db:
         76:00:92:72:5b:01:7d:ab:64:f7:ed:71:4b:1c:97:24:d0:a0:
         65:03:75:32:49:44:e2:a8:04:03:6c:ae:4d:1f:3d:c8:87:85:
         b2:b8:a9:a1:29:93:f3:fd:55:19:39:3a:20:ee:0e:c0:71:bc:
         63:c1:3c:2d:bc:47:13:09:87:fb:97:74:c5:80:85:2b:48:e8:
         45:2e:26:85:2c:ed:5d:b7:41:ae:0d:7b:d1:a9:3d:fc:5a:54:
         52:ca:ec:24:e1:82:7a:48:30:ce:98:5f:69:17:6d:91:e2:e8:
         8c:be:52:39:e3:10:22:98:f5:b5:8c:d2:cc:30:83:13:6b:f9:
         b8:a9:29:99:11:fe:de:78:b7:3b:20:54:26:64:40:16:95:6d:
         13:f9:7e:1a:9a:ad:91:9c:33:d9:59:c1:58:90:73:14:ef:56:
         9d:ab:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:07:40 2025 by rpki-client