Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/nO6oA5Fyml_QjY4TNNPaZPEQj1Q.roa
File:                     nO6oA5Fyml_QjY4TNNPaZPEQj1Q.roa (raw, json)
Hash identifier:          C5sv3fjVkj8X75wInYzyHpbSEBykWj5aRT/p5fs9xFY=
Subject key identifier:   9C:EE:A8:03:91:72:9A:5F:D0:8D:8E:13:34:D3:DA:64:F1:10:8F:54
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       041F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nO6oA5Fyml_QjY4TNNPaZPEQj1Q.roa
Signing time:             Thu 01 May 2025 01:48:46 +0000
ROA not before:           Thu 01 May 2025 01:48:46 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        182.236.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 06:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055 (0x41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:46 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=9CEEA80391729A5FD08D8E1334D3DA64F1108F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:04:43:5e:26:ef:07:57:17:ec:32:3f:85:
                    4d:ef:64:f5:e4:b1:5e:50:23:37:4e:1f:b3:47:59:
                    77:90:af:fc:04:a5:a1:09:a8:40:08:31:a9:d5:74:
                    49:f3:f9:5b:5f:a0:8d:30:26:c4:26:03:24:c0:37:
                    03:02:ab:9d:48:a8:8a:91:6a:82:2e:9f:8e:21:0f:
                    3e:55:37:72:5d:ef:19:21:9b:1a:b1:08:1e:e9:c4:
                    e1:85:b6:64:84:a5:ee:7b:28:07:06:84:87:eb:0e:
                    41:1b:56:2e:bf:ce:4e:d6:93:b1:6b:a1:b2:d5:46:
                    a3:e6:64:13:05:22:95:a1:e5:8d:cd:03:00:1d:a6:
                    70:4d:e1:e1:90:bb:97:d0:f5:86:df:fd:9e:6b:5e:
                    8c:67:c8:b2:b0:39:4e:ab:90:f6:8f:c1:c7:f2:1a:
                    0a:68:f1:b5:47:01:f8:98:10:e9:3a:33:db:35:12:
                    81:93:8a:16:7b:e6:e4:9c:2f:f7:37:bd:6d:37:42:
                    09:4f:95:03:d2:81:92:95:96:cc:d8:29:d6:aa:a7:
                    a5:e7:f9:1e:77:8e:05:a0:e5:bd:8b:a6:00:40:00:
                    b1:ae:b4:36:07:b1:11:1b:2c:31:3b:6f:b8:71:62:
                    ff:ec:e1:11:ac:b5:8b:9f:8f:71:90:35:3e:21:3d:
                    05:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EE:A8:03:91:72:9A:5F:D0:8D:8E:13:34:D3:DA:64:F1:10:8F:54
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nO6oA5Fyml_QjY4TNNPaZPEQj1Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:65:c8:6e:9a:21:ae:e2:fa:eb:ce:d2:d2:23:ee:03:72:f1:
         c0:f6:49:83:1e:ad:f8:2c:be:49:30:fb:b1:87:6b:fe:de:24:
         18:d6:54:d8:7f:19:3d:47:aa:30:47:06:d0:4e:43:be:ce:4d:
         b5:a6:f0:e4:fc:f9:0a:b6:80:f8:21:e0:b9:39:fd:a9:1c:2b:
         76:1a:09:76:19:b3:dd:47:9f:d9:55:b0:01:77:75:c6:b6:ad:
         42:e8:6d:7b:f5:52:06:5b:76:ba:fc:83:70:a9:43:e5:84:19:
         53:8d:19:3b:0c:d5:1d:13:30:25:b2:34:79:82:14:5f:77:b7:
         c6:51:0b:30:7c:19:e2:0a:7c:fa:c2:69:64:c0:5e:b7:14:e1:
         e1:41:17:56:f4:03:76:f6:e4:b7:90:a8:ad:a9:6b:b2:9d:57:
         cf:ef:18:58:d0:84:b2:f2:73:e6:23:de:d9:63:99:5b:9b:12:
         bb:3a:a0:f3:9c:38:db:91:df:38:ee:f1:2b:de:c5:bc:3f:b0:
         aa:20:8e:72:7d:9a:a4:4f:fc:d1:87:06:a4:81:40:dd:0c:3a:
         a0:e8:36:32:50:b2:d5:f0:88:0b:67:42:0e:3c:d2:4e:3e:2e:
         e7:b5:e8:0d:35:8c:cd:d4:b9:b0:6f:aa:80:3f:3b:a4:9e:3e:
         f3:34:02:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 11:55:00 2025 by rpki-client