Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/sK50_Q7PZqp3VZXYLqMmempFO5w.roa
File:                     sK50_Q7PZqp3VZXYLqMmempFO5w.roa (raw, json)
Hash identifier:          UyRMzNwHBCAgQDnRNlThPkRwTsrbcGeaoKvlx4Z4RrA=
Subject key identifier:   B0:AE:74:FD:0E:CF:66:AA:77:55:95:D8:2E:A3:26:7A:6A:45:3B:9C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0363
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sK50_Q7PZqp3VZXYLqMmempFO5w.roa
Signing time:             Thu 01 May 2025 01:33:22 +0000
ROA not before:           Thu 01 May 2025 01:33:22 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.120.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867 (0x363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:33:22 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B0AE74FD0ECF66AA775595D82EA3267A6A453B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:9d:e1:f9:52:cf:5a:0c:bf:76:4a:90:30:
                    66:61:d9:34:fa:56:9b:8e:bb:87:9b:37:9f:6a:e8:
                    df:c2:9e:85:03:6c:53:4c:1a:65:73:fb:09:95:64:
                    bc:99:25:37:68:ac:b9:aa:6b:59:ba:bb:e4:c2:e9:
                    d1:6d:98:8b:fa:35:6c:1b:db:2a:74:68:58:e9:af:
                    65:f4:60:3e:5d:7f:77:cf:26:f7:dd:43:02:69:64:
                    c7:c1:8b:2c:53:9d:95:36:3a:25:2a:7a:fd:82:fb:
                    5c:2b:06:7d:76:7a:9f:66:b0:aa:9c:aa:ac:5f:2c:
                    8a:d9:57:0f:a6:ad:25:c9:84:13:f8:35:2c:e2:2e:
                    df:65:a8:7d:e7:e2:ea:46:c8:d5:82:94:1b:d4:b0:
                    03:11:a7:b0:eb:24:b0:9f:c0:50:dc:af:c0:9e:67:
                    3d:72:9f:9c:74:e5:20:0b:4d:f9:e4:ba:45:30:9a:
                    bf:8b:6b:f7:9e:08:c0:fb:77:de:c3:37:8d:9b:41:
                    68:40:c7:32:c0:d5:99:70:bd:da:3f:55:57:c7:37:
                    2d:32:1d:08:f8:1b:47:58:a0:5a:84:40:38:c3:f5:
                    a0:8c:e4:62:90:99:91:f3:e0:ee:8b:a2:c4:90:73:
                    95:e9:e3:c2:85:87:b6:b9:e3:b3:ec:07:1e:b0:46:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AE:74:FD:0E:CF:66:AA:77:55:95:D8:2E:A3:26:7A:6A:45:3B:9C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sK50_Q7PZqp3VZXYLqMmempFO5w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.120.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:7b:98:ac:c2:0e:e4:5c:30:b8:3e:80:32:fd:e4:1d:11:
         5f:50:f7:75:96:11:61:2e:f3:cc:27:b8:10:44:05:f5:71:a9:
         2d:9c:97:35:b3:6e:67:b4:08:ed:5f:9e:0e:69:13:d5:ff:c5:
         98:08:3e:aa:06:13:40:95:6e:0b:8c:5c:8f:a8:1d:f5:e5:c0:
         3f:26:97:5b:a7:48:1a:b3:55:2e:ca:4b:56:bc:ab:78:bc:a2:
         87:fa:01:60:98:67:38:b7:a0:6a:6d:c8:1b:b3:9d:83:b6:2a:
         f0:5c:05:a6:57:08:57:44:b2:a7:f3:3f:c4:dc:d7:37:5c:0e:
         65:b8:fd:07:5a:22:bd:56:e3:f4:8b:6a:82:5a:a2:e8:78:96:
         3b:22:58:7c:36:58:fc:39:18:55:d9:be:20:b4:84:54:69:e3:
         31:c7:ee:92:4a:65:c6:a3:14:cf:cf:01:cb:08:ab:98:4e:b7:
         c8:d4:e1:eb:66:3b:f2:b9:0b:89:fe:2d:b4:d1:7b:2b:85:a4:
         ab:ae:09:30:b0:51:39:f0:3b:df:27:70:7a:3c:c9:bb:69:44:
         31:1b:99:6e:15:ca:34:28:cd:f6:8c:a7:67:53:c9:1f:f2:47:
         e3:9a:49:06:1f:5f:7b:43:d2:9e:22:47:da:30:8a:81:ee:cb:
         bd:68:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:12:51 2025 by rpki-client