Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/t9s45lJTHjJmipKH6Ck3_tYvT9M.roa
File:                     t9s45lJTHjJmipKH6Ck3_tYvT9M.roa (raw, json)
Hash identifier:          Jv8xnZVhfguEIjt5YBIIbJVSdv4iI1CjwdnszLJiEEI=
Subject key identifier:   B7:DB:38:E6:52:53:1E:32:66:8A:92:87:E8:29:37:FE:D6:2F:4F:D3
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03DB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/t9s45lJTHjJmipKH6Ck3_tYvT9M.roa
Signing time:             Thu 01 May 2025 01:42:48 +0000
ROA not before:           Thu 01 May 2025 01:42:48 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        110.2.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:42:48 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B7DB38E652531E32668A9287E82937FED62F4FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:c3:a6:04:f8:86:9f:1e:7a:cb:f9:e6:1c:
                    60:dd:6d:5c:c8:bf:94:0b:b7:5d:a8:d7:5c:3d:1f:
                    4d:4d:16:73:b6:75:c8:3e:ba:05:84:24:94:19:e1:
                    69:e7:fd:a7:34:49:af:03:2c:61:41:11:d0:aa:0f:
                    b1:71:fe:22:e9:db:c6:55:d0:91:36:bb:d3:4e:fc:
                    95:d8:ec:b2:55:55:d9:dc:21:40:5c:17:7e:8a:4b:
                    e2:5c:23:8b:47:c8:02:65:dd:b3:0a:cc:d4:c6:6d:
                    81:e1:f8:4e:eb:9e:ff:7f:a7:9e:5c:35:10:fd:ce:
                    fd:d0:7b:5b:8c:ad:44:cc:ad:43:b0:11:a2:f2:1f:
                    47:dc:93:df:b3:bd:47:cc:1e:4a:07:3e:db:d9:19:
                    89:e5:0f:26:68:58:fd:39:fc:ae:c6:97:3c:cb:35:
                    72:63:92:97:cb:41:fc:6d:9c:d4:0a:eb:3c:fb:1e:
                    68:10:a9:48:3c:a4:55:e9:19:a2:e4:bc:0c:e6:e6:
                    10:23:eb:0f:68:a2:a9:17:95:89:bf:0b:fc:9f:7a:
                    df:4c:9b:8d:ce:04:0e:1e:c6:da:1e:a5:c7:9d:50:
                    10:9e:2a:75:10:5a:63:43:e7:33:68:56:19:7f:8d:
                    29:ff:f4:84:ef:41:4f:6a:af:7b:30:97:de:72:d1:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:38:E6:52:53:1E:32:66:8A:92:87:E8:29:37:FE:D6:2F:4F:D3
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/t9s45lJTHjJmipKH6Ck3_tYvT9M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.2.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         79:c1:b3:e0:ae:13:1e:8f:1f:e4:29:e9:21:17:2d:19:d2:e3:
         6b:41:ac:2d:2c:22:7d:b7:8b:96:2e:8f:e8:94:ef:38:2e:f1:
         32:18:e1:8c:75:c1:24:30:b4:4f:e2:42:8e:1d:9f:4f:8c:6d:
         ae:8d:aa:9f:6c:9c:33:73:44:86:47:e8:09:52:84:d8:da:90:
         a2:9f:8e:d9:39:07:bc:6b:fb:f5:f4:1b:5c:52:b5:7b:72:eb:
         70:a9:cf:bc:69:c3:54:b7:c2:28:4e:47:2b:70:ca:f6:1c:70:
         09:d9:04:93:de:0e:60:5e:b1:91:b1:a1:61:20:fc:56:5d:17:
         c3:3e:cc:80:00:0a:83:27:1d:fa:ba:7f:be:44:d8:31:e8:21:
         03:a7:c3:38:70:56:6b:d8:56:b8:9f:07:67:11:ea:42:41:f4:
         f4:66:b8:ae:66:0c:3d:e8:d6:00:36:f9:08:4c:36:d6:b6:ee:
         7b:cf:d0:ae:c1:84:7e:06:fc:10:e1:33:07:b0:db:f8:b7:39:
         59:ed:77:55:42:66:18:e4:d1:6b:0b:9d:cc:7d:c3:9a:e3:c2:
         75:43:b7:64:cc:dd:8d:b5:4d:02:c2:df:5a:7b:35:b6:b2:b9:
         85:8b:42:8b:fe:7b:e5:23:f5:6b:ec:f6:ea:cf:89:23:2e:ed:
         ff:d7:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:19:09 2025 by rpki-client