Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/uL_Vay4GtzOi0NJa9QDMA7U2goE.roa
File:                     uL_Vay4GtzOi0NJa9QDMA7U2goE.roa (raw, json)
Hash identifier:          Uzw1LcoYIJqpoGdj120ZWJBlK0Gik11qhafrQXkso8Q=
Subject key identifier:   B8:BF:D5:6B:2E:06:B7:33:A2:D0:D2:5A:F5:00:CC:03:B5:36:82:81
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0404
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/uL_Vay4GtzOi0NJa9QDMA7U2goE.roa
Signing time:             Thu 01 May 2025 01:45:25 +0000
ROA not before:           Thu 01 May 2025 01:45:25 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        175.103.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 13:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:45:25 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B8BFD56B2E06B733A2D0D25AF500CC03B5368281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:01:04:7c:7d:95:34:d9:f3:a8:77:12:c4:
                    e1:28:cf:ea:7f:c7:e4:5d:90:53:00:de:58:aa:e8:
                    bb:1d:08:4d:d8:07:b9:a9:09:d4:e7:f9:f0:59:78:
                    8b:12:29:4c:eb:dd:6d:69:9b:a7:c6:46:16:e6:8d:
                    a6:06:a7:27:02:71:95:bd:6e:6e:3d:18:d0:7e:5b:
                    67:28:21:e0:d9:7d:48:f6:ad:d5:aa:b0:12:39:59:
                    e7:1c:ad:f7:ea:5a:6a:23:25:08:3b:e9:32:fb:2d:
                    6b:f6:a0:3b:39:b5:33:0e:f9:c9:f9:4c:f2:b6:60:
                    10:62:db:ed:53:1e:ad:7c:ba:40:30:45:50:41:57:
                    d7:8e:cd:d1:47:b6:39:26:d8:49:42:6a:e8:06:a0:
                    97:88:59:bb:d4:61:1a:ab:4c:33:a5:5a:bb:55:be:
                    c8:be:63:51:50:52:ea:70:79:72:49:75:b2:00:a6:
                    e5:5e:03:b5:80:0f:96:03:9a:a4:eb:ab:60:15:58:
                    8a:ff:d1:ec:5e:0b:5f:0e:18:c1:e4:93:4e:9c:dc:
                    de:ce:cb:2e:00:50:be:0e:d5:20:98:05:c5:fc:85:
                    01:8a:5b:df:6c:1a:d1:ba:54:96:19:3d:c7:bd:e7:
                    8b:19:74:79:83:57:86:fc:c3:e6:2d:45:f0:3d:09:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BF:D5:6B:2E:06:B7:33:A2:D0:D2:5A:F5:00:CC:03:B5:36:82:81
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/uL_Vay4GtzOi0NJa9QDMA7U2goE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:23:18:4a:51:dc:bb:65:0f:88:4c:f9:28:05:db:87:87:d2:
         fb:13:6e:46:54:d1:1c:30:5a:56:7f:36:a3:31:44:ef:1e:12:
         ed:22:54:0b:b4:5f:d3:ee:7f:85:c6:54:34:cd:6b:af:f6:c1:
         9c:05:9c:dd:0b:b8:d5:ea:90:0f:a6:d3:60:01:01:9a:2f:e2:
         eb:72:79:ff:1b:ae:c8:41:11:d7:3e:9f:88:55:97:35:3b:a7:
         05:a1:08:0a:e8:57:59:dc:a6:17:37:f9:79:b0:c0:0c:9d:42:
         9d:11:0a:91:49:70:a7:b3:2f:b0:37:24:cd:76:39:23:17:e7:
         16:f7:4c:e9:aa:bf:d3:49:74:ec:3f:91:d4:79:cb:0a:4c:aa:
         48:31:53:44:d5:ee:6c:84:4d:99:8c:7a:cc:f8:92:0d:63:a3:
         fd:86:97:47:39:51:39:56:92:a9:25:97:dd:7d:c8:8d:cf:24:
         28:13:da:30:ae:a6:4a:a8:55:47:37:0a:f4:c3:b7:b9:8e:4e:
         b8:14:80:e9:c8:9a:26:30:32:95:5f:9d:29:05:a5:b8:8e:e3:
         dc:8f:78:0d:39:6c:4d:68:a7:6d:dd:a1:0d:b9:f3:2f:fc:59:
         a7:51:f7:8d:0c:74:f0:97:f3:96:ac:2a:06:cc:77:f5:a2:64:
         bb:08:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:30:19 2025 by rpki-client