Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/jMvOWxvCPi1112QXm_hgMv6Qusk.roa
File:                     jMvOWxvCPi1112QXm_hgMv6Qusk.roa (raw, json)
Hash identifier:          RhxWJ4bvKevAFjVxTJZTHr5dcmPR0Km/ciUSYCAHGBs=
Subject key identifier:   8C:CB:CE:5B:1B:C2:3E:2D:75:D7:64:17:9B:F8:60:32:FE:90:BA:C9
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       7F
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/jMvOWxvCPi1112QXm_hgMv6Qusk.roa
Signing time:             Thu 01 May 2025 01:32:29 +0000
ROA not before:           Thu 01 May 2025 01:32:29 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     17675
IP address blocks:        210.193.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 21:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: May  1 01:32:29 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=8CCBCE5B1BC23E2D75D764179BF86032FE90BAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:d1:8f:54:58:5e:f1:51:7d:f4:da:87:39:
                    10:2b:52:67:fb:48:13:53:23:b0:c0:0b:84:9f:26:
                    5d:87:cf:94:db:a6:d6:50:4f:e3:56:21:f0:b3:38:
                    76:d6:65:0c:e3:35:31:4b:96:aa:51:7f:d0:21:29:
                    8e:25:83:c1:dc:4e:df:e3:04:8c:d3:39:0b:fd:7f:
                    0d:b1:76:db:73:aa:8d:7a:e8:23:c7:e9:5f:ef:71:
                    52:c1:87:0d:7d:bf:b8:15:91:32:45:67:ce:06:f4:
                    50:61:33:f8:7c:1b:80:15:03:ee:f0:59:bd:1d:1e:
                    ed:a0:14:85:72:6e:22:69:6b:34:fe:f5:fe:62:89:
                    b1:d8:f1:81:eb:66:ed:c7:2c:be:92:3e:38:56:44:
                    c1:3c:be:90:61:96:03:64:4d:7a:6d:ff:4c:9a:78:
                    de:1e:16:15:17:ad:4d:ed:bc:7a:29:3c:84:0d:0f:
                    37:a8:68:19:fc:36:05:69:12:d9:cc:a8:0d:f3:66:
                    93:eb:4b:26:1d:25:dc:d4:16:a9:35:58:e6:08:2a:
                    ae:ba:0c:3c:75:56:1f:2d:a1:63:5a:57:8a:3e:a3:
                    bd:39:75:dc:09:e0:de:ed:6e:f3:87:6c:20:c6:0a:
                    bf:69:a0:17:cf:03:d5:b2:60:8d:5e:87:1e:13:79:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CB:CE:5B:1B:C2:3E:2D:75:D7:64:17:9B:F8:60:32:FE:90:BA:C9
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/jMvOWxvCPi1112QXm_hgMv6Qusk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:61:9f:2b:18:a0:3c:d1:0c:54:e5:7c:15:c0:ce:fb:85:
         d8:e9:4d:af:70:6b:a4:bc:b9:70:91:2b:74:2f:6a:cc:e4:a0:
         85:f5:a1:eb:98:06:f0:97:00:af:82:16:cb:bb:ba:8e:16:9c:
         ea:f9:13:de:50:dc:2d:42:b7:46:64:d6:c9:61:52:f8:0b:40:
         37:a9:ef:4f:ce:1c:ef:42:b5:47:93:66:6a:af:d3:87:20:e5:
         c4:d2:73:e1:81:a3:65:c2:b0:3c:3d:ea:06:2b:7c:2c:fa:2b:
         2c:41:aa:5c:b7:05:f9:1a:49:39:d7:e1:8d:40:20:b2:0f:48:
         05:40:1b:a6:c5:40:7a:40:d1:13:33:05:a0:2d:33:0b:c1:40:
         b9:af:f6:ce:7b:ae:47:d0:e2:24:32:58:75:f2:ad:9f:27:92:
         98:31:3b:cd:e0:77:12:28:5f:37:a2:55:41:7a:2f:fa:1c:84:
         ad:22:30:6b:a4:1d:1a:76:d9:1f:95:70:9c:7b:42:2f:df:d2:
         3e:ed:c1:c2:9d:50:05:c1:b3:ff:a6:bf:11:fb:7f:50:39:d5:
         24:fb:7f:25:c9:f1:c0:94:07:31:34:2e:de:db:57:84:97:10:
         51:ff:be:f9:8b:07:80:d5:76:93:b4:d0:ef:95:65:52:49:a0:
         40:5c:b8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:09:00 2025 by rpki-client