Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/HHmnaSGoh9_GuVSaJoZ0CeJVLL8.roa
File:                     HHmnaSGoh9_GuVSaJoZ0CeJVLL8.roa (raw, json)
Hash identifier:          ml4jUCd/V1CFRvYo68btgIQi57AGO52IaTsk+dVAOqI=
Subject key identifier:   1C:79:A7:69:21:A8:87:DF:C6:B9:54:9A:26:86:74:09:E2:55:2C:BF
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       4A
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/HHmnaSGoh9_GuVSaJoZ0CeJVLL8.roa
Signing time:             Thu 01 May 2025 01:34:20 +0000
ROA not before:           Thu 01 May 2025 01:34:20 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     131965
IP address blocks:        183.181.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: May  1 01:34:20 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=1C79A76921A887DFC6B9549A26867409E2552CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:6b:86:51:76:5a:0d:d5:52:9f:3c:5d:23:
                    11:1f:5e:6a:3a:de:9e:c6:7b:2a:06:fa:16:f6:38:
                    5c:d8:73:ad:12:0b:ad:44:dc:8f:ac:16:2c:50:f0:
                    63:47:55:d0:03:cd:27:43:ea:1d:be:eb:af:61:ec:
                    1c:93:83:6d:45:41:50:44:fd:8d:85:08:11:70:3e:
                    de:01:5a:78:d6:b8:25:e6:ce:c7:e1:c3:bd:47:7c:
                    0e:17:1a:b6:dc:3a:c1:23:09:55:5d:21:57:90:6c:
                    89:fe:e3:cf:4e:2b:60:00:11:b8:11:b5:8d:64:d1:
                    ca:9b:6d:fd:b6:1b:d2:40:c8:a0:f9:76:77:ed:ac:
                    32:6c:23:89:76:19:64:46:95:cf:62:83:52:0c:5e:
                    fc:97:74:12:55:87:da:72:bb:35:8d:00:39:2c:e5:
                    a9:95:a7:75:46:76:d4:64:8f:d5:05:f0:b0:38:e7:
                    48:43:1a:f4:43:10:c3:51:a5:4f:e0:1b:14:29:f6:
                    74:1e:87:35:8b:14:f8:ad:04:7b:bc:7a:23:8e:28:
                    41:d0:e3:72:7a:c3:1e:e7:63:a2:52:70:ac:bf:ac:
                    ba:9f:a1:32:ff:71:f3:2b:67:29:bb:aa:27:14:ed:
                    2a:c9:89:5d:42:cb:d1:a4:7b:97:e5:73:c9:a7:79:
                    52:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:79:A7:69:21:A8:87:DF:C6:B9:54:9A:26:86:74:09:E2:55:2C:BF
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/HHmnaSGoh9_GuVSaJoZ0CeJVLL8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:6b:da:7c:f3:37:16:8a:c9:75:bc:95:61:43:6f:5a:78:91:
         c2:e1:0e:fd:e7:63:86:19:21:57:5d:10:5e:c1:91:22:f6:63:
         14:4e:17:1a:d2:17:b0:58:ee:3b:94:3c:b6:c5:ba:3a:6b:0e:
         98:69:65:4f:28:f8:2a:0e:51:5c:e0:b6:cd:04:ed:4c:dc:e3:
         4c:57:b5:5d:43:36:28:9a:ad:ab:3d:a2:73:06:c5:a7:e7:27:
         a6:c5:91:e9:f3:b1:4c:39:b6:15:ab:9d:7e:e7:c7:47:95:a8:
         39:62:ed:6d:ca:96:f4:63:29:9c:0a:71:95:39:93:82:c1:d1:
         c1:fa:f7:70:d8:2f:8e:80:46:87:65:3b:af:96:73:51:72:32:
         5e:71:97:69:db:4a:15:e7:b2:d6:40:0a:af:29:fa:c3:db:ff:
         3c:a5:89:45:68:d3:dc:ba:ca:0c:c1:4c:15:0b:88:1b:2a:eb:
         9a:ba:7d:47:79:c3:a4:93:42:b2:97:dd:27:98:45:e4:0c:81:
         27:65:e4:a4:c3:64:d9:e3:06:52:40:b9:7a:60:a3:7c:a6:8f:
         c5:ff:81:38:5d:f4:ea:96:49:c0:0d:2f:19:0f:a2:69:b9:85:
         b6:db:90:c2:6b:fb:6d:dd:04:00:50:6b:0a:3b:93:58:89:28:
         05:bc:b1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 11:02:01 2025 by rpki-client