Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/V2EjEE0S-tKBaZ8dw1sgIlbSc_Q.roa
File:                     V2EjEE0S-tKBaZ8dw1sgIlbSc_Q.roa (raw, json)
Hash identifier:          ilRck8jVdCAGaiAdLEukk1g11nh8OM6h+YHDUeeHwPw=
Subject key identifier:   57:61:23:10:4D:12:FA:D2:81:69:9F:1D:C3:5B:20:22:56:D2:73:F4
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       46
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/V2EjEE0S-tKBaZ8dw1sgIlbSc_Q.roa
Signing time:             Thu 01 May 2025 01:34:17 +0000
ROA not before:           Thu 01 May 2025 01:34:17 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     131965
IP address blocks:        103.54.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: May  1 01:34:17 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=576123104D12FAD281699F1DC35B202256D273F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:e0:b9:46:9c:11:d7:6b:6b:35:36:6d:1c:
                    70:62:2d:c2:40:0e:41:16:05:e8:fb:20:cd:87:95:
                    6c:f9:8b:b2:f6:24:18:9e:67:ad:b8:bd:04:be:39:
                    23:ab:7c:5a:bc:34:0a:5b:23:c8:2c:8c:81:51:d4:
                    08:49:e1:ef:f6:f7:58:cb:95:f8:a5:dd:0a:ca:23:
                    b7:c5:df:d8:bb:76:1a:e6:47:22:c6:3a:53:d1:ee:
                    cd:b2:5a:c5:82:ed:0c:4e:d4:09:a0:41:ff:34:26:
                    e7:b0:97:43:86:eb:51:31:ed:d5:85:63:98:50:82:
                    18:e8:4e:e6:b5:4a:43:ee:54:02:01:d5:d5:a2:c1:
                    ed:44:b5:2b:1d:2d:a1:c4:f0:6f:68:82:c1:e3:4f:
                    67:ad:f9:03:88:04:ee:9b:e7:4f:75:87:c7:48:77:
                    46:fc:b1:71:b2:25:94:24:8a:3e:98:b5:96:bf:3e:
                    b9:da:3b:1e:44:ba:74:75:6f:c2:3c:74:20:30:e1:
                    91:e8:d3:6d:32:95:f2:bc:d8:f3:44:51:2b:78:3f:
                    01:aa:d1:60:d9:34:ce:2a:d0:99:67:93:f0:b7:71:
                    af:39:08:38:6b:2f:1b:83:41:2c:b6:98:23:7d:4e:
                    1b:7d:83:26:e1:c5:77:cc:af:99:8c:96:a5:80:87:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:61:23:10:4D:12:FA:D2:81:69:9F:1D:C3:5B:20:22:56:D2:73:F4
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/V2EjEE0S-tKBaZ8dw1sgIlbSc_Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:49:8a:3a:c4:ae:75:d1:45:02:03:16:82:4d:38:cd:85:3e:
         50:55:f4:5b:37:3f:db:79:16:3b:01:ed:8f:2a:18:ea:c6:1e:
         42:3e:56:e8:50:b7:e4:9b:a2:b0:a5:74:3f:75:ae:a1:67:b4:
         8c:f0:06:13:1b:62:be:80:b3:f6:23:c0:7e:87:c0:9e:e7:d6:
         b6:d0:16:3c:48:70:1a:93:85:5b:4f:06:51:e4:57:f0:1b:16:
         bc:e7:41:2d:9b:dd:5f:77:e6:11:2b:5e:5f:f4:9d:7d:57:59:
         eb:f6:4c:c6:cb:ab:b3:ae:8a:82:2d:c0:a5:80:f8:8a:d9:50:
         d4:43:7f:3a:31:ef:c2:d5:92:b0:5e:ce:17:9a:21:f8:3f:0c:
         71:31:d8:f1:4d:69:d3:3b:7b:d4:6f:bd:76:bc:19:70:5a:52:
         1d:79:f9:51:c9:f3:81:c6:76:58:a3:f0:7d:2a:07:c7:03:a6:
         12:99:32:a9:eb:61:41:48:a5:9e:f7:00:4f:3d:64:cc:79:5e:
         08:a2:24:81:a8:67:1f:cf:d9:98:a0:0c:0b:bf:f3:0b:1d:95:
         c1:86:a3:0d:06:54:64:6a:0f:9f:98:0c:dd:d1:37:8a:bb:c7:
         d2:e9:e4:64:21:69:07:00:0d:a8:9e:3c:8e:ac:5a:0e:88:b8:
         bf:67:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:52:50 2025 by rpki-client