Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/kDymchsKg1XcYeDAr5EoT5G20dI.roa
File:                     kDymchsKg1XcYeDAr5EoT5G20dI.roa (raw, json)
Hash identifier:          1qnnZROUM9mgDeyEk/3laPNR1uLYCAv4B5f0X+zp8uo=
Subject key identifier:   90:3C:A6:72:1B:0A:83:55:DC:61:E0:C0:AF:91:28:4F:91:B6:D1:D2
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       4B
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/kDymchsKg1XcYeDAr5EoT5G20dI.roa
Signing time:             Thu 01 May 2025 01:34:21 +0000
ROA not before:           Thu 01 May 2025 01:34:21 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     131965
IP address blocks:        183.181.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: May  1 01:34:21 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=903CA6721B0A8355DC61E0C0AF91284F91B6D1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:f8:93:42:f3:cc:68:3c:08:a4:dc:4a:90:
                    d5:da:e8:f8:7e:07:57:e5:cf:3c:51:31:f2:15:3d:
                    40:9b:e9:c0:46:bc:1a:cc:de:c0:c7:bb:9d:46:c8:
                    6a:30:0c:07:e2:2c:54:73:4a:01:68:bb:d9:6d:f8:
                    18:3d:79:18:e9:8b:38:d0:82:3d:8b:2b:3b:4b:3c:
                    25:4c:bd:fb:5d:f8:0e:7e:a6:ed:46:4b:52:ed:e1:
                    93:ac:41:81:b0:81:1e:58:e5:12:7c:71:18:05:01:
                    ef:4b:9b:cc:06:8a:a9:e7:ef:e5:c0:b9:b9:f3:01:
                    33:9b:60:89:a8:89:8d:2d:a2:f1:00:39:ea:1d:e6:
                    05:44:84:bf:97:ac:8c:56:d9:e5:2c:e2:99:8a:cb:
                    7e:f7:78:a0:fb:57:e7:1d:02:8c:dd:7c:88:87:95:
                    66:75:60:e9:04:34:07:5a:7f:69:97:55:dd:76:ab:
                    52:6d:92:a3:e7:96:09:ec:8d:11:90:f9:ca:cc:25:
                    19:22:ca:c5:42:84:6b:a0:8c:a6:31:89:11:c4:7c:
                    ed:c5:5f:52:67:b6:ac:88:54:b2:23:f9:f8:ea:1a:
                    11:c5:c2:d9:3b:21:9d:d0:6c:10:b4:90:09:c2:b4:
                    00:1e:c3:d9:f3:d9:77:66:b0:53:7d:d0:38:4e:a5:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3C:A6:72:1B:0A:83:55:DC:61:E0:C0:AF:91:28:4F:91:B6:D1:D2
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/kDymchsKg1XcYeDAr5EoT5G20dI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:84:41:8d:57:c9:1c:d1:22:c3:14:c3:e4:43:f8:05:11:30:
         9d:a2:9f:7f:f6:52:b9:25:09:08:19:52:74:59:67:4d:00:c4:
         ee:86:a1:42:33:8d:b6:57:78:71:e6:f3:d1:77:ac:2e:b3:69:
         4d:4e:db:6c:96:8d:31:01:8c:7b:51:40:da:bd:a1:9b:b9:34:
         dd:32:3e:45:8a:02:96:c4:ef:5a:25:79:3e:6c:97:2b:e8:a6:
         e6:9e:bb:20:f4:e4:16:6a:9a:66:ab:cf:ec:5f:72:8e:ea:f8:
         1b:71:60:47:3e:be:25:cc:23:9c:f7:f1:95:42:7b:5c:c6:99:
         7e:57:b7:ab:7d:c4:2c:32:24:f0:75:45:dc:dc:05:56:a0:36:
         51:db:fc:7e:3b:18:e5:72:14:c1:31:70:52:2c:5c:b6:07:34:
         e7:40:33:4e:f2:97:cf:b1:f5:c5:9d:70:f1:8c:89:51:b4:3d:
         35:83:86:ba:43:9e:5b:db:ec:5f:b8:27:62:fe:f9:6e:de:b6:
         39:80:95:c5:fa:9a:49:cd:bc:0d:e3:2d:71:e2:ac:90:d8:6e:
         a1:63:17:86:9a:45:d7:74:0c:da:38:e3:cb:d9:86:e2:be:de:
         a2:b7:fb:46:95:49:be:ca:69:e4:ce:f0:b8:9a:e1:04:04:0d:
         46:74:19:37
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MkUz
MjQ1N0MxNkJBODc0MjE2QThGNURCQjBEMzM1QkQxNDhDQjMxMB4XDTI1MDUwMTAx
MzQyMVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoOTAzQ0E2NzIxQjBBODM1
NURDNjFFMEMwQUY5MTI4NEY5MUI2RDFEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM+5+JNC88xoPAik3EqQ1dro+H4HV+XPPFEx8hU9QJvpwEa8Gsze
wMe7nUbIajAMB+IsVHNKAWi72W34GD15GOmLONCCPYsrO0s8JUy9+134Dn6m7UZL
Uu3hk6xBgbCBHljlEnxxGAUB70ubzAaKqefv5cC5ufMBM5tgiaiJjS2i8QA56h3m
BUSEv5esjFbZ5SzimYrLfvd4oPtX5x0CjN18iIeVZnVg6QQ0B1p/aZdV3XarUm2S
o+eWCeyNEZD5yswlGSLKxUKEa6CMpjGJEcR87cVfUme2rIhUsiP5+OoaEcXC2Tsh
ndBsELSQCcK0AB7D2fPZd2awU33QOE6lCjMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSQPKZyGwqDVdxh4MCvkShPkbbR0jAfBgNVHSMEGDAWgBRC4yRXwWuodCFqj127
DTNb0UjLMTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTkwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlGSXl6RS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlG
SXl6RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85OTAva0R5bWNoc0tnMVhjWWVEQXI1RW9UNUcyMGRJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAre1YDANBgkqhkiG9w0BAQsFAAOCAQEAb4RBjVfJHNEiwxTD5EP4BREwnaKf
f/ZSuSUJCBlSdFlnTQDE7oahQjONtld4cebz0XesLrNpTU7bbJaNMQGMe1FA2r2h
m7k03TI+RYoClsTvWiV5PmyXK+im5p67IPTkFmqaZqvP7F9yjur4G3FgRz6+Jcwj
nPfxlUJ7XMaZfle3q33ELDIk8HVF3NwFVqA2Udv8fjsY5XIUwTFwUixctgc050Az
TvKXz7H1xZ1w8YyJUbQ9NYOGukOeW9vsX7gnYv75bt62OYCVxfqaSc28DeMtceKs
kNhuoWMXhppF13QM2jjjy9mG4r7eorf7RpVJvspp5M7wuJrhBAQNRnQZNw==
-----END CERTIFICATE-----
Generated at Sun May 18 10:42:51 2025 by rpki-client