Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/owavnPulzOii6jpy6WJ0vRBh68g.roa
File:                     owavnPulzOii6jpy6WJ0vRBh68g.roa (raw, json)
Hash identifier:          EO0Kp420pjVZhg0syw6mJJXq+IQw/5MADfUOejYdeEI=
Subject key identifier:   A3:06:AF:9C:FB:A5:CC:E8:A2:EA:3A:72:E9:62:74:BD:10:61:EB:C8
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       50
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/owavnPulzOii6jpy6WJ0vRBh68g.roa
Signing time:             Thu 01 May 2025 01:34:23 +0000
ROA not before:           Thu 01 May 2025 01:34:23 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     131965
IP address blocks:        202.240.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 10:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: May  1 01:34:23 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=A306AF9CFBA5CCE8A2EA3A72E96274BD1061EBC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:01:19:89:7a:58:e1:e8:68:db:3d:f1:06:
                    e6:0b:78:6c:6b:6b:7d:cf:2c:44:de:c6:55:4d:b1:
                    79:fc:63:ff:1a:cd:f0:2d:d8:91:75:cd:58:48:0d:
                    2b:2b:67:a1:90:7d:5e:72:b4:2c:e2:0d:47:3a:f0:
                    b5:11:d6:1f:b8:83:9c:a7:fc:de:f2:a3:5a:b5:f7:
                    5e:1a:b4:68:32:a7:18:8d:d8:0b:11:5a:d4:89:44:
                    d2:8b:84:9a:ab:7c:52:2c:c7:f8:54:fe:89:1b:22:
                    30:c7:8c:b7:22:1d:ed:06:ef:bb:7d:33:fe:8d:bf:
                    d6:35:55:d7:9d:31:f1:4f:a3:44:21:34:fb:cb:a8:
                    ac:be:a7:7c:ec:21:64:3d:7b:dd:ab:d5:a3:f9:7e:
                    be:97:38:30:07:f5:55:2c:52:99:a9:68:4f:c3:26:
                    c9:e1:69:5c:a2:02:cc:e8:7b:59:9f:dc:39:0f:a5:
                    2a:c1:1e:ea:36:c0:b8:b8:b7:cb:7c:87:48:f8:d2:
                    08:9b:60:ea:07:95:bd:bd:e5:15:f5:2b:52:f6:dd:
                    c2:2b:f1:46:6e:36:c6:73:cd:c8:f3:48:55:b6:b4:
                    fb:26:03:1f:1d:fc:12:f0:4d:c1:5f:e3:63:f3:c2:
                    3e:56:22:0e:c1:a1:68:d7:ef:a4:ca:64:74:fb:c9:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:AF:9C:FB:A5:CC:E8:A2:EA:3A:72:E9:62:74:BD:10:61:EB:C8
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/owavnPulzOii6jpy6WJ0vRBh68g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.240.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:83:44:4f:5b:89:12:b8:74:64:de:71:b0:5c:cd:5c:76:1b:
         19:4a:e7:3d:e4:92:4c:8d:53:12:d2:19:58:43:90:f1:95:13:
         dd:c6:53:5c:32:22:d3:e9:31:97:0c:33:bb:bf:da:0a:a3:92:
         b6:90:d6:54:15:91:b2:a5:ff:2d:0c:23:fc:b8:99:38:17:91:
         e8:e9:58:ea:3b:fa:32:37:6c:b5:3b:ba:78:fa:00:f5:69:08:
         43:14:f0:c0:4b:b6:cb:7e:c7:89:22:4a:ca:6b:8c:38:b7:45:
         1a:04:41:63:00:26:dc:39:65:a4:0a:20:47:86:84:7e:18:07:
         f0:c5:7e:f9:2a:ce:83:67:f5:a1:d5:28:31:72:d9:fe:e4:b2:
         82:66:a9:0c:db:a3:69:25:ef:d7:c0:d1:d4:30:84:c3:58:02:
         54:c9:ba:8e:14:b9:c8:90:9a:9b:59:a1:f1:d8:fe:7a:14:ba:
         e9:95:38:1c:e8:f6:bf:23:4f:34:d7:03:c3:a6:5a:91:26:a9:
         00:41:77:ef:dc:62:6e:8d:17:0b:8c:0c:42:a5:8f:9c:fd:0b:
         3f:04:96:dd:72:c7:53:fa:14:37:f6:65:ca:b0:27:3a:fc:ea:
         6a:71:f1:a3:e9:8c:47:9b:6c:c4:8a:54:60:56:47:b3:b7:3a:
         04:00:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 13:44:24 2025 by rpki-client