Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/TeqwgyaGYJf96nIqMEDxlX5o6uk.roa
File:                     TeqwgyaGYJf96nIqMEDxlX5o6uk.roa (raw, json)
Hash identifier:          pV/FpfbvPEaN7lV5oz/1Jc8crYl/graizF+kcRRz09o=
Subject key identifier:   4D:EA:B0:83:26:86:60:97:FD:EA:72:2A:30:40:F1:95:7E:68:EA:E9
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       020C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TeqwgyaGYJf96nIqMEDxlX5o6uk.roa
Signing time:             Sat 01 Mar 2025 01:31:08 +0000
ROA not before:           Sat 01 Mar 2025 01:31:08 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        123.216.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar  1 01:31:08 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=4DEAB08326866097FDEA722A3040F1957E68EAE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0c:9e:b3:6f:89:99:51:09:6e:5e:69:77:f5:
                    a3:4c:ff:55:0d:1b:04:68:40:3c:44:12:6a:e8:fb:
                    64:27:87:1b:f3:3f:b4:53:e2:62:8f:fb:a0:69:2c:
                    1b:37:01:14:2f:39:b0:ed:50:f1:02:4b:a6:6d:f2:
                    dc:5c:7e:90:bf:69:92:f5:93:5f:7a:cc:45:89:f2:
                    61:29:c6:54:bb:bc:03:79:9e:47:71:34:4d:06:b7:
                    f9:fe:45:f2:b3:86:ba:0e:ec:0e:5f:35:41:da:f8:
                    19:f3:23:7e:4d:9b:db:53:d3:e6:9a:6b:c5:99:2a:
                    a3:80:a6:2d:05:bf:55:e7:a5:e8:aa:fd:49:81:0d:
                    cc:17:32:d0:5a:c0:9e:84:10:e2:68:ac:b0:d9:55:
                    ae:20:21:9c:16:23:bc:5f:79:22:14:bb:8b:e9:0f:
                    86:12:22:a6:04:04:29:e2:5e:78:3c:d4:d2:a7:7c:
                    46:36:9b:c3:61:c0:aa:53:48:3c:c8:d4:29:54:e7:
                    ee:05:04:f8:89:f4:59:65:c2:59:de:24:9e:89:2a:
                    e6:7e:e8:98:25:5e:20:a2:9d:0e:5e:50:d6:d0:a0:
                    61:ae:54:84:56:d6:f9:29:9c:45:5a:df:bb:64:af:
                    4f:00:8f:9a:ce:30:9b:09:9d:07:c4:e7:bc:b2:ad:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EA:B0:83:26:86:60:97:FD:EA:72:2A:30:40:F1:95:7E:68:EA:E9
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TeqwgyaGYJf96nIqMEDxlX5o6uk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.216.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         a6:40:ef:8e:36:41:f8:c7:ba:56:1a:c2:25:71:65:37:3f:7a:
         13:8a:24:0b:10:ed:85:51:69:15:95:f6:55:65:6f:4b:84:4c:
         e4:e3:b1:c8:33:6f:03:35:c3:6c:f8:21:bf:e1:2d:11:65:10:
         e6:6d:f4:e2:4b:93:59:b3:59:13:ed:bf:11:97:c3:60:0a:7d:
         d5:98:56:68:a0:db:07:11:01:26:09:8a:28:c3:72:88:1e:42:
         b0:6a:e9:20:cb:e7:45:67:ca:10:2c:75:7c:0c:81:8a:83:cb:
         11:4e:ca:1f:41:9e:ef:93:68:ae:f5:94:26:13:79:87:43:e0:
         27:73:3c:08:2f:ee:aa:4e:ed:14:4d:9d:5a:41:d9:1b:45:22:
         7b:70:c0:a9:a6:1a:da:9c:0c:89:d4:ea:57:11:b8:34:7f:58:
         bb:39:45:0c:8e:b0:f6:ee:f4:21:24:ce:40:82:16:e0:cd:d1:
         58:29:e5:9f:2e:39:81:a0:53:81:59:ab:4a:73:e0:f9:b3:9c:
         7c:5d:31:53:c6:7c:44:66:67:49:1d:a8:ef:0f:89:3c:34:b7:
         ed:aa:a5:9c:fb:c6:04:e6:e1:75:9c:d0:0e:28:3d:aa:a8:dd:
         c2:1f:8f:58:2a:e7:e3:67:e8:b9:a1:bd:4c:35:48:41:60:cb:
         0c:97:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:04 2025 by rpki-client