Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/qTwtaTJWQC9_kPyHFOqBdaPCtX8.roa
File:                     qTwtaTJWQC9_kPyHFOqBdaPCtX8.roa (raw, json)
Hash identifier:          GenA2uMOrREByu/lsx8rxpR3M5+bOdohsLDgO/0leC4=
Subject key identifier:   A9:3C:2D:69:32:56:40:2F:7F:90:FC:87:14:EA:81:75:A3:C2:B5:7F
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0200
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qTwtaTJWQC9_kPyHFOqBdaPCtX8.roa
Signing time:             Sat 01 Mar 2025 01:31:02 +0000
ROA not before:           Sat 01 Mar 2025 01:31:02 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        61.126.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar  1 01:31:02 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=A93C2D693256402F7F90FC8714EA8175A3C2B57F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:85:3b:cc:e1:38:3d:ec:2f:24:07:74:ec:da:
                    9a:b1:59:e4:f3:26:52:34:cd:47:ee:f8:16:a4:d3:
                    f3:a0:aa:92:0a:33:91:35:58:71:00:13:da:de:c6:
                    c0:a8:42:d1:86:8b:b3:86:b8:2e:83:3e:db:b9:a4:
                    4e:74:2b:e2:92:d6:2e:6d:24:45:ec:42:d1:c1:f9:
                    ad:3a:6b:66:49:0c:62:99:0c:34:84:e3:11:b8:01:
                    43:6a:1d:75:54:77:e7:0a:d0:a0:e2:52:e7:5b:e1:
                    ce:57:0c:8b:c1:2c:f5:55:47:85:67:3a:71:e8:2c:
                    d2:e1:a6:76:a0:1e:1d:49:52:83:9a:33:d9:06:f6:
                    ce:c7:c8:bb:9e:e9:9f:8f:3d:47:7b:33:5b:8a:c8:
                    7e:1e:74:9c:1f:21:d2:72:ae:6b:ca:93:4a:97:7d:
                    e3:6b:56:b3:03:99:42:31:5d:19:06:87:56:0a:8d:
                    e3:91:61:ef:08:76:c3:df:0b:a7:69:c5:b6:cc:09:
                    b2:1c:3f:72:0e:26:21:eb:2a:d4:80:63:23:2b:5d:
                    b4:0a:1b:d8:57:38:69:59:ee:5e:47:79:2b:60:45:
                    76:5f:a8:9b:9f:a9:36:26:d1:c8:fb:fc:86:e2:d0:
                    46:aa:5a:f5:bb:7d:6e:2f:26:af:92:c8:9e:0e:a8:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3C:2D:69:32:56:40:2F:7F:90:FC:87:14:EA:81:75:A3:C2:B5:7F
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qTwtaTJWQC9_kPyHFOqBdaPCtX8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2a:3c:52:b4:cd:27:73:df:8c:92:ae:d7:20:79:da:29:52:ec:
         8a:54:8c:a4:4c:ed:6a:5c:42:37:61:da:e8:90:50:5b:c4:fc:
         b2:89:17:ac:8e:5e:54:a2:b5:5c:61:f4:de:c5:79:f1:a0:f2:
         2e:31:91:51:f2:d8:c8:be:89:51:c2:74:69:09:41:90:b2:18:
         00:88:c5:da:a1:4e:95:1c:4b:42:dd:f8:9e:38:23:7f:0a:a0:
         f8:09:6b:7d:77:ff:f3:36:20:27:23:16:8f:dd:a0:7d:c2:fa:
         fe:3e:cb:76:f2:0d:ab:87:b1:80:84:e0:56:10:31:5b:a7:b3:
         5b:ce:9f:e2:65:c7:86:3d:2f:90:85:12:b0:4f:8f:cf:b0:bd:
         d8:ce:2f:bf:83:5f:cd:9a:97:ec:68:9e:39:08:8e:80:4d:88:
         7a:79:1c:54:c5:fb:06:f6:58:0a:1b:29:34:3c:da:1d:de:91:
         f2:ac:1a:d6:b3:f0:2d:02:cd:61:d4:44:c2:88:34:8a:57:7a:
         55:36:af:a5:a8:83:23:f4:5f:5c:b4:2f:ae:85:4b:16:fc:d1:
         67:ba:5f:21:95:37:5c:84:7d:8a:4c:be:23:3b:66:ef:56:9f:
         02:c6:13:e8:44:ad:60:fa:e9:ea:1c:1a:df:62:85:93:11:7f:
         60:5a:7c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:11:47 2025 by rpki-client