Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/yWdQTtmU-sUgh5-206QpqUzZ97g.roa
File:                     yWdQTtmU-sUgh5-206QpqUzZ97g.roa (raw, json)
Hash identifier:          bwODzsVE11BEDCv5QQPQ+HVIWozbolkBvi6CPAP/3wI=
Subject key identifier:   C9:67:50:4E:D9:94:FA:C5:20:87:9F:B6:D3:A4:29:A9:4C:D9:F7:B8
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0207
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yWdQTtmU-sUgh5-206QpqUzZ97g.roa
Signing time:             Sat 01 Mar 2025 01:31:06 +0000
ROA not before:           Sat 01 Mar 2025 01:31:06 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        118.0.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar  1 01:31:06 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=C967504ED994FAC520879FB6D3A429A94CD9F7B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:38:09:ea:e2:89:19:ff:67:d9:2f:21:50:f9:
                    80:87:64:f2:74:ab:92:e0:b9:74:0d:0f:35:04:0f:
                    e0:22:af:76:e6:a0:d0:bd:fa:99:08:9e:c7:4f:d5:
                    6a:9b:f3:eb:d8:05:0d:f8:96:be:f3:be:38:3f:cb:
                    48:61:89:5a:84:ea:22:bb:2a:d5:42:fe:a3:26:74:
                    09:06:a0:84:4a:49:69:f7:cd:20:c1:7f:1a:e3:a7:
                    06:8d:79:45:7e:36:f4:a7:ba:cb:26:34:22:91:fe:
                    12:f3:b7:ac:93:02:9e:96:7f:8d:de:b2:6f:96:ec:
                    8e:6c:36:57:6f:cc:db:52:96:4d:d7:f7:9f:18:06:
                    aa:55:44:ef:98:01:66:3a:af:63:47:d7:6c:0f:15:
                    75:33:6b:7f:be:ae:a1:2f:30:6e:d5:d8:40:a1:ff:
                    42:c9:6d:d9:63:20:c9:5e:63:00:3d:29:61:c8:d6:
                    dd:e6:78:73:8d:f6:21:0d:28:eb:ef:23:b1:8e:d5:
                    3d:3a:18:bf:9f:51:37:5f:f2:50:79:51:87:d0:1f:
                    7e:e5:57:d6:b2:93:4c:03:3a:38:b9:c5:40:fe:03:
                    2b:7e:67:e1:10:b6:d8:30:ef:fa:a6:38:3a:c0:44:
                    5e:f1:f6:e7:c0:b2:21:bd:9c:91:57:38:30:3f:8f:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:67:50:4E:D9:94:FA:C5:20:87:9F:B6:D3:A4:29:A9:4C:D9:F7:B8
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yWdQTtmU-sUgh5-206QpqUzZ97g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.0.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         b6:30:57:79:cd:82:fc:f2:ad:19:9b:de:da:bf:8a:71:7c:6a:
         56:ca:d1:2c:f3:bd:53:9b:b2:1c:80:96:a6:b5:bb:84:81:40:
         fd:7d:dc:6a:5a:8f:dc:65:21:36:e5:ba:02:cc:a7:c9:c8:7d:
         78:f2:eb:39:da:e8:5a:3d:11:d5:a9:02:72:84:4e:96:dc:b0:
         73:e3:07:e8:c4:de:de:a9:d5:e1:09:1d:bb:ad:00:ce:c2:b0:
         15:da:26:12:ad:f7:a5:6b:7c:87:8e:86:a2:08:f6:6b:3e:60:
         26:81:d0:f2:f4:7c:52:81:35:0b:27:bb:5f:47:20:88:dd:38:
         c5:f4:07:58:79:fa:90:68:9c:a8:41:89:31:45:50:b1:91:00:
         7d:4b:d3:6d:87:c0:58:4e:57:80:5d:79:4c:54:9a:3f:3f:6f:
         7f:1f:7b:f0:6b:ee:5e:02:84:30:95:bb:4c:26:96:4a:c2:25:
         0b:3d:c9:c1:44:3d:12:35:32:ac:92:c1:2b:ef:a4:35:be:29:
         0d:44:36:9c:62:fd:5b:61:e8:d9:ce:51:9a:ac:eb:3a:ec:fa:
         33:e5:9a:ba:28:16:76:c9:18:f0:b5:fb:1a:d3:59:35:08:bd:
         ce:62:5e:6c:cf:f3:77:09:13:8d:44:1e:57:34:32:95:44:f1:
         b2:9b:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:04 2025 by rpki-client