Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1562/cReiPGGIqZJ8Htv5d3ZQMlnszoI.roa
File:                     cReiPGGIqZJ8Htv5d3ZQMlnszoI.roa (raw, json)
Hash identifier:          r2XmChn99B1HipiIXYyP05eUsedSVEwqLzMOtneYtM0=
Subject key identifier:   71:17:A2:3C:61:88:A9:92:7C:1E:DB:F9:77:76:50:32:59:EC:CE:82
Certificate issuer:       /CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
Certificate serial:       52
Authority key identifier: FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/cReiPGGIqZJ8Htv5d3ZQMlnszoI.roa
Signing time:             Fri 31 Jan 2025 01:30:33 +0000
ROA not before:           Fri 31 Jan 2025 01:30:33 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     18125
IP address blocks:        150.26.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
        Validity
            Not Before: Jan 31 01:30:33 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=7117A23C6188A9927C1EDBF97776503259ECCE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:c8:82:39:46:71:bf:86:88:be:47:0e:2c:
                    3e:bf:04:73:fb:6e:ef:0a:06:44:1c:b7:db:4a:0c:
                    5c:81:ea:00:3a:a3:fc:3f:43:20:55:08:1a:e1:56:
                    35:24:87:b9:eb:4e:55:de:03:87:06:53:17:b3:36:
                    40:38:2f:03:55:75:09:63:5c:43:d5:92:34:af:0e:
                    9a:84:79:2d:57:00:de:9c:d8:f8:7a:b6:c8:87:fb:
                    d5:6c:81:ee:bf:52:c5:54:73:4a:1e:4f:26:b5:a1:
                    09:6f:16:20:ce:fe:d0:e6:27:b1:57:1c:06:75:df:
                    8e:9f:e0:1f:51:7b:ef:6c:a9:35:23:4c:a9:21:d9:
                    5d:79:41:87:84:85:5d:5d:8d:e2:31:ac:56:b4:3c:
                    c3:5c:aa:4c:5f:f4:ff:97:42:78:c0:65:49:a1:49:
                    d9:eb:8c:d6:0d:0e:39:09:00:83:b0:42:82:68:bc:
                    4e:33:7c:00:5e:94:e4:1b:1d:6f:62:80:79:f5:0d:
                    09:4f:08:c4:61:eb:91:97:88:45:09:c9:96:0c:4a:
                    31:b3:12:cf:44:38:de:a3:fb:07:11:f5:2e:54:1b:
                    9d:f2:29:a2:e5:ba:f5:93:8c:fb:9a:8d:e5:a6:9a:
                    73:a5:3f:b7:6d:19:18:65:86:f4:c4:bd:ea:5f:1c:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:A2:3C:61:88:A9:92:7C:1E:DB:F9:77:76:50:32:59:EC:CE:82
            X509v3 Authority Key Identifier:
                keyid:FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/cReiPGGIqZJ8Htv5d3ZQMlnszoI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:8c:95:bc:bf:dd:72:7e:6d:fb:b0:43:1d:bd:d6:ad:c5:21:
         fa:ba:22:cf:af:99:3e:3a:d1:b4:53:91:84:9d:0e:66:4c:79:
         46:a1:44:7e:a6:df:26:44:49:b6:1d:ec:23:28:0d:26:fd:11:
         04:45:f8:4a:7c:3c:ae:fa:45:02:b4:6b:5e:e7:54:46:94:9c:
         16:9f:6b:e7:42:d2:9e:c6:c7:ac:41:33:26:4f:ef:da:29:5e:
         34:ef:0b:95:5e:21:70:d9:2d:cb:40:05:75:b7:b0:19:88:01:
         d5:e1:2b:f1:c7:ea:7a:e4:7a:b5:79:59:43:d1:bd:42:01:d3:
         41:09:5b:b8:28:17:2c:de:39:a0:84:b9:ed:c4:f7:e9:6c:08:
         85:26:6a:62:c0:2e:95:30:9c:df:f3:e0:2b:33:1b:44:8d:d2:
         ca:e5:40:2b:e5:06:0a:c5:9d:17:a6:65:16:94:61:19:b6:28:
         a9:52:7d:85:e0:70:69:b9:ec:30:e0:4f:81:7d:c1:fc:1a:d8:
         08:37:de:d0:bf:79:d1:d0:44:c2:a8:bf:d1:95:87:f0:55:22:
         73:04:74:3e:9c:7f:c5:31:2a:b5:80:b2:6b:3d:6d:b3:89:f0:
         f7:fb:d3:c6:fa:69:73:01:a9:6a:fd:b0:dd:2b:6f:9c:fa:4d:
         68:d9:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:01 2025 by rpki-client