Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/jUBZ3h95XcZ3vcS3YrGxyXcD14M.roa
File:                     jUBZ3h95XcZ3vcS3YrGxyXcD14M.roa (raw, json)
Hash identifier:          gLq7mQJhD6bWfiN2mlRsXihm/zbbDpqbw+m6asm9ss8=
Subject key identifier:   8D:40:59:DE:1F:79:5D:C6:77:BD:C4:B7:62:B1:B1:C9:77:03:D7:83
Certificate issuer:       /CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803
Certificate serial:       13
Authority key identifier: DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/jUBZ3h95XcZ3vcS3YrGxyXcD14M.roa
Signing time:             Fri 04 Apr 2025 07:42:11 +0000
ROA not before:           Fri 04 Apr 2025 07:42:11 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     131926
IP address blocks:        69.6.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803
        Validity
            Not Before: Apr  4 07:42:11 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=8D4059DE1F795DC677BDC4B762B1B1C97703D783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:bb:ff:5c:7a:44:2a:ec:20:aa:a2:79:3c:
                    8f:b5:1a:97:43:34:38:46:cf:70:84:b5:62:bd:20:
                    08:58:e0:d9:98:fa:41:20:c8:f8:7d:4a:63:6c:df:
                    5c:a0:7d:70:c7:9a:d4:8e:9a:de:3b:d1:3a:56:0b:
                    68:78:10:aa:a2:2c:13:8f:e7:94:cc:93:5b:05:8b:
                    a1:55:aa:35:fd:7e:e9:b5:a0:cc:23:94:9a:12:8e:
                    56:3c:14:4b:c2:5f:51:58:bd:f3:19:d2:c7:3b:82:
                    85:81:22:11:44:4d:62:cb:10:3d:71:9c:38:8a:eb:
                    89:1d:c7:4b:12:9a:40:fb:ee:f4:5f:b8:e4:38:05:
                    d2:49:7b:94:0d:05:26:4e:fb:1c:9b:4e:b9:ae:f0:
                    94:73:0a:24:2b:50:c3:b6:38:7e:fd:92:1b:cb:62:
                    9a:84:59:dd:52:de:a1:35:02:d0:19:28:68:52:0d:
                    01:3e:ee:58:4a:78:70:26:41:a2:c7:66:e2:61:9b:
                    0c:3c:64:a7:b7:71:45:7d:9d:05:76:3e:47:8f:68:
                    2d:26:2e:fa:31:66:7c:3b:6f:77:fc:15:e2:c9:96:
                    3f:87:d3:ed:8c:ea:10:09:20:12:3f:7e:1a:9f:18:
                    e9:8c:3e:d6:e1:da:ff:51:22:e9:4e:5a:06:4b:ee:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:40:59:DE:1F:79:5D:C6:77:BD:C4:B7:62:B1:B1:C9:77:03:D7:83
            X509v3 Authority Key Identifier:
                keyid:DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/jUBZ3h95XcZ3vcS3YrGxyXcD14M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.6.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:a5:1a:d2:40:d3:8c:ca:d8:7f:f4:37:bb:96:16:ad:26:
         1d:dd:48:fe:1c:7d:e1:ba:42:3b:7f:74:a4:65:83:91:b4:85:
         6a:32:96:d0:bf:87:6f:86:df:db:4b:3b:0d:da:52:21:d8:d3:
         b6:01:52:66:8d:15:1c:df:27:5a:65:72:9a:9c:fe:23:c1:88:
         ca:e0:0a:55:53:4d:4a:de:47:35:4a:ba:14:34:53:43:3f:a5:
         31:38:7f:91:50:05:af:1f:ee:d1:ee:96:b6:9e:c3:ba:60:f6:
         7a:49:98:b2:d5:92:e5:c5:f9:90:db:89:8f:9b:10:61:85:5f:
         e2:28:d5:50:2b:4e:fc:d3:87:50:9e:76:4d:e5:8d:f9:b7:df:
         cc:29:12:5f:51:46:21:98:8c:7e:e4:2a:09:2b:93:bc:21:14:
         0f:0d:08:c3:12:95:55:12:26:e2:68:f4:35:7c:63:2c:6d:91:
         cb:05:14:a7:bf:44:32:45:8e:88:4c:98:ef:d6:ac:75:db:aa:
         35:01:a6:70:8d:eb:dc:5d:a1:16:88:ed:12:7b:29:52:e4:b2:
         c2:0b:31:ff:02:b8:1e:79:a3:b7:cc:ef:b2:3c:9e:4d:4a:49:
         83:5b:da:e1:9c:a2:5e:8c:d3:53:a0:57:15:e9:2f:b5:fe:2b:
         71:f7:b8:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:09 2025 by rpki-client