Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Te-8fla7fMtxqefJBJt6a9X7bIM.roa
File:                     Te-8fla7fMtxqefJBJt6a9X7bIM.roa (raw, json)
Hash identifier:          pBgSUwXgf8oGoszFoQATZjTaGZjCcF1nXNmKMaYVWM4=
Subject key identifier:   4D:EF:BC:7E:56:BB:7C:CB:71:A9:E7:C9:04:9B:7A:6B:D5:FB:6C:83
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       9B
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Te-8fla7fMtxqefJBJt6a9X7bIM.roa
Signing time:             Wed 04 Dec 2024 19:23:01 +0000
ROA not before:           Wed 04 Dec 2024 19:23:01 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     55901
IP address blocks:        61.213.147.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  4 19:23:01 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=4DEFBC7E56BB7CCB71A9E7C9049B7A6BD5FB6C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:a3:df:e6:fb:26:dc:de:ae:a2:f6:9b:7f:
                    58:40:09:f3:a8:f5:64:54:f8:c1:2b:ff:06:2f:f6:
                    1a:18:64:ce:97:d4:4a:bf:32:17:42:6b:de:5b:08:
                    9f:5d:25:58:38:d4:b2:24:3d:23:18:8b:ce:8a:69:
                    3e:94:81:8d:4b:ed:0e:de:f1:3f:a8:5e:2d:e0:d4:
                    57:6f:9d:88:42:90:12:a8:2a:9e:15:e2:15:3a:c4:
                    e4:96:c3:44:b2:56:d2:4d:8c:1f:a4:21:d5:a0:31:
                    2c:30:87:31:54:6d:fe:d2:06:b5:73:02:73:41:74:
                    98:f5:c7:dc:5b:c8:09:87:a8:4a:d4:ba:f0:18:28:
                    fc:17:e3:61:2a:ec:a9:b4:ad:04:3c:87:0a:72:4e:
                    18:3b:07:d6:73:02:92:47:e9:28:ed:a8:c0:d3:c4:
                    0b:0b:8a:76:08:e2:24:53:07:53:9d:33:88:a9:63:
                    e8:5f:e5:2a:cc:84:dc:ff:96:73:bc:fb:f2:86:7c:
                    6b:85:f5:0b:96:1e:8d:2b:c3:53:cb:43:2b:f6:50:
                    85:fb:c7:ea:fa:1e:84:7d:ef:e5:79:f3:fd:05:a2:
                    03:79:91:64:8f:c6:fa:33:97:09:40:ac:76:df:08:
                    e0:c3:92:54:c3:52:19:6e:5d:31:5f:bd:12:8f:05:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EF:BC:7E:56:BB:7C:CB:71:A9:E7:C9:04:9B:7A:6B:D5:FB:6C:83
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Te-8fla7fMtxqefJBJt6a9X7bIM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.147.0/25

    Signature Algorithm: sha256WithRSAEncryption
         73:ad:fd:e9:03:f7:04:94:f7:d5:fd:5c:5c:50:15:0e:f8:46:
         3d:f2:2a:47:ac:20:6a:9e:d4:09:55:67:a0:8a:f7:e9:20:07:
         f3:fc:6f:a0:90:d7:58:24:b6:5e:f1:31:8f:31:a3:07:95:0b:
         d8:e0:7e:54:81:d3:e7:a0:f3:33:71:57:d5:ed:c0:9b:52:df:
         b1:06:ae:78:6b:18:7a:3b:d3:14:99:f5:c5:97:b5:7a:e8:da:
         ff:0a:32:6f:2f:f8:19:66:a9:da:d1:fa:08:65:d1:56:bb:47:
         42:71:c0:45:bf:ba:bc:10:71:3f:a7:dd:c8:cd:72:e4:ed:e5:
         89:68:5a:bc:1b:66:e5:31:31:66:48:3e:3f:85:70:e2:ff:06:
         18:d8:ca:83:fd:69:26:b5:7e:f4:95:90:85:8b:05:ab:19:bd:
         ba:16:ef:29:cd:f2:0e:fd:a6:23:0d:7b:9a:3d:41:86:d5:20:
         2d:52:12:7d:f3:81:4d:d5:47:52:bb:34:1f:32:fc:75:22:bf:
         d3:7d:2e:6f:02:4f:05:89:07:53:01:cd:d2:e4:42:9a:c4:3c:
         7f:fa:9d:f5:f9:b6:02:1b:84:5a:c6:f4:16:79:e3:94:6d:e1:
         b2:e0:81:af:bb:21:bc:03:ae:64:ce:48:1f:38:4c:19:e7:ea:
         a4:b9:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:23:10 2025 by rpki-client