Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/B-yymHvh6ACvPEJNwob8tiIpJLE.roa
File:                     B-yymHvh6ACvPEJNwob8tiIpJLE.roa (raw, json)
Hash identifier:          bZzdFKjktqnW3QGHrhlC5Eckse0DI8xvzTDCT5O9Wd0=
Subject key identifier:   07:EC:B2:98:7B:E1:E8:00:AF:3C:42:4D:C2:86:FC:B6:22:29:24:B1
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       34
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/B-yymHvh6ACvPEJNwob8tiIpJLE.roa
Signing time:             Fri 31 Jan 2025 01:33:29 +0000
ROA not before:           Fri 31 Jan 2025 01:33:29 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        49.156.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:29 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=07ECB2987BE1E800AF3C424DC286FCB6222924B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:6f:c3:b1:53:82:07:e7:d9:66:ce:47:39:
                    45:3a:73:d2:79:af:91:bd:45:2f:b6:8b:06:26:70:
                    d8:63:b6:45:71:6f:2c:52:73:fc:7d:eb:80:20:84:
                    e0:b0:40:0d:ab:1a:b9:c8:30:52:4a:cb:40:fc:ae:
                    bc:fd:e9:c6:18:04:2a:ac:6e:c9:d0:a4:98:e2:b9:
                    26:f4:06:f7:f5:f0:a5:29:46:e6:69:a7:22:ea:41:
                    ad:d6:62:1c:72:b3:1f:a7:b2:04:e0:59:e7:45:53:
                    09:93:91:04:4d:35:ff:2f:e0:99:2e:94:33:b9:56:
                    73:2b:cd:4f:16:e9:ce:df:25:04:58:c6:a9:91:fd:
                    3f:80:3e:54:9e:aa:09:b7:0f:a2:80:a8:de:bc:5a:
                    30:1a:7b:2f:39:3b:6f:34:85:31:dc:28:96:ad:f5:
                    50:82:01:61:2e:6a:64:1e:ce:e1:51:3b:f9:b2:73:
                    48:a7:00:76:7d:62:64:6e:c3:a7:de:c2:78:97:6d:
                    7e:64:f9:2a:14:42:84:9a:2d:26:9f:46:93:f8:46:
                    d3:69:1f:44:a0:07:31:b5:ea:5f:24:a7:4f:c1:50:
                    9b:20:00:c4:7d:03:25:f5:fa:43:4f:83:8b:75:5a:
                    8a:f0:47:77:f2:a8:c4:9e:52:db:39:ba:31:63:c2:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EC:B2:98:7B:E1:E8:00:AF:3C:42:4D:C2:86:FC:B6:22:29:24:B1
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/B-yymHvh6ACvPEJNwob8tiIpJLE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.156.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:41:e8:73:0e:ab:7b:df:1a:9d:70:1f:1e:29:bc:1e:54:
         d5:df:99:67:a7:22:7d:f4:a2:83:a5:b2:0a:ba:a4:22:64:d3:
         eb:14:79:e6:3a:6b:d9:a8:32:dc:64:64:47:3f:b3:84:0a:66:
         52:00:07:e4:de:c6:c7:1d:37:c2:8d:ce:4c:0b:d1:ce:76:46:
         d2:a8:aa:86:23:2d:f3:f9:d9:0d:98:0d:36:4e:90:39:d4:ca:
         b1:2e:49:ef:ca:9c:0e:d2:05:24:17:7f:f9:b2:49:19:8f:9a:
         01:4b:0d:16:a6:94:28:d7:35:e9:14:5b:fd:06:e0:96:e8:6e:
         71:b0:cb:c5:b1:f5:5b:5e:3b:73:ed:78:77:83:f8:65:91:e6:
         48:d8:91:e4:b8:c1:8f:fa:f9:e1:26:22:9e:ae:75:a3:05:9c:
         f7:32:10:c1:54:43:71:be:22:9d:ff:d4:10:2f:d3:7a:b2:a5:
         93:75:6a:34:e1:7f:c8:92:18:af:14:57:3a:63:e8:e5:63:11:
         40:2a:34:e7:c4:95:b6:23:29:64:73:e7:58:fe:ce:7c:9e:27:
         b5:b2:3e:a2:94:7b:34:27:0c:12:fe:f2:f6:15:cf:6b:33:93:
         eb:bc:93:23:6d:c8:67:1a:e5:f0:71:f3:16:ce:75:46:68:39:
         e0:00:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:55 2025 by rpki-client