Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/J1Jpoq3x4XLtfy3e6G3EL843ZEU.roa
File:                     J1Jpoq3x4XLtfy3e6G3EL843ZEU.roa (raw, json)
Hash identifier:          JKmdpYYPChNDv+d19o55xqo8KQoRlzeFIMU7TlRfCmQ=
Subject key identifier:   27:52:69:A2:AD:F1:E1:72:ED:7F:2D:DE:E8:6D:C4:2F:CE:37:64:45
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       4C
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J1Jpoq3x4XLtfy3e6G3EL843ZEU.roa
Signing time:             Fri 31 Jan 2025 01:33:39 +0000
ROA not before:           Fri 31 Jan 2025 01:33:39 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        210.203.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:39 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=275269A2ADF1E172ED7F2DDEE86DC42FCE376445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:32:c9:e3:b7:69:57:52:d9:4d:7f:84:60:0a:
                    47:d3:c9:9d:ce:21:d1:50:d2:5f:0f:b0:12:cc:cc:
                    d6:cd:43:5b:72:c2:ac:42:0e:7a:79:a2:1e:66:4b:
                    c9:ff:90:12:fb:09:6d:12:f2:9b:93:d2:26:a0:3d:
                    50:5a:06:ac:a7:c8:a1:b5:43:9e:fa:1d:7d:3c:0a:
                    c5:91:50:bf:fa:a4:d7:e5:3e:17:d5:15:1c:1d:68:
                    2a:55:f8:87:f9:4c:a2:7a:a8:f2:12:63:48:2e:90:
                    a5:bf:e3:35:20:d5:bb:66:68:e1:bb:ee:de:ba:c8:
                    51:ba:2a:59:95:f6:fc:69:d8:62:cd:d1:dc:52:3f:
                    a7:40:e6:7f:93:8a:04:16:04:83:e7:06:ac:92:5e:
                    67:5d:17:31:2b:8d:bf:fe:1f:9b:f2:e2:31:03:10:
                    5b:b2:96:d8:57:71:db:dd:d4:1a:4d:be:a1:25:76:
                    37:e3:f7:6d:20:b7:06:67:4f:c3:5a:31:d8:34:63:
                    04:b1:70:a7:52:05:ee:33:d9:da:b3:21:4b:61:5d:
                    c9:25:e1:8a:e5:39:b0:be:4c:f5:31:a8:53:06:d1:
                    bd:df:e7:d1:18:4d:7d:54:6e:ef:ec:00:e1:4b:f2:
                    0a:80:00:84:5b:8e:a9:f7:1a:ec:b0:41:2a:a2:ed:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:69:A2:AD:F1:E1:72:ED:7F:2D:DE:E8:6D:C4:2F:CE:37:64:45
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J1Jpoq3x4XLtfy3e6G3EL843ZEU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.203.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:53:6b:50:5b:71:35:d9:43:e2:79:fc:00:f3:00:99:ea:e1:
         4d:83:c6:7a:46:90:91:47:d6:e4:ee:53:a7:ad:40:cf:42:34:
         b3:b7:5e:b9:4a:4a:cc:2d:36:dd:09:43:8a:d4:28:4f:b6:18:
         64:3d:5d:e3:46:86:e7:11:a2:68:28:f1:5f:4c:25:c4:c9:37:
         5e:06:3c:e5:1d:f8:c8:4b:20:2f:ad:a2:10:8a:15:84:a8:a0:
         95:e7:fb:b3:b9:61:46:9f:1f:c1:ff:7d:e1:6a:fb:12:26:d2:
         b6:02:f6:a4:c9:79:f8:7c:b2:0b:a2:bc:e7:bd:10:28:41:4c:
         e6:26:0f:3c:ca:b0:6d:53:da:c4:6e:ab:0b:0b:b9:cb:80:2c:
         46:06:1f:2b:3d:b8:a2:db:f9:3d:9a:23:65:2f:59:49:8e:e5:
         4f:c2:6c:b2:91:15:b9:1f:df:62:2f:f0:88:ac:af:b2:6d:52:
         e5:cb:78:a3:ec:3a:f5:96:76:aa:ab:85:00:16:8f:f8:47:f7:
         7d:c0:d1:dd:95:bb:42:b2:0b:f7:1b:14:41:7a:b7:ce:f6:56:
         d3:97:a1:bc:14:08:53:de:ae:79:a2:94:c7:ad:9f:85:8a:f9:
         f4:73:62:d2:73:b3:26:b6:75:80:63:c5:b8:fa:8e:6e:47:ee:
         29:56:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:41 2025 by rpki-client