Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/RHWOqgAnmDplHcaq9lMc6ORP9Xg.roa
File:                     RHWOqgAnmDplHcaq9lMc6ORP9Xg.roa (raw, json)
Hash identifier:          RjoSZUHx4V21lTLntM+NL12vQEDHvDZo7bdawVXEFh4=
Subject key identifier:   44:75:8E:AA:00:27:98:3A:65:1D:C6:AA:F6:53:1C:E8:E4:4F:F5:78
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       43
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/RHWOqgAnmDplHcaq9lMc6ORP9Xg.roa
Signing time:             Fri 31 Jan 2025 01:33:35 +0000
ROA not before:           Fri 31 Jan 2025 01:33:35 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        125.31.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:35 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=44758EAA0027983A651DC6AAF6531CE8E44FF578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:e3:fa:d4:98:48:5d:99:78:7f:a7:ec:73:
                    9c:6e:95:fc:b5:9e:5d:fe:41:d7:fc:2d:23:6f:a7:
                    00:49:22:e0:6a:94:c9:1b:a9:17:12:5e:3e:58:16:
                    2c:71:c3:b1:00:34:4a:0d:05:ac:f1:b0:5b:1e:b5:
                    96:0c:b6:7f:cc:ac:c0:39:2a:b9:3e:d4:1a:b2:85:
                    91:d8:f9:d4:2a:1b:9c:d9:58:e5:58:9c:99:8c:cc:
                    ce:81:6f:d8:51:dc:f9:4f:55:89:59:77:21:7e:c5:
                    25:fd:3a:e8:e7:c5:59:ef:19:e4:e8:8d:21:37:52:
                    2b:59:e9:df:f6:56:37:e6:12:e9:ac:7a:55:bd:96:
                    48:8c:b3:ed:c3:d7:f9:66:03:eb:a0:b2:0f:c8:18:
                    e7:00:ec:43:17:d4:11:39:16:e8:6e:aa:db:c8:ef:
                    d2:02:c6:22:a1:79:17:8f:31:ed:bd:8c:35:a2:88:
                    d3:7d:a5:8a:c9:66:1f:8b:fd:c1:1b:71:ad:68:03:
                    8e:13:d8:be:2c:63:b6:44:84:99:c2:2a:d0:a0:d3:
                    96:1a:de:5c:50:68:a9:16:65:a7:d1:4a:02:0b:af:
                    91:9a:0d:35:6e:04:4e:a7:a8:5d:da:1e:cf:43:60:
                    3e:5c:8f:f2:08:52:33:a1:76:9d:e6:d8:69:47:0c:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:75:8E:AA:00:27:98:3A:65:1D:C6:AA:F6:53:1C:E8:E4:4F:F5:78
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/RHWOqgAnmDplHcaq9lMc6ORP9Xg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.31.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b7:8d:ca:93:c6:15:25:18:3e:57:dc:cd:66:c0:6c:68:3f:86:
         3b:69:86:82:71:67:e0:12:05:6d:ff:1c:d9:2e:86:9e:15:92:
         14:bc:5a:9c:9a:53:40:8f:c9:91:06:73:d3:ac:0d:1a:79:73:
         c4:73:0b:a7:16:05:e6:76:06:03:f9:24:a7:c3:f8:88:e2:ea:
         a6:aa:27:1b:87:55:59:ab:f3:b6:58:05:63:68:a6:0a:1a:05:
         51:bb:e7:ff:75:6d:c4:87:6c:2b:51:55:ed:c1:d5:3a:eb:e4:
         52:86:3d:f5:5e:91:27:a5:b2:fb:35:e9:ed:ff:01:69:5d:b8:
         bf:96:d8:d6:66:70:56:5b:93:9a:4c:b5:e1:de:a3:3e:b4:1c:
         a2:2b:91:f8:38:f6:30:9f:b5:51:75:4e:65:2d:fe:e6:45:4a:
         8c:f2:2a:f9:26:41:84:1a:b3:ff:1d:a2:c5:39:0f:a6:ec:24:
         60:22:2f:db:67:a9:cf:e5:3c:5d:53:43:e3:d5:d6:7c:25:88:
         ff:66:a7:9c:bc:47:09:0f:33:9a:bb:31:05:1d:3c:39:be:cf:
         6c:85:d7:ad:87:f1:85:64:9d:f8:13:a7:1b:b2:87:62:db:d4:
         0a:49:ac:e5:c5:93:e5:5c:74:be:10:7b:7a:e1:22:57:19:26:
         70:70:dd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:02 2025 by rpki-client