Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/fWldYzx9GFHB5BcxFkFXHwXP6LU.roa
File:                     fWldYzx9GFHB5BcxFkFXHwXP6LU.roa (raw, json)
Hash identifier:          0aCaKFMtK/c47d9xbIKbx5S8uGukxSHtNMaWQmdHveA=
Subject key identifier:   7D:69:5D:63:3C:7D:18:51:C1:E4:17:31:16:41:57:1F:05:CF:E8:B5
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       50
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/fWldYzx9GFHB5BcxFkFXHwXP6LU.roa
Signing time:             Fri 31 Jan 2025 01:33:41 +0000
ROA not before:           Fri 31 Jan 2025 01:33:41 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        211.9.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:41 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=7D695D633C7D1851C1E417311641571F05CFE8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:a4:23:06:e1:0b:b7:15:c4:49:44:08:62:
                    e7:1b:44:84:86:ab:84:b8:46:a5:22:6a:89:ef:40:
                    66:0c:06:bf:b2:9b:20:32:39:90:93:6f:12:cd:f2:
                    5a:94:b0:6c:81:db:2e:04:a1:76:c7:d1:de:e3:72:
                    ac:f1:c3:33:8b:28:b0:b4:49:1e:6d:1b:24:57:82:
                    c0:30:d9:4e:88:0e:e8:f7:b9:39:ce:39:6d:74:be:
                    5e:84:1b:e1:0e:a2:a4:2b:cf:2c:da:a4:a9:79:8a:
                    e6:79:97:0b:bf:6d:c3:1f:30:22:a5:61:2f:f8:eb:
                    cc:35:e8:df:3b:77:de:2d:46:c9:e6:bc:9a:b8:95:
                    bb:af:cc:a0:e3:b3:3c:d2:a0:6a:c2:92:9e:6b:41:
                    ef:1b:25:7c:de:b0:ac:67:72:d4:71:49:10:e4:66:
                    93:d7:03:52:89:e9:14:5f:16:06:cc:27:ff:d0:6e:
                    55:a5:e7:d8:b9:4e:5a:e4:37:8b:db:71:81:3f:5c:
                    f9:6c:82:3c:e8:1b:9e:d3:83:5e:a7:45:32:db:8a:
                    87:d0:af:1d:b7:48:c6:67:63:ee:14:ff:a9:78:8a:
                    a0:23:50:56:dc:99:cb:5c:27:cf:91:f2:1c:76:70:
                    6b:02:ce:6c:8c:47:53:26:ba:41:50:f6:4d:df:83:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:69:5D:63:3C:7D:18:51:C1:E4:17:31:16:41:57:1F:05:CF:E8:B5
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/fWldYzx9GFHB5BcxFkFXHwXP6LU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:8c:19:9a:80:82:b8:e8:e6:2f:11:6c:07:33:ee:d6:2d:87:
         59:cd:df:80:95:22:d5:ef:cc:d1:95:7f:71:dd:94:75:a8:3b:
         18:c2:e5:5f:63:4e:f4:b7:3c:3a:fc:eb:12:01:1e:e5:21:64:
         de:be:0a:fd:61:c2:75:1e:22:3d:dd:23:3e:90:ac:af:8a:87:
         0c:25:78:2e:80:0c:e9:fd:78:b2:d5:c7:2d:99:3e:13:f6:23:
         00:aa:10:79:2b:c7:10:d1:02:56:d4:49:8a:c0:44:f0:71:cc:
         52:d8:a3:06:36:06:72:a9:d3:7d:63:a8:25:a2:5f:b8:9f:ae:
         ea:31:4d:c8:a8:88:d0:e9:a7:a5:8a:67:a7:e0:db:29:4c:df:
         99:36:20:cd:54:b4:9a:5a:48:4d:49:70:1b:3f:e4:12:17:f8:
         66:bf:b6:b0:88:d6:0d:78:32:a1:f9:91:ea:2f:17:78:99:fe:
         a6:07:86:d5:68:c6:af:89:ea:86:c2:f2:da:ce:05:73:1f:61:
         06:4e:fe:f0:98:e3:c9:d0:5c:f8:61:02:b7:6d:66:97:41:a0:
         57:ee:f1:8b:77:f0:d3:76:3d:30:69:93:76:be:4c:d3:43:b9:
         48:92:d2:6b:16:2a:f0:7d:e6:9d:75:89:87:e4:ef:12:ef:19:
         ec:d5:23:aa
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE
OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI1MDEzMTAx
MzM0MVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoN0Q2OTVENjMzQzdEMTg1
MUMxRTQxNzMxMTY0MTU3MUYwNUNGRThCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMwTpCMG4Qu3FcRJRAhi5xtEhIarhLhGpSJqie9AZgwGv7KbIDI5
kJNvEs3yWpSwbIHbLgShdsfR3uNyrPHDM4sosLRJHm0bJFeCwDDZTogO6Pe5Oc45
bXS+XoQb4Q6ipCvPLNqkqXmK5nmXC79twx8wIqVhL/jrzDXo3zt33i1Gyea8mriV
u6/MoOOzPNKgasKSnmtB7xslfN6wrGdy1HFJEORmk9cDUonpFF8WBswn/9BuVaXn
2LlOWuQ3i9txgT9c+WyCPOgbntODXqdFMtuKh9CvHbdIxmdj7hT/qXiKoCNQVtyZ
y1wnz5HyHHZwawLObIxHUya6QVD2Td+DqTMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR9aV1jPH0YUcHkFzEWQVcfBc/otTAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA
n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY
THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDkvZldsZFl6eDlHRkhCNUJjeEZrRlhId1hQNkxVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBtMJQDANBgkqhkiG9w0BAQsFAAOCAQEAtYwZmoCCuOjmLxFsBzPu1i2HWc3f
gJUi1e/M0ZV/cd2Udag7GMLlX2NO9Lc8OvzrEgEe5SFk3r4K/WHCdR4iPd0jPpCs
r4qHDCV4LoAM6f14stXHLZk+E/YjAKoQeSvHENECVtRJisBE8HHMUtijBjYGcqnT
fWOoJaJfuJ+u6jFNyKiI0OmnpYpnp+DbKUzfmTYgzVS0mlpITUlwGz/kEhf4Zr+2
sIjWDXgyofmR6i8XeJn+pgeG1WjGr4nqhsLy2s4Fcx9hBk7+8JjjydBc+GECt21m
l0GgV+7xi3fw03Y9MGmTdr5M00O5SJLSaxYq8H3mnXWJh+TvEu8Z7NUjqg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:56 2025 by rpki-client