Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/RFiDLPpEUonAevullOvvWjeKiW0.roa
File:                     RFiDLPpEUonAevullOvvWjeKiW0.roa (raw, json)
Hash identifier:          Ar3QKVkFiNN+wRafohQxx5M+cHPDHys05oSNo12UVI4=
Subject key identifier:   44:58:83:2C:FA:44:52:89:C0:7A:FB:A5:94:EB:EF:5A:37:8A:89:6D
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       5C
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/RFiDLPpEUonAevullOvvWjeKiW0.roa
Signing time:             Tue 01 Apr 2025 01:33:08 +0000
ROA not before:           Tue 01 Apr 2025 01:33:08 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     63789
IP address blocks:        202.9.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Apr  1 01:33:08 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=4458832CFA445289C07AFBA594EBEF5A378A896D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:d9:27:eb:46:9c:f0:69:49:14:de:55:78:
                    b7:47:f8:92:b7:88:92:ac:db:5a:85:8b:4e:c1:64:
                    88:e2:ca:99:54:07:92:a4:80:ca:3a:82:71:57:78:
                    3f:1f:be:b9:7a:b4:66:27:10:21:3c:77:9b:06:ab:
                    9a:11:2b:c4:e7:fd:6f:8d:82:dc:b2:95:a9:78:99:
                    9b:60:04:2a:25:96:35:dd:3c:95:65:50:70:5b:8f:
                    8f:16:cf:eb:6a:33:e7:13:50:bd:ca:f8:3f:1d:54:
                    12:ec:30:e1:71:7a:dd:f9:20:1a:1e:45:da:96:75:
                    6a:11:69:8f:5e:6d:b7:7b:25:28:68:ca:8f:c3:52:
                    75:bb:0b:af:18:eb:56:48:00:97:e4:eb:1a:7b:32:
                    c2:de:e7:8b:c0:25:81:ee:68:2e:83:42:bc:66:7e:
                    40:f1:d5:a7:5b:8f:9e:ca:b1:2a:a1:e4:53:89:c7:
                    a7:d3:8b:de:3e:ad:de:b0:1d:95:fd:ec:14:47:e4:
                    45:bd:91:db:e2:8a:00:c2:32:b8:6e:b4:24:d5:64:
                    f1:c3:55:2c:c9:3b:4d:b1:c3:6f:1a:de:7f:09:31:
                    22:03:75:20:bf:f0:21:88:2c:d2:56:66:62:b7:46:
                    88:2c:aa:a6:40:18:6a:cd:bf:21:cd:a6:d7:3a:47:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:58:83:2C:FA:44:52:89:C0:7A:FB:A5:94:EB:EF:5A:37:8A:89:6D
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/RFiDLPpEUonAevullOvvWjeKiW0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:84:ce:74:e5:26:1d:93:72:02:0c:9e:42:19:67:43:66:67:
         7c:c0:57:66:c8:6f:bc:83:4a:f9:54:fb:65:0c:df:f5:42:56:
         80:59:e1:25:f6:56:9f:70:4a:0d:4d:64:bf:51:1a:54:82:86:
         6d:5e:c2:a1:0e:ea:fb:98:9d:c1:3d:4d:59:44:bf:3f:13:df:
         c2:d5:3f:99:a8:e7:1a:43:92:0b:9e:27:d0:fe:8b:17:08:ec:
         18:37:2d:de:86:11:dc:2a:aa:3d:59:2e:51:a3:30:50:58:67:
         98:1b:1e:79:bf:90:e3:a5:89:ef:be:fa:bb:9f:80:d1:fc:de:
         3b:3c:bb:ea:77:ad:5f:78:f3:e0:83:7c:c2:84:54:6d:e0:45:
         9d:38:fc:57:a2:36:37:a1:c4:21:bf:3e:70:4a:bc:94:d5:ca:
         9e:88:8e:3d:2b:d0:e7:95:f2:be:13:45:f1:86:8f:53:20:39:
         7a:f6:4c:4c:1c:ea:3a:3b:92:03:91:43:91:b7:ee:24:85:89:
         76:96:38:cd:b7:89:40:bd:b8:c8:9f:7a:42:46:e4:31:94:e4:
         00:e4:32:f0:ab:11:43:4b:c1:c3:d7:05:af:4a:e3:78:6e:83:
         ff:80:86:ed:06:ac:aa:a7:f3:d1:30:6d:8c:99:8c:50:2b:c7:
         e6:9e:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:48:20 2025 by rpki-client