Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/_BKpe0d13dwrF0zSt7Y-KPlQ1a0.roa
File:                     _BKpe0d13dwrF0zSt7Y-KPlQ1a0.roa (raw, json)
Hash identifier:          Xj+PVeGFE9CbjgZ0xgLZjbK/JhSjXH+c+fGdCKGVhVs=
Subject key identifier:   FC:12:A9:7B:47:75:DD:DC:2B:17:4C:D2:B7:B6:3E:28:F9:50:D5:AD
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       6A
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/_BKpe0d13dwrF0zSt7Y-KPlQ1a0.roa
Signing time:             Sat 01 Mar 2025 01:28:08 +0000
ROA not before:           Sat 01 Mar 2025 01:28:08 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     10019
IP address blocks:        61.122.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar  1 01:28:08 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=FC12A97B4775DDDC2B174CD2B7B63E28F950D5AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:38:e0:be:a1:c7:de:04:ce:10:2e:d2:e1:
                    f6:f6:79:98:3c:2a:f4:84:cb:cc:a7:d9:96:bd:4c:
                    ef:1d:8c:19:1a:0f:4b:19:2b:99:e5:b9:ae:58:e3:
                    0c:c7:58:58:65:70:b5:01:f7:10:27:6c:f0:e3:00:
                    d3:b9:3e:e2:04:46:f5:5f:7a:09:78:3b:a2:a9:bb:
                    25:95:33:2c:b1:2b:3d:9f:98:78:12:74:93:3e:6a:
                    1a:c6:ef:92:c8:1a:c1:6b:49:4a:74:0c:b3:ed:41:
                    dc:1f:e7:a8:00:77:f7:52:cf:e3:26:c2:22:ab:63:
                    ef:1e:b5:e4:b5:da:0e:70:d3:7e:eb:f3:ed:64:36:
                    92:45:51:83:71:cc:ed:21:0b:2e:b6:df:6a:ed:bb:
                    fd:f9:86:b7:6a:0a:72:98:cf:16:8c:34:2e:42:05:
                    4f:02:bb:78:ed:bd:32:b9:0c:22:48:b4:84:51:6f:
                    53:02:af:8f:09:2a:0b:b4:19:07:b1:10:2e:6d:67:
                    bb:4d:a2:b4:3c:3b:10:4b:7e:ff:79:66:b0:3d:1b:
                    2a:10:24:8f:e9:fa:63:da:cd:42:08:ee:e4:36:f6:
                    5b:1b:63:a7:cf:39:30:1a:fe:fd:a5:33:ce:81:72:
                    e0:58:5b:c3:b5:03:89:65:0a:12:8a:9d:aa:0f:1c:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:12:A9:7B:47:75:DD:DC:2B:17:4C:D2:B7:B6:3E:28:F9:50:D5:AD
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/_BKpe0d13dwrF0zSt7Y-KPlQ1a0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:5e:85:a1:55:43:60:62:c1:49:f3:2d:7a:3d:04:46:6e:
         b0:8c:a3:1e:33:d0:8c:c2:93:82:15:53:1f:ed:1c:1d:c9:48:
         dc:31:ba:e3:4d:b2:27:2e:1d:6f:e7:1b:6b:c1:1f:4b:4f:98:
         69:aa:ad:a1:fe:24:e9:a3:77:99:d1:94:44:66:01:5b:59:08:
         5f:9f:24:58:ab:37:8c:c9:cd:68:ba:6c:8a:62:9d:f1:4b:71:
         0d:37:69:cc:cf:8f:a5:ba:62:9b:5c:aa:22:05:46:65:b5:53:
         e4:93:d7:b2:9c:6c:1d:bc:78:a2:78:51:e6:84:21:66:37:9a:
         02:10:63:6e:05:7a:15:51:14:27:6b:82:77:b1:57:67:b2:15:
         88:5b:56:c0:ea:86:97:8c:d8:48:34:a0:3f:8c:59:43:73:a6:
         11:82:90:0e:05:1b:d6:a3:65:cd:14:27:c9:e0:d4:af:c5:33:
         50:ec:97:bd:af:b1:35:90:51:f2:1d:06:3b:71:95:ce:d2:ca:
         96:c3:b9:24:ca:10:c7:8a:91:10:df:49:f0:b0:99:3c:9a:c5:
         31:28:40:a4:ec:dd:cc:89:4e:63:ea:95:2d:3c:79:0e:22:44:
         0b:c8:a2:d0:3d:d6:24:0a:38:e4:f6:dc:7b:c1:55:cb:05:bc:
         40:7a:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:18 2025 by rpki-client