Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/K5u2ueBE5iU9DLMw3D_FxLHWPX4.roa
File:                     K5u2ueBE5iU9DLMw3D_FxLHWPX4.roa (raw, json)
Hash identifier:          h0RSh+GWzGb1SZk0KG2GsHBdXL1xXpkepj4OxbOyC7k=
Subject key identifier:   2B:9B:B6:B9:E0:44:E6:25:3D:0C:B3:30:DC:3F:C5:C4:B1:D6:3D:7E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0551
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/K5u2ueBE5iU9DLMw3D_FxLHWPX4.roa
Signing time:             Fri 31 Jan 2025 01:36:10 +0000
ROA not before:           Fri 31 Jan 2025 01:36:10 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        112.140.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:36:10 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=2B9BB6B9E044E6253D0CB330DC3FC5C4B1D63D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:0a:6a:15:04:21:52:14:a7:55:c1:3a:4d:
                    95:e5:24:3c:dd:8f:3d:f3:00:a9:ec:12:c7:fb:30:
                    3d:be:df:a2:28:16:16:d6:0b:e5:b5:40:c1:de:54:
                    a2:ad:53:91:91:52:30:2e:ba:66:e3:cb:0c:ac:71:
                    b4:27:8d:f4:2e:6f:3f:1f:af:f2:bd:d7:1f:42:58:
                    f0:7e:9a:2e:b4:e2:aa:32:d5:f0:7f:06:17:a1:e6:
                    1f:79:76:12:0b:fc:0e:54:45:b3:09:5b:09:5a:42:
                    7d:e2:98:87:a0:b5:f6:d1:fd:4b:7b:38:08:cc:17:
                    06:ba:f2:6e:37:9b:f2:68:bb:8f:14:20:80:aa:e1:
                    0d:fa:25:00:d4:8c:f9:f8:c4:43:18:8a:ca:e8:e4:
                    1b:b3:a4:fd:59:41:1d:3d:4c:86:7a:64:e3:f7:13:
                    a3:e3:89:75:9a:45:13:20:66:0a:7e:3b:2a:8a:34:
                    63:35:17:a8:82:40:08:d0:1f:aa:e6:0a:bd:db:ef:
                    59:b4:ac:e6:1b:71:93:47:a0:3a:f5:62:08:ed:28:
                    eb:61:6e:fe:54:5c:d1:c2:e5:d0:1c:cd:de:85:26:
                    3a:85:59:a8:f8:f2:fc:e9:3c:06:67:69:03:e5:96:
                    9b:45:e1:79:4f:3e:7d:9a:8e:53:57:c9:35:77:f5:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9B:B6:B9:E0:44:E6:25:3D:0C:B3:30:DC:3F:C5:C4:B1:D6:3D:7E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/K5u2ueBE5iU9DLMw3D_FxLHWPX4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:1a:72:70:20:24:49:3e:11:f6:83:08:9b:6b:00:9b:93:02:
         07:0c:fa:8e:72:08:2f:58:6d:32:6f:e5:4a:60:ba:c4:c0:03:
         80:d6:eb:53:22:83:e4:5b:09:5c:c0:90:48:38:23:af:de:6a:
         6d:62:a2:3d:5f:81:43:be:8f:ab:fc:b5:e5:2e:1c:23:bd:2c:
         94:3a:0e:1e:47:1d:9f:73:8c:78:2d:32:ad:9c:53:47:4a:d8:
         fa:96:5c:5e:ef:bc:c5:d9:f8:1b:aa:d9:f9:f3:fd:2c:fe:46:
         fc:35:c0:82:6e:c2:a8:9f:8d:24:f5:8b:39:43:30:97:bf:91:
         cc:03:b9:5c:16:78:c7:42:4d:67:e9:91:e7:cf:e9:4f:5b:18:
         1a:3e:aa:ce:68:5e:70:18:73:1b:ea:b5:6b:91:6d:20:31:9e:
         24:6d:ea:81:6b:ed:ff:68:42:e6:ed:64:9d:68:c3:80:6b:e1:
         af:dd:8b:1c:f5:31:d5:fb:01:1b:f1:bc:f8:c3:ee:42:06:5f:
         ce:bb:ba:76:72:55:8b:74:bd:14:f8:11:d3:31:ff:f1:c4:05:
         3b:ec:91:30:7b:ba:b0:01:05:cd:0a:72:ce:a5:9c:1e:2f:c3:
         df:e8:81:8c:67:e8:f7:43:ba:53:99:21:c5:22:ec:57:9f:e0:
         b5:53:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:03:08 2025 by rpki-client