Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/gr8f-D9hD_CoWaOPVYhvuZlM4JY.roa
File:                     gr8f-D9hD_CoWaOPVYhvuZlM4JY.roa (raw, json)
Hash identifier:          p8rmmMm7KFCv/KrImRg1IU0BzJNrzQmj3RJKxH9BtWk=
Subject key identifier:   82:BF:1F:F8:3F:61:0F:F0:A8:59:A3:8F:55:88:6F:B9:99:4C:E0:96
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0568
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gr8f-D9hD_CoWaOPVYhvuZlM4JY.roa
Signing time:             Fri 31 Jan 2025 01:39:41 +0000
ROA not before:           Fri 31 Jan 2025 01:39:41 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        112.138.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:39:41 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=82BF1FF83F610FF0A859A38F55886FB9994CE096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:5e:6b:99:f4:65:a7:2a:56:1c:09:69:a6:
                    5d:d2:ea:20:49:57:38:e1:d2:9e:17:61:ab:3f:84:
                    4b:a0:c2:5b:3a:44:cf:c3:a0:5c:09:94:fc:5d:46:
                    79:5d:45:f4:c8:0e:7f:38:31:1b:43:9d:ac:4b:29:
                    99:3e:3f:20:a6:c6:18:a7:cc:d7:2c:70:30:ad:4e:
                    2d:0b:f9:3f:ef:47:39:6e:9f:f5:ed:9b:c5:6b:fc:
                    fc:66:5d:27:a4:00:cd:de:6c:75:e1:65:e6:3e:d7:
                    7e:ef:69:ea:8a:9d:5d:10:09:bd:b9:b4:b0:4e:b9:
                    83:30:e1:06:be:63:cd:04:24:4b:d9:7e:e9:53:4a:
                    0b:8d:45:9c:ea:4b:b5:3c:1b:5e:be:c0:f0:db:b0:
                    a7:6a:81:85:4f:09:34:11:1b:38:e5:95:5e:3f:3d:
                    cd:42:e8:c9:3e:7d:29:de:94:97:87:45:42:7b:5f:
                    7f:75:e6:1b:01:df:ab:65:3f:44:81:ea:0e:0f:e7:
                    cb:03:12:ab:a8:6f:43:ee:22:7e:d5:70:15:aa:db:
                    6a:ef:09:bb:dd:30:33:98:c8:5a:64:27:48:6d:a1:
                    35:3c:76:59:7d:73:52:88:22:06:e8:c3:f8:23:79:
                    2e:91:a5:1b:b4:7e:38:12:7e:31:27:95:40:85:78:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BF:1F:F8:3F:61:0F:F0:A8:59:A3:8F:55:88:6F:B9:99:4C:E0:96
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gr8f-D9hD_CoWaOPVYhvuZlM4JY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.138.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a1:d3:36:42:fb:11:ef:2e:9e:ab:80:5b:77:05:91:2a:40:c4:
         62:a0:fc:98:37:e4:71:b6:85:ad:58:48:ac:8e:41:6a:c5:0e:
         1a:b2:3f:2b:1b:f5:b9:89:09:96:59:93:1e:46:b6:0d:c7:49:
         59:91:cc:2d:eb:da:e8:61:45:b8:63:3d:bc:30:b7:18:9b:4d:
         f5:54:50:17:13:30:dc:5f:9f:b1:8e:40:17:22:a7:7a:82:65:
         80:e2:68:ce:24:5f:0f:2a:2e:60:42:fa:eb:5d:0a:d5:b6:79:
         72:d7:ba:c0:cd:c3:50:bb:bf:d9:c1:37:a5:0f:96:ea:85:a9:
         bd:ec:20:a8:3f:93:f7:43:5c:a9:a6:a3:ae:a2:4c:3c:6f:a7:
         00:7a:81:9a:1e:b3:d5:e3:82:a7:09:c1:f3:f1:8b:6c:da:ad:
         61:9d:7b:8d:cd:dd:ba:cc:67:2d:87:dc:be:6c:d2:5d:c6:2d:
         af:f8:93:31:7e:47:6a:c6:7f:0a:cd:2c:20:c3:7c:c1:5a:26:
         b3:50:b6:e1:90:d3:6c:39:8c:3c:5a:f8:88:a6:12:ca:3e:37:
         59:c9:0f:21:b3:4b:b7:6d:d8:04:55:f9:ce:50:48:6b:ec:3f:
         bb:8e:bc:c3:bd:35:6d:88:00:0f:4e:e7:f2:99:40:94:9b:7a:
         46:ff:aa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:54 2025 by rpki-client