Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/ZSIrZGGu6GsHxzZgxErna_x1arc.roa
File:                     ZSIrZGGu6GsHxzZgxErna_x1arc.roa (raw, json)
Hash identifier:          2AHUamLM+XDR41/pFdAvvpbrNKpX4iG6u5nYpCGZ3GE=
Subject key identifier:   65:22:2B:64:61:AE:E8:6B:07:C7:36:60:C4:4A:E7:6B:FC:75:6A:B7
Certificate issuer:       /CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Certificate serial:       06
Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/ZSIrZGGu6GsHxzZgxErna_x1arc.roa
Signing time:             Mon 02 Dec 2024 01:26:49 +0000
ROA not before:           Mon 02 Dec 2024 01:26:49 +0000
ROA not after:            Thu 20 Nov 2025 01:37:29 +0000
asID:                     17936
IP address blocks:        218.40.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457
        Validity
            Not Before: Dec  2 01:26:49 2024 GMT
            Not After : Nov 20 01:37:29 2025 GMT
        Subject: CN=65222B6461AEE86B07C73660C44AE76BFC756AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:54:44:6b:6b:cf:a4:20:fc:36:5e:40:41:9c:
                    c5:f6:02:36:e4:93:2b:40:cb:47:4d:23:f8:c3:ed:
                    b7:e9:eb:53:47:a8:90:59:24:05:84:61:5e:51:4c:
                    78:b8:95:3a:56:c9:5e:f8:7f:f5:b8:3a:d2:91:91:
                    a0:4f:da:09:3a:0a:ec:56:71:63:de:7b:48:88:84:
                    df:d9:88:c1:c3:f9:48:22:9c:b3:80:af:2f:71:f7:
                    e5:a3:cc:ec:7e:8a:8f:19:32:9d:f2:ec:f9:33:6b:
                    d2:cb:85:a9:c0:44:f8:9e:d8:7e:d0:f5:0f:7b:03:
                    1f:5e:ab:c8:1e:f6:d3:65:87:b8:aa:52:e6:65:68:
                    5c:1e:95:66:78:57:b0:4a:1d:d4:9c:e8:2d:4b:ef:
                    29:a7:96:79:79:3c:d3:b9:fa:a2:55:bd:29:52:88:
                    22:d5:35:5e:05:4a:df:85:81:4e:85:a0:f9:82:f0:
                    65:6d:f3:14:c9:91:dd:52:62:a2:ec:20:89:1e:5b:
                    42:fe:ca:3c:80:15:50:76:41:81:f8:05:f3:25:40:
                    40:a8:89:1c:7a:e8:3d:80:df:e5:d4:d7:59:84:83:
                    99:d3:b7:67:1b:61:ce:eb:ab:6b:8c:a5:7c:39:6b:
                    08:45:16:81:77:ab:06:e7:4e:a6:32:af:cf:30:76:
                    33:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:2B:64:61:AE:E8:6B:07:C7:36:60:C4:4A:E7:6B:FC:75:6A:B7
            X509v3 Authority Key Identifier:
                keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/ZSIrZGGu6GsHxzZgxErna_x1arc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:f1:57:0c:2d:71:ac:9c:41:af:d7:e7:8c:10:fa:cd:10:82:
         47:0f:f3:d3:b5:e8:37:dc:58:bb:6e:54:57:e9:db:55:f0:0e:
         bc:56:16:76:78:cc:7d:51:91:eb:9d:78:77:cf:ed:73:16:70:
         22:6f:f9:5e:56:e0:45:fb:41:ac:f0:53:e9:2e:9e:cc:7f:a2:
         d0:7e:21:52:fe:44:20:1d:ab:de:35:70:b1:73:e1:45:80:93:
         18:64:11:b0:f4:e8:91:51:b1:06:89:b0:37:da:06:7d:c8:32:
         a4:49:24:cb:2b:83:26:e5:82:20:75:f7:5f:70:8c:88:28:48:
         f8:0b:10:41:2f:5b:bf:75:7d:38:57:c6:0d:c3:dc:68:59:fc:
         7a:77:26:c9:7f:dd:e4:a3:c7:7a:96:d9:e7:88:45:75:c4:c5:
         b9:4a:c2:fe:24:d0:00:85:45:cf:d1:ea:9a:00:83:3a:95:a8:
         0e:05:cd:35:4a:ad:ce:c7:39:ee:c4:f2:a3:e1:c8:30:7c:d5:
         bc:7f:63:92:c2:7d:31:03:00:a8:9f:e5:b3:84:fa:76:1a:06:
         48:e0:0c:ce:88:72:8a:a6:f6:14:aa:a4:b2:2f:12:51:23:a3:
         5b:4c:06:f2:ad:67:02:0b:7e:18:f7:58:d6:c9:b1:2d:c0:6d:
         dd:7a:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:43 2025 by rpki-client