Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/QUguZTKOwxhkV4vEfMSXUXXd-vc.roa
File:                     QUguZTKOwxhkV4vEfMSXUXXd-vc.roa (raw, json)
Hash identifier:          MPldR8RLSNjH4KA6wPEfIVE4aGcqnMAJ77XjAgSuKX0=
Subject key identifier:   41:48:2E:65:32:8E:C3:18:64:57:8B:C4:7C:C4:97:51:75:DD:FA:F7
Certificate issuer:       /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial:       18
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/QUguZTKOwxhkV4vEfMSXUXXd-vc.roa
Signing time:             Wed 02 Apr 2025 04:53:26 +0000
ROA not before:           Wed 02 Apr 2025 04:53:26 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     17931
IP address blocks:        103.238.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
        Validity
            Not Before: Apr  2 04:53:26 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=41482E65328EC31864578BC47CC4975175DDFAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:15:c2:b3:71:9f:31:bc:78:80:ff:3e:55:
                    6d:f8:54:9a:b6:c8:7a:9e:99:42:d8:b2:46:bc:3b:
                    30:c4:ae:a3:36:35:b6:fc:57:c7:32:94:be:4b:43:
                    ae:84:c3:f4:14:4a:b6:bd:d2:b6:1b:b6:af:81:b3:
                    c9:37:96:40:23:2a:54:35:cb:de:1b:77:5e:28:4f:
                    e5:e9:03:80:2d:8a:22:52:dc:fe:55:c0:92:51:2b:
                    05:57:45:63:a2:96:bb:80:67:52:24:0e:c4:7f:bd:
                    93:7a:dd:9c:c4:a7:e9:08:58:e4:ff:58:b8:9d:94:
                    ff:60:df:ee:24:f1:f0:b2:d2:d9:7d:da:a0:d1:66:
                    40:87:75:b7:0e:1d:a5:cb:b6:51:e0:1c:1f:da:03:
                    06:dc:dd:18:cd:c1:47:87:31:30:aa:c6:bb:8b:bc:
                    62:cd:8e:69:8a:aa:06:93:79:74:9a:c2:f4:05:e9:
                    89:cb:94:33:e6:32:c1:49:be:7a:60:6b:e3:f7:c0:
                    59:5d:2a:99:f1:15:b6:f3:a1:c9:e3:b5:48:21:94:
                    36:00:f8:f6:f7:71:1a:db:9d:da:96:79:3e:28:ea:
                    87:46:47:3d:db:66:79:d5:d6:65:66:5a:93:7e:70:
                    83:7c:73:0b:b5:3c:81:b9:36:c6:8d:02:84:2a:45:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:48:2E:65:32:8E:C3:18:64:57:8B:C4:7C:C4:97:51:75:DD:FA:F7
            X509v3 Authority Key Identifier:
                keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/QUguZTKOwxhkV4vEfMSXUXXd-vc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:ad:f0:4e:ae:54:d6:13:8d:ea:2e:23:83:0a:63:c7:fb:43:
         58:4a:35:58:98:f5:65:5a:98:8d:2e:98:a9:aa:99:c2:24:55:
         30:17:72:d5:18:f2:df:3f:63:83:8c:3e:33:12:04:de:60:f6:
         73:a8:03:a2:99:76:0b:3a:0c:e8:4d:f0:67:e0:ff:62:e3:be:
         6c:fa:0e:c4:5c:b1:64:30:b4:4e:d7:eb:97:0d:cc:2c:b4:2b:
         ec:14:31:e7:a5:3b:5c:bd:e3:22:8f:6b:78:e1:c8:79:15:a0:
         d2:f9:3e:2d:5c:55:22:1d:b8:ed:eb:c1:11:34:4e:6d:59:f9:
         b1:ae:d0:72:55:7d:64:7a:f7:f3:46:9c:11:e0:e8:df:22:f3:
         28:9b:ca:97:f0:e3:98:2e:ae:03:99:1c:92:e5:9c:5f:e9:bb:
         6b:6a:77:b1:f7:e2:a7:f8:38:65:2c:6a:dc:88:39:a3:3c:fa:
         0c:85:45:36:29:47:ab:94:4a:eb:3b:20:03:1d:04:41:09:b6:
         32:a1:a5:69:1c:e6:08:17:9c:8f:8e:df:4b:2e:b3:77:05:4b:
         5c:24:c2:e5:48:ab:25:f9:dc:2b:08:ea:7a:ae:dd:7c:e8:08:
         f9:a2:5d:11:06:f0:0b:af:ef:75:43:f4:d1:5f:a0:ab:82:b9:
         f2:7f:91:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:01 2025 by rpki-client