Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/Sj4GfpmEfvFeOWqL9BNjEXIyWqc.roa
File:                     Sj4GfpmEfvFeOWqL9BNjEXIyWqc.roa (raw, json)
Hash identifier:          UQPB+l2k5iy1VDwh459pIfmlqUwdchBPydIaubUNIBY=
Subject key identifier:   4A:3E:06:7E:99:84:7E:F1:5E:39:6A:8B:F4:13:63:11:72:32:5A:A7
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       3C
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/Sj4GfpmEfvFeOWqL9BNjEXIyWqc.roa
Signing time:             Tue 01 Apr 2025 01:28:21 +0000
ROA not before:           Tue 01 Apr 2025 01:28:21 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     17958
IP address blocks:        180.178.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Apr  1 01:28:21 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=4A3E067E99847EF15E396A8BF413631172325AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:c4:a0:7c:ea:43:2f:2d:9b:c6:70:44:63:
                    ba:8e:1e:56:6b:6c:38:fb:32:e3:a5:c5:90:ed:0b:
                    fe:b5:97:27:a5:17:14:ad:4d:fa:7b:6d:f0:b6:0b:
                    64:38:57:38:77:b7:3b:a1:84:b8:60:da:f7:41:0a:
                    88:a2:d2:90:58:78:6f:1b:31:72:75:9f:54:e2:4c:
                    20:58:8e:0f:ba:c2:cb:cc:31:83:e9:f7:61:5d:1a:
                    70:9e:c0:3a:ff:bd:b9:e6:5f:3e:3b:d2:3a:b7:54:
                    fd:05:80:b7:bd:60:e1:05:54:14:c8:2e:0d:8b:23:
                    18:f6:5d:c9:6d:65:d7:a8:da:a7:e3:bb:af:71:d0:
                    a2:36:43:72:31:e2:21:29:97:2f:15:8d:f2:85:32:
                    ca:22:7f:bd:ba:03:e2:58:9b:db:a6:d2:93:7e:0e:
                    26:cc:27:37:a7:b4:f4:6d:d7:ea:2b:2d:e8:5d:e7:
                    bb:01:e4:08:34:cb:ac:c1:e1:61:c4:41:14:eb:bc:
                    be:96:b3:08:92:75:ef:3c:d9:63:ff:48:12:3f:ab:
                    25:72:e2:a5:82:2d:a1:23:1e:38:cf:0d:2d:da:5c:
                    05:47:96:71:e5:fe:42:c4:b8:a8:f8:bd:c4:8c:6e:
                    84:47:02:3f:cf:bd:f4:a3:3e:5c:ce:bd:15:0c:c6:
                    45:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3E:06:7E:99:84:7E:F1:5E:39:6A:8B:F4:13:63:11:72:32:5A:A7
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/Sj4GfpmEfvFeOWqL9BNjEXIyWqc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:bb:99:9f:79:7c:fc:ac:10:a2:78:d3:18:1c:30:a3:04:
         d4:63:e5:b9:4f:fc:ad:a3:dd:69:ff:2d:15:7f:3b:d8:b0:7e:
         5e:fe:c2:5c:ed:f0:e6:43:e8:ed:48:b9:82:d5:cf:99:c3:8c:
         56:7a:68:70:64:30:76:4b:ab:96:d1:6e:14:32:0b:06:c5:e0:
         15:6c:27:40:6b:38:56:52:c4:e6:04:74:5f:66:fb:4f:30:3d:
         43:7e:49:1e:60:0f:05:4e:a2:08:af:32:d7:5c:34:2b:51:1a:
         dc:cb:51:ae:76:6e:83:d7:0e:24:3f:14:e4:ca:c0:8b:c9:0b:
         bd:b7:1d:89:c2:3b:ac:89:5b:2c:3d:74:61:c8:bf:61:35:49:
         0a:f3:eb:2c:e7:c2:d4:49:93:95:3a:a8:7b:6f:95:4a:2b:6c:
         f7:11:69:87:58:f0:3e:3c:07:b1:b9:9c:b6:ec:22:55:ea:7d:
         1d:10:9f:7c:fd:d2:99:f5:19:95:54:aa:1c:d1:b7:20:f2:04:
         a4:31:ba:4b:bf:15:fe:c6:2b:ca:fc:c7:c5:88:66:36:56:ff:
         89:e2:1c:02:ec:de:95:d1:fe:ca:07:db:be:6f:ef:d4:3f:8c:
         af:ec:63:a1:e6:a9:09:0d:1b:f4:49:d2:c0:c1:01:6d:fb:94:
         b3:81:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:35 2025 by rpki-client