Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/i-iKaQo3B7kqMhXM6NYJzvPa_FE.roa
File:                     i-iKaQo3B7kqMhXM6NYJzvPa_FE.roa (raw, json)
Hash identifier:          YN02Gy2R9k4eMjJMKE11ys6krVroanXxzZT62oP08fA=
Subject key identifier:   8B:E8:8A:69:0A:37:07:B9:2A:32:15:CC:E8:D6:09:CE:F3:DA:FC:51
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       3A
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/i-iKaQo3B7kqMhXM6NYJzvPa_FE.roa
Signing time:             Fri 31 Jan 2025 01:29:07 +0000
ROA not before:           Fri 31 Jan 2025 01:29:07 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     18094
IP address blocks:        175.111.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Jan 31 01:29:07 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=8BE88A690A3707B92A3215CCE8D609CEF3DAFC51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:63:95:33:3d:d5:1d:de:42:49:63:c0:47:
                    1b:ff:35:72:72:fd:1e:6f:53:b4:ea:2f:ef:8d:ed:
                    a2:56:e4:f9:77:9b:93:fe:41:13:94:4e:91:8c:66:
                    e3:9f:65:8c:28:62:82:05:36:80:0f:34:b1:cc:91:
                    91:34:60:7f:d5:93:1a:b4:f4:af:18:64:41:2a:26:
                    c1:50:8f:28:53:e3:b1:d4:36:e7:e4:d6:10:85:67:
                    b7:7a:85:6e:0d:11:95:5f:4c:f2:91:2f:dc:ef:6d:
                    55:ec:65:ed:f7:26:f3:a2:fc:d5:1f:ae:37:f7:78:
                    c5:8f:37:64:9f:64:e7:b5:49:8d:ee:85:38:d8:16:
                    60:a6:26:17:3a:76:12:63:b8:80:29:d0:6b:f1:19:
                    19:2b:2b:d8:79:d2:0d:44:d0:5e:76:5b:8b:7b:78:
                    3c:1b:bc:5d:1e:23:29:01:c2:ef:11:a0:59:a6:3f:
                    01:63:21:fd:07:33:61:78:ac:54:dd:65:04:25:72:
                    3e:4e:59:2b:7b:02:4d:44:36:26:9f:5e:d8:f7:3d:
                    19:b9:65:e5:52:85:aa:19:c6:b1:8e:5c:4e:10:d0:
                    52:de:5c:d4:34:92:01:60:f4:7c:0e:97:18:29:e4:
                    26:74:76:6a:63:2b:23:21:02:2c:7a:d0:06:31:59:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E8:8A:69:0A:37:07:B9:2A:32:15:CC:E8:D6:09:CE:F3:DA:FC:51
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/i-iKaQo3B7kqMhXM6NYJzvPa_FE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:a1:48:d5:c8:77:ea:45:43:92:58:60:09:ba:9e:22:c5:5d:
         60:45:d6:24:54:33:38:ff:d6:d2:14:f8:72:62:62:1d:6f:cb:
         31:71:5c:6e:86:09:91:8a:f1:09:31:16:b5:f9:27:21:52:16:
         1c:5d:1f:ac:15:ef:dd:3b:5e:33:5f:00:92:f0:b3:41:f3:21:
         d0:05:6f:89:a7:18:99:74:87:fa:8e:2e:33:21:e7:0d:8d:88:
         b6:d7:2a:33:67:41:55:df:47:ca:c8:74:20:e9:8e:b8:a3:af:
         de:d0:97:a9:02:a6:35:31:f7:db:9f:6f:44:9c:81:1c:36:b3:
         a4:38:fd:7d:40:f1:01:18:ee:60:52:97:62:a6:b5:a3:9c:0d:
         cd:8d:88:ae:47:a4:45:5d:5d:b1:48:3e:9e:0a:f6:23:4a:b7:
         24:c7:56:48:41:9d:af:14:68:ee:3b:6a:8a:37:88:da:63:bb:
         e1:64:19:82:d6:1f:d0:eb:c1:1d:4b:b9:8e:f6:07:9b:25:88:
         ca:a8:a4:82:49:19:ce:82:c0:02:e3:dc:2c:e5:e2:82:8a:ae:
         e4:33:6d:b6:b8:05:e9:b1:91:76:8a:a5:27:28:72:38:97:19:
         e7:3f:96:fa:1d:9c:ec:dd:48:e6:9e:a6:da:94:4b:2c:81:24:
         a9:69:3c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:20 2025 by rpki-client