Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/L0QKFl7h6Qx7HZ0yt1N06sl5oOo.roa
File:                     L0QKFl7h6Qx7HZ0yt1N06sl5oOo.roa (raw, json)
Hash identifier:          4jntrKI85dMOq8/DVEyYs068hR6wn6SImajdixTRO48=
Subject key identifier:   2F:44:0A:16:5E:E1:E9:0C:7B:1D:9D:32:B7:53:74:EA:C9:79:A0:EA
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       022A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L0QKFl7h6Qx7HZ0yt1N06sl5oOo.roa
Signing time:             Thu 01 May 2025 01:31:42 +0000
ROA not before:           Thu 01 May 2025 01:31:42 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        210.232.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 18:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:42 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=2F440A165EE1E90C7B1D9D32B75374EAC979A0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:ee:73:c1:ad:8c:d8:a7:64:a8:69:df:cc:
                    38:d1:31:2b:43:7b:f0:4c:71:06:6d:d9:de:7b:66:
                    b5:ae:83:be:a3:a1:ae:25:ff:91:3d:41:e3:be:07:
                    1a:f1:3a:a4:74:64:1b:0f:fa:97:c7:6e:07:b4:9f:
                    9c:91:48:98:6e:7a:ec:56:d6:8a:38:28:8f:41:90:
                    c2:cd:70:47:de:73:72:be:8c:0d:04:10:79:ca:02:
                    56:ca:50:3f:ba:c5:46:62:5a:91:53:eb:c8:8c:a0:
                    d1:f0:3a:92:96:42:f4:ed:59:eb:f8:97:5d:2b:f5:
                    0e:3a:b1:d4:b7:d1:47:fe:02:86:85:99:67:79:1c:
                    b1:e8:4b:57:a7:d0:4a:5b:bb:18:06:64:c6:37:78:
                    2c:34:52:44:b5:9e:30:be:81:fb:43:93:f7:37:97:
                    ca:ed:00:15:6e:45:da:c9:16:19:d7:1e:18:a3:bc:
                    6a:4e:d1:39:9d:64:0c:64:0d:02:0e:ab:a4:ce:bf:
                    c2:80:df:19:67:1b:7a:f2:1b:6c:af:99:9b:fa:f5:
                    ca:b0:3b:11:fd:c1:e7:f3:44:39:c9:9b:e9:f5:f7:
                    45:12:0f:e3:48:bc:cb:a0:cd:c9:07:2f:33:cf:8b:
                    e4:43:38:bb:aa:de:aa:55:4c:99:48:cb:14:d4:e4:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:44:0A:16:5E:E1:E9:0C:7B:1D:9D:32:B7:53:74:EA:C9:79:A0:EA
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L0QKFl7h6Qx7HZ0yt1N06sl5oOo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.232.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:1a:69:40:12:ab:5d:3e:da:39:3f:59:c4:1a:c3:41:a9:e3:
         9b:41:f9:78:06:d4:c5:c1:12:18:e1:98:a6:47:00:05:41:75:
         ed:63:1a:1e:36:df:30:df:87:fd:6e:96:d5:17:e7:b0:75:c8:
         96:0d:91:e9:ef:45:0e:4a:41:7d:10:b6:1f:c1:57:c3:0b:a3:
         52:ac:1c:57:1a:a6:8d:d8:fc:bf:eb:be:98:47:b3:e1:7b:7d:
         e9:f0:b2:d1:a3:0e:8c:fe:a8:a8:9b:f5:c0:ed:a8:7e:76:ec:
         1c:04:f4:30:74:87:7a:a4:e8:cd:a9:e6:f7:ec:5c:d2:88:56:
         5c:37:67:74:30:99:c3:1f:34:05:52:f4:5f:7f:16:b7:3c:81:
         0c:42:1a:e7:fb:ab:3d:7b:d6:7c:36:d6:59:bc:e7:67:5b:8a:
         8f:b2:e0:17:99:5a:62:a0:89:14:be:d6:63:ef:70:9f:79:b2:
         a3:5e:f4:a4:c2:c2:f9:7b:2e:45:5b:dc:ae:8c:96:30:57:32:
         d4:f1:fb:b4:a5:a9:1b:fc:87:e7:80:ae:fa:60:65:17:ce:e7:
         a4:a4:4a:34:0c:8b:69:71:08:f1:19:87:83:2e:f5:bd:4a:a6:
         e4:9c:50:3c:82:47:a3:4c:ec:0c:1d:fb:3f:2e:d2:d5:c8:ec:
         5f:41:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:33:12 2025 by rpki-client