Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/W-ERzt8krj8uYmR9nPsp_bw-FVM.roa
File:                     W-ERzt8krj8uYmR9nPsp_bw-FVM.roa (raw, json)
Hash identifier:          PTzn1mwLEcrFNjvKFBdbw8tSBBY1xaWCqNG9Z2W6o0A=
Subject key identifier:   5B:E1:11:CE:DF:24:AE:3F:2E:62:64:7D:9C:FB:29:FD:BC:3E:15:53
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0114
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/W-ERzt8krj8uYmR9nPsp_bw-FVM.roa
Signing time:             Fri 31 Jan 2025 01:31:06 +0000
ROA not before:           Fri 31 Jan 2025 01:31:06 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     9607
IP address blocks:        203.141.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 20:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jan 31 01:31:06 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=5BE111CEDF24AE3F2E62647D9CFB29FDBC3E1553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:dd:34:59:7f:c8:de:aa:6c:55:3f:eb:82:
                    87:a1:3a:a0:56:4f:53:84:80:8d:28:df:68:9a:b8:
                    5a:52:29:8f:25:79:ea:e4:be:29:e1:e2:00:a1:d5:
                    33:6b:c7:97:99:ae:31:be:d9:f4:53:2a:f4:93:a0:
                    ab:0f:a1:21:74:e3:35:c3:7a:63:9c:da:78:7e:21:
                    c5:86:b0:68:10:7a:01:65:e2:9d:4a:ec:7d:40:24:
                    e6:37:70:9d:5e:30:4d:ab:01:32:f0:f8:69:bc:6a:
                    3b:78:d0:37:1f:b5:42:27:2a:81:ee:32:15:ab:17:
                    2c:65:5d:f2:30:a7:98:7b:59:e5:ec:35:24:d3:ec:
                    e3:2e:20:76:42:b1:b3:98:c9:b4:8d:41:e8:db:0a:
                    7e:e3:d3:83:cf:d4:e7:8b:ab:4a:1f:78:a2:ed:de:
                    5d:84:64:d7:85:13:1c:9a:f5:9f:77:2b:78:ae:74:
                    46:a6:75:e3:6a:ba:cf:c3:5e:f3:ae:84:8b:89:c0:
                    48:92:d9:64:63:8b:fd:ee:4e:20:4b:de:a7:1c:b9:
                    fd:f8:b0:a6:5e:d1:f6:6c:67:c7:13:db:5b:d9:32:
                    ae:f0:67:a0:b4:c9:85:e6:78:8d:53:7d:d9:c9:be:
                    db:77:2e:34:58:ba:6b:73:b8:1b:d1:57:82:f2:6b:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E1:11:CE:DF:24:AE:3F:2E:62:64:7D:9C:FB:29:FD:BC:3E:15:53
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/W-ERzt8krj8uYmR9nPsp_bw-FVM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:2e:1c:a3:24:78:28:ff:0c:ce:62:7c:87:21:36:0b:a8:f3:
         27:54:62:bd:25:40:e1:df:a0:72:69:84:48:20:3f:cc:ec:77:
         78:d9:88:79:e7:fd:a3:b5:6e:fb:83:6f:bb:15:e2:cf:33:9f:
         62:40:34:2e:a3:da:d5:b8:1b:4d:e2:28:71:0a:ac:53:15:e7:
         8b:71:7a:ae:c3:e9:92:39:af:c4:a1:9a:11:a8:0d:cd:4a:0e:
         71:47:b6:f2:60:c9:6a:ba:40:4e:a3:93:c9:d9:4d:ef:4c:09:
         90:6b:37:18:b4:0a:23:e2:77:32:51:78:41:64:27:68:96:0c:
         aa:d3:a9:c5:2c:4e:c3:8a:26:54:eb:83:35:77:2a:6c:31:f6:
         45:5f:0b:85:57:6b:54:f4:df:5c:65:1b:8e:0c:dd:ec:79:7d:
         91:64:36:5d:f8:cb:60:f3:07:05:a3:e1:86:8b:2a:54:dd:d6:
         37:0d:5e:a0:31:fb:87:01:32:b4:ce:41:d0:a3:06:62:1b:8b:
         ff:25:88:79:1a:f6:8e:fe:e7:de:b6:08:c3:55:46:7f:bb:43:
         21:07:40:a7:38:10:48:33:14:d1:e3:be:42:0a:a4:36:11:10:
         7c:41:b1:18:55:38:47:a3:fb:4c:c2:d8:33:3d:8a:82:02:f1:
         3d:d6:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:58 2025 by rpki-client