Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/7yoqspJbyybhBsa3FrOx9RfwJ_Q.roa
File:                     7yoqspJbyybhBsa3FrOx9RfwJ_Q.roa (raw, json)
Hash identifier:          v88r6uvp/aFjltN1dY+tgfEMouKZtG6/leXG1aQEs7I=
Subject key identifier:   EF:2A:2A:B2:92:5B:CB:26:E1:06:C6:B7:16:B3:B1:F5:17:F0:27:F4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0354
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7yoqspJbyybhBsa3FrOx9RfwJ_Q.roa
Signing time:             Fri 24 Jan 2025 01:11:26 +0000
ROA not before:           Fri 24 Jan 2025 01:11:26 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        210.159.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 20:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan 24 01:11:26 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=EF2A2AB2925BCB26E106C6B716B3B1F517F027F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:e6:d0:42:11:df:6e:8f:5d:07:10:6f:97:
                    cf:5e:cc:e7:17:db:ac:1a:0d:b0:96:ee:fc:43:a5:
                    12:74:1c:6f:15:a1:8a:7b:52:fb:07:d4:33:81:a6:
                    a3:df:ad:6d:ba:23:92:8d:2e:ce:1d:f5:e0:6f:05:
                    37:ab:ac:2d:82:54:47:17:16:fe:0b:69:6a:32:52:
                    27:9d:fc:7b:35:3e:c2:44:df:0c:d6:ac:9f:cf:62:
                    ae:50:b1:c4:3f:2a:14:31:73:0c:b2:4b:10:ce:04:
                    c6:a1:cb:86:cb:c8:f7:e5:87:62:93:61:06:99:c8:
                    e3:98:61:00:25:ee:48:86:e5:bc:34:c3:6e:7e:8b:
                    6c:e2:8e:06:52:af:00:a8:30:19:e0:2a:83:4a:62:
                    67:11:c9:26:11:a4:ca:a5:8e:03:e2:2d:92:7d:f1:
                    ef:c8:d2:3f:97:37:51:be:1c:f3:d8:9e:c7:9f:11:
                    fd:8b:3d:d4:fc:43:7c:15:22:c7:48:9c:97:01:3f:
                    b9:75:2c:da:b0:3f:75:9f:a7:47:ce:64:61:66:fa:
                    51:1a:d5:4e:cd:35:9e:2a:bf:e8:76:3c:0f:20:da:
                    8b:52:7e:6e:d0:b0:42:a6:29:d7:40:f1:c4:6d:d1:
                    45:93:e4:bb:5a:3b:4e:7a:dd:c3:46:05:50:f1:93:
                    8e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2A:2A:B2:92:5B:CB:26:E1:06:C6:B7:16:B3:B1:F5:17:F0:27:F4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7yoqspJbyybhBsa3FrOx9RfwJ_Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:1a:40:64:c9:fe:c8:83:19:13:e6:6e:23:b1:56:a4:e5:29:
         bb:5d:50:5b:95:3c:f1:77:f0:97:22:66:20:0f:4b:5b:bc:bd:
         3d:30:f9:bc:65:8b:4e:69:16:fd:5c:1e:8c:99:36:d2:c9:9a:
         a0:43:57:47:0c:35:f0:7d:42:be:03:76:4c:59:bb:39:dd:f1:
         4d:2c:ad:5d:f7:a2:a0:c5:20:ad:a9:72:08:62:d4:61:a2:b6:
         bc:67:dc:eb:8c:8b:59:04:0a:c2:51:28:63:1b:ff:31:b6:c8:
         a1:1b:e4:d9:41:68:dd:ce:16:c8:60:87:46:a5:38:25:ad:ce:
         a6:5c:0f:d4:d6:88:ca:96:0d:76:b7:b2:ee:6b:3f:9c:e8:a2:
         c8:d2:1d:56:6f:70:c4:3e:79:88:c7:11:a4:4c:36:24:b4:dd:
         89:d0:8e:5b:af:ca:35:e0:fc:d6:b4:f6:79:ba:1a:b9:f1:e2:
         11:92:90:f4:47:61:66:bf:ce:a1:1e:09:d3:dc:04:65:75:b9:
         61:33:f6:2c:b7:b2:c0:e6:71:87:21:5d:86:1b:4a:74:6b:2c:
         ae:d7:68:76:d9:4e:31:62:bc:2f:b9:51:ac:a0:f2:b3:4c:6b:
         82:0d:1d:6c:88:97:b3:9c:e0:59:cd:99:1c:f2:e7:0a:a8:1e:
         e2:9b:de:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:03 2025 by rpki-client