Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/sLGgaActsaSFOUuP72d7QBmj5Bk.roa
File:                     sLGgaActsaSFOUuP72d7QBmj5Bk.roa (raw, json)
Hash identifier:          0nszAiQf991UoL5xMmz5WyuSEX8jXh7GwnSC9AcKvFY=
Subject key identifier:   B0:B1:A0:68:07:2D:B1:A4:85:39:4B:8F:EF:67:7B:40:19:A3:E4:19
Certificate issuer:       /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial:       15
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/sLGgaActsaSFOUuP72d7QBmj5Bk.roa
Signing time:             Fri 23 May 2025 02:54:12 +0000
ROA not before:           Fri 23 May 2025 02:54:12 +0000
ROA not after:            Fri 15 May 2026 01:30:03 +0000
asID:                     59093
IP address blocks:        133.247.104.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
        Validity
            Not Before: May 23 02:54:12 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=B0B1A068072DB1A485394B8FEF677B4019A3E419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:36:eb:59:a9:22:a2:1d:ab:a7:ba:bb:a8:
                    2f:ac:a4:6f:6d:0e:5f:eb:7e:d3:4c:99:e8:25:58:
                    f1:cb:d5:1b:c5:87:a3:4e:f5:62:5f:39:a0:d1:94:
                    2a:36:da:97:63:ff:81:f5:e2:31:33:0f:b0:23:9c:
                    25:0a:b2:f1:aa:b0:c9:d6:db:80:5a:2f:b1:e4:cd:
                    0e:85:7b:3b:b5:2a:f3:48:e2:81:4e:62:c0:88:bf:
                    9a:bf:ce:29:f1:24:b4:62:5a:f7:95:a9:f6:ee:ee:
                    dc:23:e2:c1:c3:73:97:2f:db:07:34:49:5d:d6:82:
                    4c:40:b1:1c:5d:17:7b:ba:57:14:6e:7e:0f:c2:46:
                    46:1e:6b:5a:f4:32:21:09:d5:db:25:79:86:cd:75:
                    44:51:6a:79:ab:17:b8:5f:a6:cf:d3:6b:39:6f:f1:
                    71:89:51:72:41:4e:2d:0b:c3:92:23:5f:9c:26:a0:
                    8c:c2:59:4b:7f:31:6a:c7:be:d9:bd:6e:c2:48:34:
                    ea:50:6f:a4:e8:a1:9b:3c:37:d4:22:65:a4:94:1a:
                    fe:72:5d:ee:e0:c6:bb:22:d3:a7:42:64:92:f9:59:
                    38:08:73:5e:91:25:61:5b:a7:1f:b2:f1:63:7e:a9:
                    59:0d:c5:a5:f8:0d:36:97:c3:57:99:0e:e0:9b:51:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B1:A0:68:07:2D:B1:A4:85:39:4B:8F:EF:67:7B:40:19:A3:E4:19
            X509v3 Authority Key Identifier:
                keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/sLGgaActsaSFOUuP72d7QBmj5Bk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:66:2b:21:e6:7a:0e:40:46:0a:65:0a:c2:b6:62:82:20:04:
         7d:e1:82:43:dd:6a:db:90:01:1c:f6:ab:36:1f:b3:bb:c7:c2:
         ad:19:49:52:03:99:4f:86:30:46:f2:7f:67:70:64:e0:d1:bb:
         23:c0:50:fc:d3:e6:a5:fe:06:b2:83:c0:04:18:41:d3:70:c9:
         20:14:99:e9:30:f8:8d:63:4e:15:19:e7:34:50:51:d1:8d:1a:
         3a:24:d9:53:bb:b9:db:8e:04:9d:22:af:cc:f8:1a:26:31:06:
         bd:19:1e:20:58:8d:98:31:b3:63:68:05:ab:3c:d5:a1:d5:ef:
         b0:0a:b1:c9:ab:c0:13:e2:4e:51:d2:39:6a:4d:dc:cd:cb:25:
         31:2f:4a:f9:80:91:59:28:40:37:2f:2c:3e:b3:9c:c7:3e:d8:
         83:6a:bc:6e:5b:0b:08:f7:16:50:d5:3f:02:8b:a7:34:6a:df:
         dd:4e:6b:e9:88:9f:dd:2a:b1:45:e4:d9:90:4c:7a:b3:2c:d2:
         0c:5b:ac:ba:a0:95:a3:c9:52:02:f0:df:26:df:0d:2f:d1:aa:
         ed:2e:28:19:e8:d1:3e:c4:23:05:de:3a:cf:56:60:c8:a1:e9:
         b8:fc:a3:06:2d:14:8d:a8:d1:e6:1e:63:70:e1:6c:2d:f9:4d:
         a8:41:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:27:43 2025 by rpki-client