Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/x5zajPVpN1C8YywuMJRQ_rKYlD0.roa
File:                     x5zajPVpN1C8YywuMJRQ_rKYlD0.roa (raw, json)
Hash identifier:          e+e35SubHKls9VIki/R9FsrEGUEZeRYAi8F154ny9AA=
Subject key identifier:   C7:9C:DA:8C:F5:69:37:50:BC:63:2C:2E:30:94:50:FE:B2:98:94:3D
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       DA
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/x5zajPVpN1C8YywuMJRQ_rKYlD0.roa
Signing time:             Thu 01 May 2025 01:29:12 +0000
ROA not before:           Thu 01 May 2025 01:29:12 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        110.233.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 14:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:12 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=C79CDA8CF5693750BC632C2E309450FEB298943D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:18:89:c0:9b:bb:35:15:7f:f2:e2:1b:5c:
                    8c:c9:b8:02:1f:d5:0f:13:83:1e:fe:e4:8d:d4:37:
                    e7:10:fb:f4:93:7a:8d:9b:bd:67:45:ab:4d:92:78:
                    26:45:6e:64:12:20:34:21:04:d3:a2:b9:5f:92:dd:
                    04:29:23:18:87:2a:d2:af:10:f2:3a:a8:d8:51:01:
                    ec:d1:05:78:76:8a:14:80:29:bb:cd:22:dc:a3:49:
                    56:5e:e9:5b:d2:62:17:1a:47:75:1a:f7:30:51:4d:
                    e3:46:83:33:79:2f:a1:a9:34:a0:6b:ad:cf:b5:9a:
                    e6:30:ae:36:46:ed:e2:5f:18:1e:00:b0:6e:d1:fb:
                    0f:90:58:7f:e0:fe:de:b0:f7:ce:64:f5:be:b3:06:
                    79:26:b4:35:95:32:7c:4e:ad:77:c1:94:b5:52:c4:
                    52:a4:fa:93:dd:b1:7c:18:f2:3f:46:7a:a8:8a:be:
                    8d:94:ff:c9:db:43:17:09:17:7a:02:cc:e4:f1:dc:
                    79:35:d3:87:7d:de:8e:28:25:44:73:61:fd:8f:e7:
                    72:5c:9b:57:fd:d1:75:ea:46:af:b0:3a:ae:63:87:
                    bb:b4:01:40:25:b9:31:a8:42:55:10:f1:45:a7:10:
                    21:4b:63:06:98:10:3a:6a:18:d2:8a:46:1a:f3:48:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9C:DA:8C:F5:69:37:50:BC:63:2C:2E:30:94:50:FE:B2:98:94:3D
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/x5zajPVpN1C8YywuMJRQ_rKYlD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:c1:c5:ff:59:a9:8c:e3:64:04:2d:ec:5c:d5:59:d2:e7:78:
         7d:8a:5d:e3:0d:69:d9:bd:35:c8:64:c6:05:bf:a6:83:60:05:
         f5:63:3c:7d:c9:f0:b3:24:8c:e6:e1:3b:71:0e:87:13:4f:23:
         f7:1b:0c:91:ed:99:e0:a3:18:a0:87:9c:f9:c9:6f:4e:70:45:
         05:57:cf:31:90:df:9d:43:ed:57:67:c4:14:e4:95:66:e1:18:
         1f:49:9a:65:1c:0b:77:e5:b8:3a:9a:0e:9f:b4:47:45:2b:46:
         13:3a:61:08:dd:5f:ba:a7:19:a0:bb:b5:af:13:68:f0:05:d5:
         d8:35:de:00:cf:ac:55:23:9f:90:72:d9:5d:52:8b:36:cf:be:
         8e:cc:2e:12:73:6e:8c:94:6d:78:a2:d0:c8:09:ef:e3:16:62:
         12:31:c1:fc:8b:c5:c8:e2:5e:a3:cb:f8:d3:b5:b1:9e:17:08:
         49:b5:bb:45:3f:08:22:a5:1e:79:25:f8:dc:9a:e9:38:db:3b:
         99:aa:93:ba:8b:56:da:73:f1:ce:21:52:7f:0c:b9:9d:e6:0f:
         ae:10:1b:cf:b2:21:c6:a5:55:24:6d:00:da:ba:2f:26:be:e3:
         d1:58:19:a5:12:b5:11:a1:e0:a9:c8:90:65:5f:d5:6b:08:e1:
         e9:62:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:30:54 2025 by rpki-client