Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/Vo1qR9P4UcV943Z_92upRAMSg2I.roa
File:                     Vo1qR9P4UcV943Z_92upRAMSg2I.roa (raw, json)
Hash identifier:          0OnXd9NSV1OBridxntyEy62LQxucoLowXCwd75/5/80=
Subject key identifier:   56:8D:6A:47:D3:F8:51:C5:7D:E3:76:7F:F7:6B:A9:44:03:12:83:62
Certificate issuer:       /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial:       3D
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/Vo1qR9P4UcV943Z_92upRAMSg2I.roa
Signing time:             Fri 31 Jan 2025 01:29:12 +0000
ROA not before:           Fri 31 Jan 2025 01:29:12 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     37908
IP address blocks:        175.103.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 20:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
        Validity
            Not Before: Jan 31 01:29:12 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=568D6A47D3F851C57DE3767FF76BA94403128362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f6:92:0c:ee:2e:35:04:89:bd:9f:9c:89:2d:
                    6b:f9:86:9f:36:50:49:e4:8a:5d:1e:24:b9:b1:06:
                    67:db:8a:d9:76:e5:59:5b:53:37:7e:65:1d:cd:73:
                    ff:08:e9:04:90:28:2c:5f:b8:5f:48:f6:b2:16:68:
                    34:40:c8:cd:61:d2:be:e4:96:8c:75:bd:ea:89:09:
                    06:12:5f:79:9a:fe:bb:98:1c:98:57:98:dd:df:27:
                    5f:8f:2f:0c:59:41:ae:c0:38:02:51:7a:83:82:90:
                    4d:c0:19:77:0a:f4:be:ce:e6:d5:a6:e4:62:c2:55:
                    3d:7e:38:ec:f9:d7:5d:75:c9:6e:a8:f7:be:01:7f:
                    f6:fe:fc:80:7d:c1:7e:ed:ad:f1:51:81:5e:66:bb:
                    a9:7b:34:5e:03:e8:71:01:58:26:3e:9c:86:f2:9f:
                    7d:c6:ea:04:e3:09:bc:82:cc:21:3e:da:cc:3c:10:
                    aa:92:c0:b6:e4:1b:8a:82:98:87:8e:89:3c:63:88:
                    8c:07:40:85:31:74:af:c8:41:00:f3:2f:31:9d:dc:
                    0c:ac:0f:21:81:5a:9c:e8:ee:d1:5b:e1:56:f1:0d:
                    5f:cd:04:b9:3d:8f:1d:b5:8a:d5:6a:38:e7:39:ed:
                    0b:f5:87:3f:de:e0:4f:6b:fa:cf:45:37:7a:23:4b:
                    15:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8D:6A:47:D3:F8:51:C5:7D:E3:76:7F:F7:6B:A9:44:03:12:83:62
            X509v3 Authority Key Identifier:
                keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/Vo1qR9P4UcV943Z_92upRAMSg2I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:a7:41:27:18:de:f6:9b:6a:c3:7a:94:36:79:00:17:71:
         09:a3:5e:0a:f9:17:a8:b0:d4:cf:47:26:3a:59:64:0e:1e:a6:
         f6:9b:e3:ae:c3:b6:60:28:46:3e:9f:fc:5d:dc:ff:53:2b:81:
         00:be:9f:89:e7:5a:8b:e1:fd:63:06:b9:05:ef:1a:d6:b1:be:
         5d:ee:1c:b8:a7:ba:4a:7f:f2:fd:12:a1:13:98:4d:cb:38:93:
         d3:7d:c3:57:79:5f:2a:4e:db:2c:53:a6:53:94:fa:21:f4:af:
         77:05:1d:df:2e:79:13:6f:d5:0d:4e:d6:3a:3b:45:d9:27:00:
         7e:64:7d:9c:81:49:b7:18:30:33:7d:1f:84:0f:eb:c7:ab:92:
         24:7c:35:15:4a:bb:18:f3:93:d5:f4:15:0a:7f:7f:4c:88:e6:
         bd:e9:b3:fa:3e:9f:d7:18:d2:7d:01:10:7e:8b:51:da:0c:b4:
         91:57:1d:06:03:c1:7a:70:a0:b4:a5:d6:b9:b5:6b:66:e8:53:
         1c:4b:ef:a7:39:3f:4a:5c:77:b8:cc:50:26:40:a3:94:a4:91:
         fd:4e:a5:23:e5:ab:73:e7:4c:54:fd:00:b2:df:f7:0e:02:38:
         7e:5c:29:e2:2b:15:8e:18:7b:eb:53:39:db:b6:5a:fd:09:b5:
         1c:61:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:23 2025 by rpki-client