Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/k6uKtdq3JC9DY-zOAcm_IBdMVt4.roa
File:                     k6uKtdq3JC9DY-zOAcm_IBdMVt4.roa (raw, json)
Hash identifier:          mdTEpRsqcdrieiwB5cIxBSGilXEblOy0NeOndnSSFsw=
Subject key identifier:   93:AB:8A:B5:DA:B7:24:2F:43:63:EC:CE:01:C9:BF:20:17:4C:56:DE
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0249
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/k6uKtdq3JC9DY-zOAcm_IBdMVt4.roa
Signing time:             Tue 10 Jun 2025 10:46:58 +0000
ROA not before:           Tue 10 Jun 2025 10:46:58 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     7684
IP address blocks:        182.48.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 18:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 10 10:46:58 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=93AB8AB5DAB7242F4363ECCE01C9BF20174C56DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:6a:1f:77:39:1e:b7:14:28:e8:d9:73:f8:
                    be:24:9d:8d:d5:0b:2a:22:15:ff:a0:f0:d4:2b:3c:
                    73:af:00:87:8d:aa:6b:a7:fc:27:62:19:76:4b:57:
                    b6:4e:2c:0d:31:6c:45:33:92:58:96:f8:b4:55:fa:
                    32:06:35:85:f4:51:68:e5:0e:89:ee:28:69:58:e1:
                    ac:24:df:a2:4b:18:b9:14:86:3a:92:4a:7a:ed:f8:
                    03:a0:0c:66:79:d3:80:30:d6:77:0e:70:ae:07:93:
                    55:61:5d:06:a4:a6:14:4e:28:0f:5c:3d:a4:09:7d:
                    b9:3d:d9:88:97:d1:90:cc:7f:23:c6:4a:11:49:93:
                    8e:19:2f:f4:5f:f1:94:ee:fb:25:bb:2f:6a:b9:fa:
                    ce:11:94:d7:eb:86:6f:66:46:ba:28:66:b6:8d:14:
                    6c:b8:12:c5:0f:38:44:75:0d:92:8f:b2:64:f1:e8:
                    39:96:a2:86:bd:e2:14:4d:50:4a:d5:06:a3:70:a8:
                    71:18:b3:1c:ad:a7:0b:34:7e:10:92:70:7c:7b:9e:
                    ce:43:a4:01:36:ad:f7:9b:22:81:89:7b:df:92:e5:
                    8a:18:7c:c0:e4:c2:c2:f7:da:42:c6:66:03:71:cc:
                    08:66:5f:56:67:3c:1d:fc:a3:ea:73:cf:2d:ec:2a:
                    e2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AB:8A:B5:DA:B7:24:2F:43:63:EC:CE:01:C9:BF:20:17:4C:56:DE
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/k6uKtdq3JC9DY-zOAcm_IBdMVt4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:81:e0:25:15:88:2c:7a:79:5b:ce:bc:58:3c:c9:1d:06:87:
         4b:c0:cd:3c:67:cb:bc:a5:ea:10:51:69:12:99:57:31:51:18:
         a6:62:7d:44:b3:0c:51:8b:84:7a:3b:27:c4:47:6e:fe:33:fd:
         33:8f:f5:ae:84:24:db:6c:71:c4:59:49:a2:62:e9:b0:c1:8c:
         45:6e:ef:e2:3a:a5:ba:fc:fd:36:82:fc:9e:48:c1:f2:38:93:
         95:7e:05:c5:ac:4f:aa:6a:e3:c9:18:87:04:fa:ac:65:27:eb:
         ca:e7:ae:9c:69:5b:0f:c1:ac:3b:ed:04:c9:ca:a0:f6:bd:07:
         60:cd:86:0c:6e:11:5f:f9:00:ba:9b:80:dc:07:72:a7:8d:2e:
         9c:e0:d1:9f:bd:5e:4f:29:df:01:71:99:e7:b5:d1:57:49:27:
         42:1f:32:15:92:d8:d6:55:6a:ca:bd:57:46:ff:aa:6c:bf:9a:
         7d:76:41:97:a6:f4:f3:02:7e:77:a5:c0:c7:a9:25:74:33:eb:
         92:7c:a1:31:12:47:65:40:d0:57:4c:20:b8:40:d9:55:d4:ce:
         20:18:78:a4:b1:72:ce:c9:ca:c4:72:85:8e:20:a5:f3:2b:28:
         73:db:4f:90:bb:19:02:ea:78:22:9b:f5:0b:bf:b2:1d:55:f6:
         28:9e:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:25:15 2025 by rpki-client