Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/KgULlStaqnCgEMVy7jZth3doESI.roa
File:                     KgULlStaqnCgEMVy7jZth3doESI.roa (raw, json)
Hash identifier:          D0v6FpUfBho/ziSXkYQmMklcZvE+W/MvY5ougk4D4N0=
Subject key identifier:   2A:05:0B:95:2B:5A:AA:70:A0:10:C5:72:EE:36:6D:87:77:68:11:22
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       B6
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/KgULlStaqnCgEMVy7jZth3doESI.roa
Signing time:             Tue 01 Apr 2025 01:33:04 +0000
ROA not before:           Tue 01 Apr 2025 01:33:04 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9351
IP address blocks:        112.136.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 16:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Apr  1 01:33:04 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=2A050B952B5AAA70A010C572EE366D8777681122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:59:36:a6:51:f4:85:f0:48:66:e8:9d:0b:
                    d4:62:f2:78:ee:ca:e5:f6:1a:1e:15:48:9b:dd:26:
                    0c:aa:9e:4a:2d:5a:4d:2c:8a:af:d5:86:e2:74:2c:
                    47:c1:64:02:50:1d:a1:92:67:ef:0c:70:4c:8f:07:
                    65:28:79:57:6e:35:7c:eb:78:09:75:aa:65:9f:b3:
                    0d:7d:9d:ec:4a:fe:7a:77:16:bf:20:8b:a7:e0:2e:
                    f7:a8:45:ce:68:b5:f2:03:55:45:8b:32:cd:c8:22:
                    23:19:7e:43:20:ab:f8:91:78:31:68:38:90:3e:c8:
                    45:ae:4c:5a:46:6c:0a:5d:f6:f6:5f:33:4c:38:7a:
                    69:57:6c:98:55:b0:9a:54:6d:1f:88:a4:23:a3:df:
                    0d:cf:06:e0:37:c5:ab:22:b5:9d:04:56:b4:1a:d3:
                    a7:1c:db:62:db:c1:e9:8a:16:a2:87:6a:25:2c:6f:
                    60:c7:bb:4e:67:8f:ce:bd:e6:e6:1c:ca:37:02:89:
                    f4:29:24:d7:c5:87:78:f8:c6:35:3a:7b:f1:14:b3:
                    7e:d4:77:d5:e2:af:be:6f:76:fb:c1:f2:50:8e:c3:
                    e7:33:23:13:a5:d1:91:75:58:10:54:1e:f6:3e:43:
                    9b:b7:04:05:1e:4f:2a:8d:9d:d3:34:e0:f2:d5:af:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:0B:95:2B:5A:AA:70:A0:10:C5:72:EE:36:6D:87:77:68:11:22
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/KgULlStaqnCgEMVy7jZth3doESI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.136.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9d:37:c1:f8:0a:ec:1e:22:34:a2:2d:94:7a:b8:36:3b:7d:ef:
         c3:29:57:f0:a1:a3:ea:a2:71:1b:2e:62:25:bf:48:0e:3e:3c:
         f3:d7:f9:9e:db:34:12:a2:2d:ad:99:e3:12:97:b4:31:20:91:
         8e:ba:f6:90:3f:32:f0:b6:15:56:e3:49:23:65:3e:95:5a:41:
         06:fb:6f:df:e4:fc:ac:0e:a5:56:ad:86:98:e0:35:ca:c8:fb:
         14:a9:8b:f4:67:11:9c:54:1a:80:69:5c:21:36:7a:45:93:18:
         9e:d9:71:56:f3:f9:53:28:8a:2e:6b:8f:03:ff:9e:dd:6b:8b:
         f3:c2:78:1f:7a:04:b6:ff:9e:85:eb:53:45:dd:be:2d:97:7b:
         ae:9f:a4:aa:9b:f8:65:6d:06:7c:b3:06:79:34:7c:04:c9:9c:
         3e:ab:2e:b3:79:af:b2:11:11:f7:83:72:fa:1b:5d:a8:4a:14:
         f8:a7:b1:05:d9:6b:19:c8:f0:71:9e:07:6d:6e:cc:22:b5:b1:
         87:80:39:1a:66:d1:7d:f2:83:d2:3b:13:ad:60:a7:d3:fc:77:
         19:e2:ea:4f:5b:29:16:9c:d0:a3:fc:88:68:38:4b:14:ce:7c:
         f3:f5:b5:b3:3c:3c:ce:3b:4a:59:31:4a:43:7f:b0:5e:26:c7:
         e5:58:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:46:00 2025 by rpki-client