Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kMuIg-IgPl1K31jaavImARzaiiw.roa
File:                     kMuIg-IgPl1K31jaavImARzaiiw.roa (raw, json)
Hash identifier:          cEjXMxmM0kXlyDClDB/9jZEzb+LznpJyWSMV2W2ErJo=
Subject key identifier:   90:CB:88:83:E2:20:3E:5D:4A:DF:58:DA:6A:F2:26:01:1C:DA:8A:2C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0433
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kMuIg-IgPl1K31jaavImARzaiiw.roa
Signing time:             Tue 10 Jun 2025 10:45:02 +0000
ROA not before:           Tue 10 Jun 2025 10:45:02 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     10013
IP address blocks:        36.55.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 18:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075 (0x433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jun 10 10:45:02 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=90CB8883E2203E5D4ADF58DA6AF226011CDA8A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:44:4d:ca:2c:9c:b8:fe:85:aa:0a:40:0a:
                    cb:11:35:bf:a8:2a:2e:00:48:a9:03:88:ba:cd:fd:
                    0a:8c:de:38:72:60:84:aa:8d:c0:27:ed:9c:22:d5:
                    03:67:9a:26:2d:48:38:74:ee:4a:24:10:6a:6f:31:
                    07:e0:0e:92:38:3f:1c:13:df:40:a1:66:56:46:80:
                    f3:ee:af:e6:43:4e:d9:c3:b4:9e:6c:9a:0e:41:c7:
                    59:a6:e9:71:26:52:8c:b6:64:76:03:fd:87:59:54:
                    d3:42:e0:e4:93:4e:2b:19:9d:5e:93:ee:7a:a7:fe:
                    cf:87:1f:2a:23:d2:33:c6:28:e8:3a:a3:30:32:13:
                    ab:65:da:5b:1d:cd:dc:40:ff:39:aa:57:d3:81:e3:
                    40:24:e4:e3:6c:53:cd:8c:cf:61:6c:de:35:6d:70:
                    a1:97:a1:6f:fa:51:10:b9:8b:5d:2d:32:5a:49:2e:
                    d8:0b:bd:4f:eb:a2:c4:36:cd:ac:35:65:ca:df:6b:
                    3c:28:18:a8:ae:5e:92:7a:5f:e0:19:6d:04:84:5f:
                    be:9b:e3:3f:a1:d0:76:de:0f:4f:9b:08:12:96:f7:
                    cf:da:97:84:33:82:bc:d0:be:cb:8c:9d:35:a8:2d:
                    cf:cc:8d:54:5d:20:04:53:d8:74:fd:60:ec:9a:8a:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CB:88:83:E2:20:3E:5D:4A:DF:58:DA:6A:F2:26:01:1C:DA:8A:2C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kMuIg-IgPl1K31jaavImARzaiiw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.55.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d8:90:22:66:9c:2e:aa:23:29:cd:d7:15:30:c3:b6:05:41:
         b6:f8:65:02:57:90:4b:d4:5d:21:d7:98:91:96:ce:fe:2a:41:
         44:13:12:5a:91:a4:c2:34:f2:10:79:dd:ef:22:88:05:c5:b8:
         93:c0:aa:2e:15:5e:4e:96:47:f5:f3:35:c7:c0:58:7a:d5:df:
         58:b9:83:48:16:ed:53:37:fe:34:1d:9a:c9:d7:04:07:a2:c8:
         14:ac:3e:df:a8:77:ef:eb:e9:d7:31:63:39:d4:88:75:3a:93:
         fc:a2:26:b3:b0:77:f5:47:47:73:78:8f:5d:a0:5a:e1:62:06:
         4f:c2:2f:33:c0:69:af:a1:86:c5:4d:95:38:47:3e:99:cd:1e:
         4f:07:ed:0f:ec:b1:6d:ac:ac:f1:e6:a6:76:c3:5d:e6:6e:bd:
         32:98:51:1f:d5:bc:60:73:9e:39:59:37:43:00:a0:b6:06:99:
         5d:b6:b8:2e:8a:ee:79:df:9f:ed:90:32:77:df:0c:71:c3:db:
         0b:53:8c:8f:23:91:a9:c1:51:6f:d3:72:ea:54:af:de:80:5a:
         bf:f6:5e:c3:ab:f5:5a:b9:e7:2e:44:a3:ff:03:56:88:1d:67:
         73:46:8c:ec:a7:9f:b9:7c:8d:1f:a2:a5:0c:92:77:50:a9:62:
         5c:3e:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:19:02 2025 by rpki-client