Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/433/K03-WjLYOd1HsPB7C9phAG2f_Is.roa
File:                     K03-WjLYOd1HsPB7C9phAG2f_Is.roa (raw, json)
Hash identifier:          AS1r+GhsGIxu7cJEOtlfjdwuvT/ekIwzgGxIvuZ9x/0=
Subject key identifier:   2B:4D:FE:5A:32:D8:39:DD:47:B0:F0:7B:0B:DA:61:00:6D:9F:FC:8B
Certificate issuer:       /CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
Certificate serial:       03
Authority key identifier: 56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/K03-WjLYOd1HsPB7C9phAG2f_Is.roa
Signing time:             Fri 04 Apr 2025 07:52:25 +0000
ROA not before:           Fri 04 Apr 2025 07:52:25 +0000
ROA not after:            Sat 04 Apr 2026 07:43:18 +0000
asID:                     18077
IP address blocks:        218.223.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
        Validity
            Not Before: Apr  4 07:52:25 2025 GMT
            Not After : Apr  4 07:43:18 2026 GMT
        Subject: CN=2B4DFE5A32D839DD47B0F07B0BDA61006D9FFC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:87:1a:ac:0d:53:19:ec:17:fe:30:27:4a:
                    eb:16:1c:42:f1:92:49:0c:da:0e:e0:13:fd:91:b1:
                    50:35:ab:cc:7c:8d:f7:b0:10:30:a8:c5:f7:d9:f5:
                    a2:d5:62:77:2f:bb:43:0a:31:fe:86:02:b0:01:6e:
                    32:74:32:98:af:b3:5e:99:27:17:a3:16:dc:27:8b:
                    80:91:8a:c5:35:2c:42:7a:14:74:88:08:95:ad:17:
                    3f:50:fc:5b:1a:61:32:d7:4c:84:d3:fa:46:81:80:
                    84:eb:9b:2b:61:65:bf:0c:a0:99:0c:71:3b:ee:18:
                    50:b4:d0:15:d6:9d:22:b1:44:5c:8d:65:7e:de:ac:
                    fe:fa:51:9b:39:e1:d6:20:90:7e:93:15:5e:54:54:
                    0b:70:b4:9d:24:44:b2:27:a9:8e:e6:c3:a5:d6:49:
                    1f:0d:d5:88:84:bb:fa:32:46:27:9f:80:18:ad:1a:
                    1e:83:98:ed:8c:1a:0e:08:aa:c2:6d:e2:e0:45:e5:
                    d4:88:57:05:e5:54:e7:e0:36:f1:88:9e:11:8d:9a:
                    e5:e4:8c:9e:fa:da:e5:77:3c:e3:68:b5:c2:d8:90:
                    e3:1e:a5:8b:f0:85:4b:a7:dc:0f:2e:fd:92:0b:f5:
                    b6:47:78:fb:29:8b:b6:93:40:08:20:15:67:6d:68:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4D:FE:5A:32:D8:39:DD:47:B0:F0:7B:0B:DA:61:00:6D:9F:FC:8B
            X509v3 Authority Key Identifier:
                keyid:56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/K03-WjLYOd1HsPB7C9phAG2f_Is.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:58:f3:94:62:dc:6c:4e:7b:f4:23:1f:73:68:a0:75:21:
         ef:20:c5:3b:a2:8b:95:c5:e3:02:86:d6:d8:fe:b6:be:40:2e:
         63:6e:5b:df:82:d9:ce:8f:b2:19:98:e0:84:47:76:8b:d1:34:
         4d:24:85:2e:bd:66:24:25:36:39:a3:22:c9:ae:76:f9:f4:a3:
         92:66:1d:ba:47:98:ab:d2:92:09:2e:7a:59:e2:f2:c2:e3:6b:
         29:31:95:5a:46:8d:f8:c3:d3:fc:26:cb:43:d1:3f:a9:68:c9:
         e5:cb:41:13:7f:a7:24:21:ca:cb:e8:64:33:be:11:be:11:20:
         7f:9b:8b:69:ce:aa:64:2d:69:cb:36:23:f7:70:d6:12:7f:57:
         0b:22:8e:f2:28:d9:3d:28:e4:21:0b:b6:67:27:58:ea:f9:34:
         8e:15:f4:e4:97:c6:e4:9c:ba:8c:b3:33:54:09:35:41:6f:d7:
         73:12:3b:48:78:9b:74:12:9b:40:b9:84:57:49:93:6d:b6:5e:
         51:e5:0f:84:46:3f:fa:f7:5e:fa:f3:7e:fa:07:b9:9e:c8:3a:
         28:d3:82:a8:e6:d5:e7:e0:dc:df:ed:84:f9:0e:a2:cf:64:16:
         20:d5:c2:c3:e9:7d:a5:8d:fb:7e:38:95:37:82:11:d7:b4:e0:
         97:a7:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:34:12 2025 by rpki-client