Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/yCLi4WWs2qy78sHLoqjP-CJboKQ.roa
File:                     yCLi4WWs2qy78sHLoqjP-CJboKQ.roa (raw, json)
Hash identifier:          JteEpBvmafMc5j22vjRDBRETpr6u4f/2IG1HqRuLWKw=
Subject key identifier:   C8:22:E2:E1:65:AC:DA:AC:BB:F2:C1:CB:A2:A8:CF:F8:22:5B:A0:A4
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       64
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/yCLi4WWs2qy78sHLoqjP-CJboKQ.roa
Signing time:             Tue 01 Apr 2025 01:30:05 +0000
ROA not before:           Tue 01 Apr 2025 01:30:05 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     2500
IP address blocks:        203.178.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 16:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Apr  1 01:30:05 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=C822E2E165ACDAACBBF2C1CBA2A8CFF8225BA0A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:00:a2:3a:a6:46:0b:8e:b8:f2:c7:10:d6:
                    59:91:32:c1:d0:9b:f0:59:c1:6d:e2:ed:7c:59:cf:
                    36:8e:dd:35:97:66:d9:bf:b6:52:56:e3:21:60:5d:
                    24:6f:e0:e8:a5:77:be:8e:a2:a7:86:17:ca:cc:98:
                    a1:b3:d1:1a:41:37:4b:79:d1:2e:2c:ee:5c:b4:37:
                    cd:83:b4:0a:1e:e1:2b:e4:c4:7c:72:44:37:8b:bd:
                    d0:da:7b:07:8a:96:db:07:31:6c:45:9f:7d:bd:57:
                    84:fb:e8:ae:34:e0:36:bf:d4:17:0c:07:f6:06:a6:
                    03:b4:da:9e:40:8a:44:39:f2:20:9a:98:7a:8d:b9:
                    52:f1:6f:d3:13:8c:5c:11:f6:06:fd:ba:36:85:54:
                    da:00:20:32:c7:2d:27:58:aa:2d:37:4b:68:6e:43:
                    08:a6:67:68:31:88:88:0a:ed:9c:6c:32:a7:e0:1b:
                    b3:72:7d:7d:bd:9e:df:30:2a:2b:c4:00:5b:c3:6b:
                    6b:99:f4:78:3c:f3:66:30:00:56:63:ba:f6:5b:09:
                    4f:9e:38:1e:92:55:fd:b4:51:13:e8:14:e8:02:96:
                    3c:c0:6c:9f:82:35:e1:31:46:f4:82:27:a4:28:a9:
                    61:11:02:3b:43:35:37:ad:a3:09:b1:bf:a8:f7:04:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:22:E2:E1:65:AC:DA:AC:BB:F2:C1:CB:A2:A8:CF:F8:22:5B:A0:A4
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/yCLi4WWs2qy78sHLoqjP-CJboKQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.178.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:c3:69:6b:34:45:bc:bb:da:65:69:81:3c:10:93:d7:b1:
         7f:45:94:34:fa:1c:d5:7e:1c:31:57:3a:15:80:35:58:e1:e7:
         25:e5:96:9a:a1:0f:29:0e:0e:4c:8f:f4:a7:2f:37:b7:a2:58:
         7e:c8:d8:c8:f0:7a:0a:d7:18:95:dc:66:5d:a2:7a:9b:e4:e1:
         0a:d8:44:ad:f8:c0:57:23:78:a3:56:dd:11:7a:be:34:c7:85:
         28:38:72:13:40:2a:9f:bf:fb:df:84:77:b8:58:e9:53:8b:22:
         1b:00:9e:12:f1:b3:48:42:3a:5b:cc:32:3a:1e:83:b6:9d:00:
         2f:2e:50:71:80:8e:a8:77:7d:41:1a:d5:8e:40:29:b6:7a:de:
         e4:5f:d0:e8:b2:96:43:e3:15:6f:20:a5:f2:7e:38:42:a0:0e:
         c8:f7:80:45:dc:fb:72:a0:f7:83:f6:2b:29:45:e3:07:5d:77:
         35:67:4a:b2:87:49:99:8e:86:fa:8a:a6:3a:28:b5:62:95:18:
         13:8e:3c:00:a2:fe:7e:47:cc:ab:41:27:c4:14:3b:ae:ea:7e:
         98:19:4e:65:c4:06:88:35:45:86:7b:cd:40:2e:3a:1d:be:8f:
         67:15:dd:10:0b:b5:12:e7:9c:4b:d6:3b:7e:18:ac:64:19:11:
         9e:4d:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:47:48 2025 by rpki-client