Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/gaDXJZp4hZe3n6IcxBzgliHRjdM.roa
File:                     gaDXJZp4hZe3n6IcxBzgliHRjdM.roa (raw, json)
Hash identifier:          7dhFEVBFmkxEhjHravxqz8zpwLR1C7x1j7PboPrDjxU=
Subject key identifier:   81:A0:D7:25:9A:78:85:97:B7:9F:A2:1C:C4:1C:E0:96:21:D1:8D:D3
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       A3
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/gaDXJZp4hZe3n6IcxBzgliHRjdM.roa
Signing time:             Tue 01 Apr 2025 01:29:38 +0000
ROA not before:           Tue 01 Apr 2025 01:29:38 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     7521
IP address blocks:        210.173.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Apr  1 01:29:38 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=81A0D7259A788597B79FA21CC41CE09621D18DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:1b:1f:b2:17:e1:22:77:0a:6b:fa:74:cb:
                    65:e1:ef:b4:11:fa:6c:02:07:47:c1:1e:bd:7f:01:
                    c4:f7:4a:22:6d:c3:26:29:25:a7:05:aa:ac:d8:de:
                    1b:06:13:04:91:ac:d4:9e:81:e8:c0:2b:70:0e:55:
                    b0:46:e0:27:a4:d7:6c:6e:81:b9:19:82:94:5c:ba:
                    77:b4:0f:00:e4:00:a2:d1:3c:9f:59:bf:34:9e:62:
                    12:02:89:c1:7b:5e:6d:fa:0e:83:af:e5:92:63:a4:
                    a5:4c:37:ec:34:ac:f9:de:7f:b0:13:0b:ea:e6:da:
                    5a:f1:4d:49:81:32:9b:c5:f6:a4:56:7a:91:2d:84:
                    0a:d7:f7:3f:1d:11:f7:3c:93:a9:b4:a3:52:af:47:
                    95:d2:50:ec:71:d5:60:6c:75:55:71:47:a5:9c:eb:
                    02:14:4f:de:68:28:18:78:f3:bc:29:84:da:01:dc:
                    69:d0:2b:f6:7e:29:92:ec:df:e4:6a:59:99:bd:87:
                    98:aa:3b:27:0d:21:33:b8:10:17:7e:90:90:71:09:
                    c4:b5:2d:0b:e1:96:c3:27:b8:19:9f:88:0a:56:d8:
                    8f:6e:8a:c1:fe:8c:c6:db:6a:23:e9:63:4f:67:dc:
                    e5:5e:ec:76:22:e9:92:a6:c1:ce:ad:f0:bc:72:20:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A0:D7:25:9A:78:85:97:B7:9F:A2:1C:C4:1C:E0:96:21:D1:8D:D3
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/gaDXJZp4hZe3n6IcxBzgliHRjdM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:8e:45:75:35:41:cd:1b:d3:0c:10:ff:27:62:a0:ec:02:
         d3:90:48:02:6c:c4:b1:e6:05:07:f4:da:95:39:5a:d6:84:56:
         46:53:f7:99:f4:de:f9:77:9e:85:75:8d:32:47:b0:c8:ac:21:
         50:52:be:ec:af:45:55:b6:16:5c:1f:eb:ec:e1:f4:92:b7:bd:
         4e:c3:e1:e2:8b:77:05:c7:fa:07:f7:ff:3a:07:4a:cf:bb:81:
         81:a2:dc:39:81:d3:1e:43:68:86:16:86:cf:ca:a2:bd:d1:64:
         eb:a4:85:46:a4:20:28:cc:13:44:be:dc:d7:1a:5f:41:7b:d7:
         97:08:5f:69:90:24:f8:76:b4:72:35:5c:f1:42:7d:52:b1:ee:
         4d:c0:b1:c1:ca:28:e4:1d:ea:3e:93:b7:ab:dd:00:f1:56:f2:
         dd:5d:0e:04:45:90:6e:65:51:ca:53:3a:5a:5c:40:e3:d6:83:
         15:51:40:74:84:e1:18:75:1f:3f:60:d0:40:30:25:e1:9f:d9:
         2f:c9:6a:ee:01:6f:06:a9:06:86:ef:d7:5e:23:35:c8:0e:50:
         53:30:36:7b:22:bf:66:77:c8:48:31:e7:72:06:40:82:5b:20:
         bc:3b:7e:b0:22:0e:60:8e:d5:bd:09:2d:9f:b3:64:90:d7:a4:
         16:41:f3:f9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw
MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNTA0MDEw
MTI5MzhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgxQTBENzI1OUE3ODg1
OTdCNzlGQTIxQ0M0MUNFMDk2MjFEMThERDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAsBsfshfhIncKa/p0y2Xh77QR+mwCB0fBHr1/AcT3SiJtwyYp
JacFqqzY3hsGEwSRrNSegejAK3AOVbBG4Cek12xugbkZgpRcune0DwDkAKLRPJ9Z
vzSeYhICicF7Xm36DoOv5ZJjpKVMN+w0rPnef7ATC+rm2lrxTUmBMpvF9qRWepEt
hArX9z8dEfc8k6m0o1KvR5XSUOxx1WBsdVVxR6Wc6wIUT95oKBh487wphNoB3GnQ
K/Z+KZLs3+RqWZm9h5iqOycNITO4EBd+kJBxCcS1LQvhlsMnuBmfiApW2I9uisH+
jMbbaiPpY09n3OVe7HYi6ZKmwc6t8LxyIBn3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUgaDXJZp4hZe3n6IcxBzgliHRjdMwHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB
ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk
c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjA3L2dhRFhKWnA0aFplM242SWN4QnpnbGlIUmpkTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXSraAwDQYJKoZIhvcNAQELBQADggEBAKKdjkV1NUHNG9MMEP8nYqDsAtOQ
SAJsxLHmBQf02pU5WtaEVkZT95n03vl3noV1jTJHsMisIVBSvuyvRVW2Flwf6+zh
9JK3vU7D4eKLdwXH+gf3/zoHSs+7gYGi3DmB0x5DaIYWhs/Kor3RZOukhUakICjM
E0S+3NcaX0F715cIX2mQJPh2tHI1XPFCfVKx7k3AscHKKOQd6j6Tt6vdAPFW8t1d
DgRFkG5lUcpTOlpcQOPWgxVRQHSE4Rh1Hz9g0EAwJeGf2S/Jau4BbwapBobv114j
NcgOUFMwNnsiv2Z3yEgx53IGQIJbILw7frAiDmCO1b0JLZ+zZJDXpBZB8/k=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:14 2025 by rpki-client on console.sobornost.net