Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Gcnx73hbznIXzFuJr72WSIGy0Vg.roa
File:                     Gcnx73hbznIXzFuJr72WSIGy0Vg.roa (raw, json)
Hash identifier:          xSgjO947/NKvLU4AL+bQSIHpeDK2W0Np3KYkFGP579Q=
Subject key identifier:   19:C9:F1:EF:78:5B:CE:72:17:CC:5B:89:AF:BD:96:48:81:B2:D1:58
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0344
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Gcnx73hbznIXzFuJr72WSIGy0Vg.roa
Signing time:             Thu 23 Jan 2025 01:10:45 +0000
ROA not before:           Thu 23 Jan 2025 01:10:45 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        182.236.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan 23 01:10:45 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=19C9F1EF785BCE7217CC5B89AFBD964881B2D158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:b3:52:ab:50:26:2f:c3:64:65:9c:7f:b7:
                    4c:19:a2:c3:e0:6f:9c:1a:0a:30:31:34:68:35:2f:
                    00:a7:03:8d:ae:28:75:4d:f2:98:85:9b:6a:81:36:
                    71:a6:11:00:1f:1e:33:47:a1:a4:3a:55:cb:06:4d:
                    a3:30:02:4c:2f:f5:fb:bb:b9:72:37:72:e7:31:1c:
                    bc:26:8a:10:a3:b9:1c:eb:c1:7e:c1:de:ea:a0:2d:
                    cd:35:08:f7:23:8c:2f:0f:0f:f3:75:61:44:cd:bb:
                    04:e7:23:4d:86:94:46:76:b5:f2:92:e9:b6:55:4a:
                    60:d6:1d:1e:7a:b0:50:ed:a8:a1:b9:c9:24:d6:ca:
                    0e:26:69:2e:37:cb:03:e1:3e:da:26:c3:67:8f:56:
                    df:27:d5:e8:90:cf:0b:21:b9:ad:cf:6b:c4:cf:7a:
                    df:cd:6e:aa:a6:94:ff:1c:bf:da:fd:84:a9:b0:6e:
                    04:a7:b4:41:e8:0b:ed:76:ef:7f:c7:4f:8b:d8:0a:
                    94:7d:4b:6f:bc:ee:6c:fb:78:e5:11:95:28:88:cd:
                    9a:5b:ec:cb:24:dc:39:c6:59:7b:15:9f:52:0d:9a:
                    91:7d:0c:d4:01:18:9f:f6:9b:2b:53:e3:ab:11:19:
                    db:52:77:b2:f5:4d:d3:42:0b:59:f7:cb:3d:bb:fa:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C9:F1:EF:78:5B:CE:72:17:CC:5B:89:AF:BD:96:48:81:B2:D1:58
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Gcnx73hbznIXzFuJr72WSIGy0Vg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:d1:8c:81:97:2c:cc:ae:3b:14:7a:a7:6d:36:fa:15:b4:2e:
         26:30:1d:4f:5a:03:62:de:4b:e7:7b:e8:9b:f4:ca:12:d1:eb:
         7f:b7:7e:ec:b8:f2:c0:2e:54:fc:ba:07:91:23:bb:c3:ca:6d:
         b0:47:a4:38:7a:ef:9a:65:55:3b:aa:83:90:2f:61:01:e0:42:
         bb:31:6d:29:22:88:3a:45:b6:eb:b2:f7:1e:d2:41:b3:99:53:
         9a:ba:06:49:02:c6:65:15:83:61:51:91:6c:19:8f:ce:41:a2:
         40:09:66:a2:fa:fc:09:ef:f9:82:0e:b7:ad:8f:56:3c:8b:1c:
         57:9e:35:c0:3d:76:ec:b1:49:4c:a3:44:b4:9c:b7:95:e4:77:
         3b:34:5f:16:ca:59:ad:55:3a:99:a9:ce:77:6a:cb:cf:8a:19:
         88:db:e6:4c:a0:60:0b:c1:8a:0e:fa:9a:f2:f5:b4:7e:1d:07:
         79:71:fb:9a:f3:85:5c:fc:52:1c:7b:9f:66:4d:3c:b4:4f:df:
         60:1a:2e:fb:c4:57:7e:2f:d0:7f:f8:77:d1:7e:16:b7:f9:a7:
         17:77:a6:1b:62:68:c5:56:9c:41:1f:5b:f6:d4:c8:a8:31:4d:
         92:ac:b0:b5:d7:98:6d:7c:c2:2a:d6:de:3b:54:23:11:59:b7:
         4e:5f:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:33 2025 by rpki-client on console.sobornost.net