Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/b_Ta5lV-2LmtsF2swvNUP9j3coQ.roa
File:                     b_Ta5lV-2LmtsF2swvNUP9j3coQ.roa (raw, json)
Hash identifier:          h0qJvc0ajAx7A2uEq+DqG+JoEnP0Q1ycm9JAWow6Qsg=
Subject key identifier:   6F:F4:DA:E6:55:7E:D8:B9:AD:B0:5D:AC:C2:F3:54:3F:D8:F7:72:84
Certificate issuer:       /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial:       1C
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/b_Ta5lV-2LmtsF2swvNUP9j3coQ.roa
Signing time:             Wed 09 Apr 2025 07:14:25 +0000
ROA not before:           Wed 09 Apr 2025 07:14:25 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     45687
IP address blocks:        219.100.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
        Validity
            Not Before: Apr  9 07:14:25 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=6FF4DAE6557ED8B9ADB05DACC2F3543FD8F77284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ee:82:d4:9e:a0:42:4b:0d:18:eb:46:be:0c:
                    20:51:8c:0e:11:ed:a7:dc:0d:ec:02:0e:6b:70:fb:
                    79:bd:c7:65:f5:e0:eb:18:98:56:39:ba:6b:46:f1:
                    70:69:29:ae:27:ed:02:66:ee:08:37:a2:d0:31:5a:
                    d9:1e:44:ef:02:ea:d0:3a:4e:44:19:36:92:aa:fb:
                    24:55:f1:45:0e:dc:4c:18:d7:14:f6:68:d4:23:96:
                    cc:a6:6e:fb:28:9c:4a:e6:00:c3:91:cb:bc:c3:ff:
                    80:89:eb:56:a3:09:43:82:7f:ed:18:9b:ef:d9:09:
                    ee:8a:43:5b:17:27:80:d3:5a:1d:ff:87:3b:d4:30:
                    4e:b1:e7:8e:9f:1b:13:4a:ba:a5:13:04:1d:43:23:
                    6b:73:28:a7:58:4f:a4:86:ed:12:75:99:24:8e:21:
                    ed:93:0b:4c:fd:8c:80:d9:a6:9a:79:da:04:af:89:
                    06:48:fe:ee:54:50:47:40:92:74:a3:f0:c1:d9:1a:
                    13:81:75:70:c8:69:bc:35:f2:1c:01:ad:7c:5e:7f:
                    b9:a6:f5:45:17:7f:bd:6b:4d:a5:b5:30:30:4c:a8:
                    b9:af:3e:04:5d:4b:c5:5e:72:e1:f4:31:b8:f4:5e:
                    6b:dd:13:ef:06:aa:a0:35:4a:6c:c0:24:db:bc:82:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F4:DA:E6:55:7E:D8:B9:AD:B0:5D:AC:C2:F3:54:3F:D8:F7:72:84
            X509v3 Authority Key Identifier:
                keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/b_Ta5lV-2LmtsF2swvNUP9j3coQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:a1:33:e1:c7:90:58:d3:c5:e5:08:5a:24:d1:77:e8:ef:ee:
         f7:6a:7c:ee:ab:27:f1:cb:e5:d1:7a:f8:74:aa:84:56:f0:c1:
         17:20:ba:74:ea:4c:da:e2:29:34:e1:56:c0:f3:2d:bb:dd:fe:
         e1:a1:d1:9d:b7:b6:00:be:77:74:55:e9:2b:da:fd:0b:3f:bc:
         50:a3:17:e0:21:06:df:8b:b8:77:3d:34:55:01:64:c6:84:1a:
         6e:2b:d8:d3:20:8e:a1:56:45:eb:7f:8e:cf:8f:57:a9:fb:79:
         7e:bb:4d:13:73:a7:e4:b3:6b:dc:87:d2:7e:93:fc:46:cb:a6:
         98:9e:14:00:a9:71:ad:51:1f:75:48:b7:df:c4:c9:5d:10:a7:
         2c:40:f6:41:d8:58:1f:7a:dc:02:2f:26:18:9c:ff:bd:17:19:
         21:06:09:94:3c:83:e9:ec:d3:49:41:db:59:bf:9b:52:c5:57:
         03:71:ff:ff:f7:31:43:0f:4d:90:ad:cd:7e:31:1a:5a:80:fc:
         e8:3f:4f:95:8c:21:65:97:d4:b0:2b:53:a8:f9:02:88:a3:94:
         c2:0e:aa:eb:5e:ee:ee:db:7b:13:af:64:23:13:d2:e8:81:b2:
         f0:81:f4:f5:43:66:db:22:6e:40:6c:6c:49:f9:a4:fb:a0:5b:
         c5:5a:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:01 2025 by rpki-client on console.sobornost.net