Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/UjDCLBxPadE1KOh0ygTV-OBMmJw.roa
File:                     UjDCLBxPadE1KOh0ygTV-OBMmJw.roa (raw, json)
Hash identifier:          YRT12OX/+K+jqBtp2TM5ikbb7UKbwAzRH0N6mQg/eGQ=
Subject key identifier:   52:30:C2:2C:1C:4F:69:D1:35:28:E8:74:CA:04:D5:F8:E0:4C:98:9C
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       7E
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/UjDCLBxPadE1KOh0ygTV-OBMmJw.roa
Signing time:             Thu 01 May 2025 01:31:57 +0000
ROA not before:           Thu 01 May 2025 01:31:57 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        153.121.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May  1 01:31:57 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=5230C22C1C4F69D13528E874CA04D5F8E04C989C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:c9:b1:52:1c:84:42:9a:1f:a0:04:75:c2:
                    7a:00:22:0a:f8:ff:39:1a:82:db:ac:c3:2f:95:d6:
                    78:60:05:8b:35:90:a1:50:92:97:27:e7:63:44:87:
                    1a:3f:40:60:09:be:f8:1d:c8:47:ac:db:81:62:ae:
                    a0:5f:5c:3f:f4:b3:16:a8:ce:90:5a:c4:9d:d9:62:
                    30:be:ee:e1:3b:b8:1f:4f:11:1f:75:7a:7b:b5:4d:
                    79:85:59:86:d5:78:0a:9e:4d:bf:8e:cb:eb:1c:a8:
                    71:be:d5:09:6d:84:bd:c7:96:0e:56:25:91:08:58:
                    98:ff:79:8d:37:9d:d1:97:a0:fd:f4:1d:cf:96:72:
                    65:d1:87:dd:b1:54:5f:0b:19:bb:c9:b1:76:c4:8b:
                    ea:ee:0b:b1:28:fb:06:2f:c9:80:73:ff:34:1b:69:
                    a5:cf:07:16:6f:00:70:85:82:74:66:ed:84:06:0c:
                    59:5b:5e:ce:ef:72:04:6e:9c:e5:26:c4:5c:4c:5b:
                    78:b3:f8:36:67:b6:e0:63:62:aa:44:10:05:e3:ed:
                    e3:98:13:c6:44:a4:2f:01:1c:a5:73:06:5d:cc:97:
                    06:43:60:42:d5:8a:62:b2:1f:2b:39:c6:57:11:0b:
                    c1:e3:8c:9c:ff:9e:6f:59:29:02:45:56:f2:bd:14:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:30:C2:2C:1C:4F:69:D1:35:28:E8:74:CA:04:D5:F8:E0:4C:98:9C
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/UjDCLBxPadE1KOh0ygTV-OBMmJw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         23:a8:8b:6b:8b:3b:1c:d6:3b:fc:0e:b0:18:05:d3:4e:13:d5:
         bd:83:83:01:4c:10:88:58:d2:1e:e1:57:4d:28:9f:07:8a:51:
         b4:0d:8d:97:77:21:04:4e:7b:5d:0b:24:45:e7:7b:bc:c5:1b:
         bc:60:c3:0c:ab:d8:b0:67:58:5d:f7:44:26:82:56:30:60:ac:
         1e:ff:39:bb:85:2b:27:68:64:9c:8e:d7:81:d2:00:ee:38:90:
         42:7f:a9:b0:eb:b2:1e:70:d6:6b:cc:53:3d:eb:26:e0:98:3f:
         89:b5:80:3e:f6:99:ab:96:06:13:14:f8:92:9a:a0:50:80:8c:
         2a:33:7a:70:21:46:7c:33:eb:93:22:ba:f5:c9:b1:56:9b:80:
         6d:3f:ac:b9:56:e7:eb:56:b8:68:e3:bb:7a:75:f9:95:f5:d1:
         39:84:c0:b2:89:7c:1d:e7:f0:16:25:ba:07:44:fa:92:e6:cd:
         02:f9:f6:e3:7d:50:39:4e:62:7c:55:a2:f1:64:b4:ca:c2:f3:
         d3:62:51:2f:75:f4:a0:01:af:0e:ba:47:93:48:b4:95:db:fa:
         95:89:58:ef:34:eb:8b:8b:ff:c7:a9:9c:6c:54:0c:b7:3f:41:
         a2:9e:35:4e:3f:94:83:17:4f:47:29:1b:68:9e:f1:b7:f6:8f:
         6e:58:c0:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 18:45:57 2025 by rpki-client