Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/bo0fDaQoBfxlIjaD9vgJbSA9Aa8.roa
File:                     bo0fDaQoBfxlIjaD9vgJbSA9Aa8.roa (raw, json)
Hash identifier:          DBO6wgJmqWRjYb0SIm66etjj9xZ6fzF5siWh6ih11qU=
Subject key identifier:   6E:8D:1F:0D:A4:28:05:FC:65:22:36:83:F6:F8:09:6D:20:3D:01:AF
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       7F
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/bo0fDaQoBfxlIjaD9vgJbSA9Aa8.roa
Signing time:             Thu 01 May 2025 01:31:57 +0000
ROA not before:           Thu 01 May 2025 01:31:57 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        153.126.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 09:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May  1 01:31:57 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=6E8D1F0DA42805FC65223683F6F8096D203D01AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:43:60:5b:06:56:18:3a:8d:46:5e:7f:c8:
                    a1:84:14:fe:67:59:22:3c:20:b0:fe:02:9f:77:eb:
                    cf:99:89:30:fc:3c:3d:c2:69:a7:65:5e:74:01:b7:
                    b1:c5:33:b3:47:83:a5:cb:a1:ab:07:36:b5:7e:86:
                    6d:d3:91:17:71:f8:20:91:ec:65:d5:0b:85:88:b9:
                    89:10:cb:79:bd:41:1e:fa:42:94:fc:43:b6:46:29:
                    f2:98:8f:f9:1b:b5:1e:40:7e:15:a9:9c:db:90:18:
                    86:ec:08:d7:86:25:de:b6:d3:89:45:ae:b4:56:25:
                    e9:80:08:a8:2d:2b:34:58:60:dc:ea:0c:a6:91:3b:
                    12:1c:e3:55:ef:2c:01:e6:86:0b:1a:c5:c9:e9:7d:
                    46:c1:c9:92:27:10:d5:fd:15:62:a9:95:01:39:7a:
                    33:83:c8:ae:1f:bb:a7:e0:18:b4:32:98:bb:26:1e:
                    62:16:98:de:da:f1:7b:6c:01:f8:83:24:ed:d4:d3:
                    9d:8f:31:05:58:56:9a:bb:2c:97:11:94:50:58:4c:
                    e3:4d:3c:cb:15:62:2a:e9:02:c9:fd:72:0e:bd:04:
                    3e:a4:28:df:2d:4b:73:c5:81:42:5f:89:e9:6f:6e:
                    36:0b:cd:eb:2d:24:54:7c:70:8e:d2:3f:f0:3a:a3:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:1F:0D:A4:28:05:FC:65:22:36:83:F6:F8:09:6D:20:3D:01:AF
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/bo0fDaQoBfxlIjaD9vgJbSA9Aa8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.126.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b5:8f:36:92:2d:3b:70:cb:31:6f:09:74:e4:77:13:d8:a9:b7:
         7e:c8:64:09:30:1b:c7:1b:5e:6a:7f:56:21:1c:6b:3c:92:26:
         41:f1:94:7c:09:7d:07:a3:41:b4:6a:bc:47:1b:d0:eb:a2:63:
         d5:19:63:9e:0c:d6:4d:7b:6f:85:26:51:b1:01:5a:35:4a:d6:
         62:cc:bf:5a:b2:35:c0:33:36:17:d8:9f:e6:3d:0d:a2:65:b6:
         0e:96:da:8e:81:5d:37:f9:5d:a9:dd:92:41:0b:d2:74:55:6a:
         b1:27:88:95:1d:89:e4:70:7f:43:3d:bc:b7:fc:09:6a:59:68:
         3c:93:3f:ac:ea:a7:63:dd:2a:77:05:cc:a4:0f:9b:e4:0a:21:
         b4:7c:0b:b4:78:a7:29:dd:df:cc:47:a8:aa:e9:f8:1a:2a:88:
         2a:09:24:b3:48:cc:a1:54:e6:f0:02:12:18:84:88:35:52:a0:
         b2:0d:14:91:06:2a:fe:64:21:bf:84:0b:db:39:a7:d2:b0:8f:
         f5:2c:4e:57:d0:98:ed:79:3e:eb:b2:58:85:bc:c1:46:5c:1e:
         af:58:1a:dd:6d:05:b8:a8:18:82:ad:2d:b6:93:6a:26:9b:b6:
         fb:6a:c9:bf:7f:2f:bb:35:e0:a2:53:55:bb:a1:e0:33:f9:c5:
         ad:03:48:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 12:44:26 2025 by rpki-client