Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/f6D2qy6c1M1G3F2cYJqBKFl9O0s.roa
File:                     f6D2qy6c1M1G3F2cYJqBKFl9O0s.roa (raw, json)
Hash identifier:          DRPQJR78++xNk40Os1gQevyHq1DKsHQ6iaxCYGNr4RQ=
Subject key identifier:   7F:A0:F6:AB:2E:9C:D4:CD:46:DC:5D:9C:60:9A:81:28:59:7D:3B:4B
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       83
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/f6D2qy6c1M1G3F2cYJqBKFl9O0s.roa
Signing time:             Thu 01 May 2025 01:31:59 +0000
ROA not before:           Thu 01 May 2025 01:31:59 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        153.127.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May  1 01:31:59 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=7FA0F6AB2E9CD4CD46DC5D9C609A8128597D3B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ad:39:d1:c1:e4:6d:6f:cd:e7:a8:8b:5d:05:
                    9e:ef:af:0d:89:05:eb:83:ac:6a:cb:59:cf:23:00:
                    3e:99:61:a9:96:07:d0:73:ef:c1:7e:d9:e8:cc:42:
                    e4:47:03:c3:c8:e5:07:fe:e5:ae:c1:48:c8:9f:4b:
                    c2:bf:78:a5:ec:5b:a7:99:ed:c9:2f:88:b0:c1:7c:
                    c8:3b:3f:cc:fe:6d:72:cd:14:35:af:d5:2f:56:35:
                    68:29:7f:a9:47:87:1e:f4:b8:d3:03:25:36:c6:ba:
                    a7:57:bc:ef:cd:a9:64:20:83:89:32:0c:e6:e0:46:
                    de:fb:7c:c0:a8:4e:20:da:cd:e3:ca:a4:d8:b6:6f:
                    f8:e7:56:b3:67:a5:62:fd:27:52:dc:72:96:cf:5f:
                    a3:ab:77:8b:f0:2c:79:bf:73:c8:da:97:dd:ab:84:
                    62:3f:e3:27:8f:37:97:dc:9d:1e:04:e4:bf:0c:bd:
                    8b:82:a6:b2:22:32:89:f2:b9:b1:ce:70:dc:a1:2c:
                    26:fb:d9:e6:9a:18:42:12:b6:6c:44:3d:03:f9:1c:
                    9d:4c:97:ca:c8:33:e7:8f:12:cc:1c:5a:cd:9c:86:
                    39:a3:e7:4c:66:97:78:90:bf:29:08:c9:48:b8:03:
                    b5:39:45:63:cd:40:0a:9c:83:60:96:12:63:91:b1:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A0:F6:AB:2E:9C:D4:CD:46:DC:5D:9C:60:9A:81:28:59:7D:3B:4B
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/f6D2qy6c1M1G3F2cYJqBKFl9O0s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a0:2d:ac:fc:62:75:90:92:33:65:19:e4:61:9c:b8:83:43:4a:
         0a:d7:a2:57:54:77:3d:a1:39:fc:e0:cf:4e:b0:7c:75:59:3b:
         df:2c:ca:77:9b:68:ea:4d:2f:2e:bf:d0:24:a0:8a:7f:7c:f1:
         9b:ae:a3:6a:31:e2:92:c0:b9:b4:0e:db:0d:3d:58:71:25:99:
         11:21:10:c6:28:dc:e5:29:54:5c:a7:91:af:6d:35:7b:74:a0:
         ed:1c:20:8f:7e:57:fe:bd:f4:94:bd:53:67:40:67:d8:80:2b:
         b0:a0:e8:09:17:fa:a7:cf:ea:5e:4a:ed:d7:59:fa:ab:6c:cb:
         ac:97:07:5b:c3:55:e3:8f:e0:b7:c2:9e:8c:86:cb:e5:d7:5a:
         c0:72:4b:60:75:67:4f:4a:dc:60:62:a5:b9:73:6c:f3:96:09:
         24:de:aa:81:b4:97:11:2d:e5:22:99:52:3d:51:f1:d3:c7:8a:
         c2:ff:7e:f9:47:63:ba:26:16:4d:c5:ec:5b:66:20:71:37:e7:
         ce:22:7a:30:c3:77:ad:a4:45:a5:d8:1a:d0:41:b9:90:7c:87:
         fc:9d:f5:41:6c:9b:08:60:37:13:0c:56:d8:a1:88:8b:25:01:
         ea:25:07:0b:06:f9:c7:ec:2a:c5:49:4f:bc:57:ae:43:1a:0d:
         dc:5e:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:41:20 2025 by rpki-client