Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/flacSQbCKzhgD7iq2_gsEX8j5Ms.roa
File:                     flacSQbCKzhgD7iq2_gsEX8j5Ms.roa (raw, json)
Hash identifier:          cqr+1jtZQ87Ezm3rPuibCYDK5ucJemaltZvrt2wU/Vs=
Subject key identifier:   7E:56:9C:49:06:C2:2B:38:60:0F:B8:AA:DB:F8:2C:11:7F:23:E4:CB
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       82
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/flacSQbCKzhgD7iq2_gsEX8j5Ms.roa
Signing time:             Thu 01 May 2025 01:31:59 +0000
ROA not before:           Thu 01 May 2025 01:31:59 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        153.120.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 07:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May  1 01:31:59 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=7E569C4906C22B38600FB8AADBF82C117F23E4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:32:a9:40:e5:cc:49:a0:7c:6f:1a:86:77:3f:
                    a5:b5:68:4c:5e:de:48:9e:80:8d:2e:f1:cf:31:b2:
                    60:5d:73:fe:1f:c5:de:82:00:ac:43:94:0c:77:44:
                    b6:d3:b3:a3:ef:eb:59:c4:9e:85:fa:aa:fe:52:c5:
                    14:69:be:14:7c:b2:3d:06:1c:8a:b4:0b:0d:05:25:
                    57:4a:2c:9c:54:f5:88:54:a6:86:dd:94:1f:4d:f5:
                    ed:20:1a:2c:b5:7a:3a:e7:e9:36:f2:d3:e7:b1:d6:
                    6c:48:71:fb:68:00:3c:b9:7c:d0:24:29:e7:21:e4:
                    49:a7:e5:af:35:63:66:79:71:52:86:31:71:3b:52:
                    a2:31:e6:af:cd:34:9f:21:e4:50:b3:bf:63:53:4f:
                    c9:90:a3:16:0d:29:40:61:e7:1b:dc:f5:f7:ad:38:
                    7a:b0:93:44:5c:7a:fb:31:97:3c:c0:39:a5:dd:31:
                    cd:79:1f:ae:cb:a1:c0:8b:52:11:fc:f5:0d:42:20:
                    50:77:23:88:40:01:75:53:56:21:33:57:ab:5e:26:
                    c6:ad:c3:dd:99:6f:b7:8f:e1:21:ac:b0:73:24:0a:
                    f2:09:b9:2b:37:05:27:b2:f6:d5:b6:91:28:d5:14:
                    60:1a:b1:86:55:d6:ae:6d:3b:ab:c3:de:4d:a0:8f:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:56:9C:49:06:C2:2B:38:60:0F:B8:AA:DB:F8:2C:11:7F:23:E4:CB
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/flacSQbCKzhgD7iq2_gsEX8j5Ms.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.120.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         73:a4:21:e3:1e:2b:c4:bb:28:8e:23:57:b6:de:e4:83:96:3a:
         73:13:01:b3:5b:40:4f:1a:8f:2c:ee:d5:6d:0d:76:31:54:ab:
         97:84:1d:0c:71:a1:a9:f7:67:76:33:e5:ec:b2:46:5f:47:49:
         54:c5:0f:4a:53:ad:f5:ea:3e:da:21:a4:59:51:af:98:3c:03:
         92:19:4d:1c:b8:c3:a7:7a:ae:18:bf:2f:f5:0c:61:dc:b3:f6:
         1d:98:e4:2f:aa:30:96:44:c8:5d:59:06:81:bb:77:ac:ca:ab:
         ad:97:ca:7a:2f:f7:93:c5:e0:db:bc:34:f0:65:6c:ff:a1:d3:
         44:08:d5:96:34:83:58:52:f3:60:67:7b:06:59:80:b1:ba:10:
         7b:7e:c7:24:04:a6:d5:d7:b8:b9:28:7e:e7:ab:e2:9e:82:f6:
         9c:e2:f3:4e:c9:02:eb:8b:b4:c9:a9:12:84:bb:3d:37:8f:ca:
         08:c3:cb:41:01:8e:b3:92:32:f0:b7:a6:08:c6:85:08:92:02:
         b9:7c:89:43:38:81:b3:c5:db:8d:94:6a:af:d1:89:4e:03:bc:
         d5:74:c1:b2:90:4c:c1:04:85:2d:07:ef:ad:41:72:cb:02:4a:
         a4:78:ae:8c:d0:97:1c:72:d6:c8:0d:54:0e:ef:39:7c:18:8f:
         47:1c:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 10:28:29 2025 by rpki-client