Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/k0pBlOeuHG6k7bxJ8YyONF7RRSo.roa
File:                     k0pBlOeuHG6k7bxJ8YyONF7RRSo.roa (raw, json)
Hash identifier:          4XlRWInGiV6PHqviuURQl/zuT8Qo0HNfojPbqcxKiwQ=
Subject key identifier:   93:4A:41:94:E7:AE:1C:6E:A4:ED:BC:49:F1:8C:8E:34:5E:D1:45:2A
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       7C
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/k0pBlOeuHG6k7bxJ8YyONF7RRSo.roa
Signing time:             Thu 01 May 2025 01:31:56 +0000
ROA not before:           Thu 01 May 2025 01:31:56 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        153.127.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 04:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May  1 01:31:56 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=934A4194E7AE1C6EA4EDBC49F18C8E345ED1452A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:26:92:41:f6:04:96:31:e9:70:ed:9b:d7:
                    99:18:ef:d7:bb:6e:75:e2:a4:5b:3e:6a:4c:70:44:
                    c2:66:14:86:db:71:53:1d:37:87:05:65:c5:59:83:
                    36:02:c5:2c:f1:6d:61:28:e3:d9:58:a6:d5:74:b6:
                    08:44:4b:fc:cf:63:e1:c9:22:2c:ac:b1:2a:2c:86:
                    73:1a:8e:71:7e:a7:33:52:34:9b:bd:80:b9:40:d1:
                    3b:7d:7a:6b:8b:bb:bc:68:47:f0:cb:96:9e:bd:d8:
                    98:68:8b:2e:87:38:87:37:4e:57:b1:b7:fa:9f:c8:
                    c6:81:aa:9d:13:df:ad:6e:a1:97:05:1a:e9:03:46:
                    a5:ed:bf:5c:a4:ea:88:1c:9a:c8:9a:5f:7a:89:90:
                    17:c8:01:c6:98:50:07:06:10:99:75:7b:52:76:41:
                    0d:9c:13:f4:3e:f3:05:a4:e5:31:12:53:69:25:96:
                    a0:51:29:63:f9:83:47:66:72:7f:84:57:f6:d8:cd:
                    7e:0d:e4:4f:50:76:56:e5:d5:86:04:d7:f7:11:d4:
                    cc:34:00:85:e5:12:19:af:c4:44:67:7d:03:a6:3f:
                    dd:65:41:d5:c3:df:63:cd:3f:df:db:88:bb:06:28:
                    56:dc:e2:92:c6:7f:28:3d:dc:63:72:f9:d1:56:50:
                    b5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4A:41:94:E7:AE:1C:6E:A4:ED:BC:49:F1:8C:8E:34:5E:D1:45:2A
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/k0pBlOeuHG6k7bxJ8YyONF7RRSo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         82:17:5a:70:8a:c3:e2:32:36:2c:28:5d:9b:c2:2d:4d:c5:fd:
         a2:cd:d2:2b:73:b0:0a:2e:9e:26:dd:01:2e:4f:b9:37:9c:11:
         27:e5:39:50:29:91:73:9e:c8:ee:f7:f5:d8:e9:36:1d:5e:ef:
         3b:01:bb:ac:e2:88:3c:50:d2:d1:d6:fd:f2:5a:97:3f:4f:fa:
         a9:75:3d:dd:27:5a:9e:1a:bf:7c:5e:6c:0a:cf:f6:49:1b:0f:
         3c:4a:e2:2a:b3:81:d4:41:24:9e:11:b4:7d:d5:77:d4:5c:bc:
         67:ee:f5:82:68:7b:fa:8c:47:1d:5f:e2:83:2e:6f:f3:e2:d9:
         8a:50:89:dd:c8:72:af:83:0e:35:3e:9d:8d:e8:e5:a3:d1:03:
         09:df:5d:9d:48:b2:5c:08:d4:04:27:bc:39:e9:7a:a0:11:50:
         53:53:3b:e9:b3:3e:86:82:19:5a:d3:68:aa:ba:41:8a:22:b9:
         a6:94:72:83:f2:f0:fd:a4:b8:2b:9e:86:7c:c6:8b:07:db:d5:
         dd:c9:4a:1d:02:88:ab:d9:5a:7f:ec:85:d3:33:55:e0:03:4a:
         03:54:48:4c:7a:03:71:81:14:5e:92:37:b4:7f:78:2e:47:88:
         11:9c:03:68:32:24:b7:c3:19:3b:25:5e:4f:2d:ec:ee:66:cc:
         b9:aa:d1:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 19 06:35:03 2025 by rpki-client