Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/QiJyZ5BSPRYdSd8lmOIqFEG31SU.roa
File:                     QiJyZ5BSPRYdSd8lmOIqFEG31SU.roa (raw, json)
Hash identifier:          WDy9o0kIu9nsJcUwPCs5Ii9d0sDHRSRGP2xPyGTqOG4=
Subject key identifier:   42:22:72:67:90:52:3D:16:1D:49:DF:25:98:E2:2A:14:41:B7:D5:25
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0231
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/QiJyZ5BSPRYdSd8lmOIqFEG31SU.roa
Signing time:             Thu 01 May 2025 01:31:45 +0000
ROA not before:           Thu 01 May 2025 01:31:45 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        211.16.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:45 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=4222726790523D161D49DF2598E22A1441B7D525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:10:26:28:e1:66:4f:5c:90:92:4e:d0:60:
                    93:08:5b:c1:53:01:b7:1e:d8:a5:ab:d1:ed:be:e6:
                    b5:be:ec:db:4d:93:b9:d0:19:c2:ff:4a:77:3d:ce:
                    a2:4e:6f:51:90:2a:1d:24:e4:08:8e:2b:20:89:41:
                    05:a0:d3:b0:28:8a:f1:ec:a4:35:cf:94:74:fb:da:
                    45:e9:00:e8:ed:ee:d8:f6:e9:ba:30:6e:4c:84:84:
                    57:e9:e3:86:4f:20:95:85:38:77:57:b8:92:28:b9:
                    87:30:e4:2d:b9:a3:75:3b:fc:a7:f3:7f:97:47:c2:
                    cb:51:65:cc:20:2e:e0:c0:84:66:73:df:bd:b2:0e:
                    a2:97:03:ec:8c:25:2d:d6:7d:74:8a:be:fc:f1:7d:
                    13:03:06:e3:ed:74:cf:b6:34:c4:af:13:bf:70:39:
                    67:10:0b:2e:9c:1d:56:bf:67:da:53:b0:c4:cc:78:
                    b3:c2:41:01:78:f0:91:de:2a:aa:1b:b8:ee:5c:2c:
                    88:0e:9e:0b:31:39:a4:f2:2f:0c:30:45:f5:32:b6:
                    96:db:fd:09:e9:48:a0:96:a4:44:37:6b:61:95:a9:
                    25:dd:70:f4:ed:3a:9d:07:91:ce:d5:93:60:8e:b0:
                    58:fe:07:7f:fa:9f:11:a5:05:15:e4:58:e3:cb:54:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:22:72:67:90:52:3D:16:1D:49:DF:25:98:E2:2A:14:41:B7:D5:25
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/QiJyZ5BSPRYdSd8lmOIqFEG31SU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.16.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         15:2e:8e:b5:48:c0:4b:58:3d:6b:17:c9:47:fe:75:a8:3d:0b:
         17:17:20:23:ce:dc:b6:3b:d3:da:2f:00:48:76:3f:08:c0:34:
         c9:cc:8f:42:eb:64:56:a9:10:22:cf:08:69:69:3d:33:d3:c2:
         84:7c:d7:75:34:47:94:d6:62:9b:a9:7e:1a:ed:b3:cd:ca:39:
         32:c7:a9:9e:b0:b7:d2:34:84:48:b1:2e:77:59:84:5a:b3:04:
         b3:d6:c4:3e:01:d9:01:3f:a5:d2:5e:bb:85:e4:bc:ba:57:ca:
         88:24:b5:ae:f5:4f:4a:6a:60:c8:09:58:67:98:38:c3:aa:a5:
         5f:4c:16:a5:e5:d6:d3:b7:89:88:a6:de:e4:0d:f4:52:c1:d0:
         96:20:21:1e:05:10:91:f0:79:e3:eb:2e:9b:5f:04:92:2e:7a:
         ab:28:61:d9:b6:9c:8d:c5:30:70:85:2d:9c:ab:85:ed:98:ae:
         8a:67:33:7f:c4:30:2b:7d:26:e7:dd:15:8f:31:6b:bf:1b:43:
         5b:b6:83:87:c7:98:c5:a4:22:a1:c1:94:53:45:3e:c4:6b:ac:
         ed:39:7e:fb:0c:a9:ae:77:79:5d:96:98:35:85:24:72:87:4b:
         7f:25:5c:f3:b3:b7:df:ad:3b:17:a7:e7:73:61:88:0f:b9:fe:
         ae:1c:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 07:25:51 2025 by rpki-client