Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/VkcLI0fxm6lK1zw9idbbcSXH-zA.roa
File:                     VkcLI0fxm6lK1zw9idbbcSXH-zA.roa (raw, json)
Hash identifier:          h4e7sksjM7CkyGze3lCw4KPjh+Cj9gwdns4x26TQPFM=
Subject key identifier:   56:47:0B:23:47:F1:9B:A9:4A:D7:3C:3D:89:D6:DB:71:25:C7:FB:30
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0228
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/VkcLI0fxm6lK1zw9idbbcSXH-zA.roa
Signing time:             Thu 01 May 2025 01:31:41 +0000
ROA not before:           Thu 01 May 2025 01:31:41 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        210.225.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:41 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=56470B2347F19BA94AD73C3D89D6DB7125C7FB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:96:20:da:ae:59:1b:18:9f:06:32:e0:47:
                    53:53:2a:3c:a8:7e:b4:51:77:fc:34:ab:20:62:ef:
                    27:95:f3:20:e1:73:f8:30:86:ef:20:bf:a4:af:3f:
                    cb:06:75:9f:45:38:b9:a3:14:9b:43:b8:4c:82:6d:
                    68:40:19:ee:1e:b6:b0:c9:7a:36:2d:91:07:7c:f1:
                    4d:d3:4e:1c:e4:b3:a3:70:a6:30:6d:49:d1:37:35:
                    78:d2:28:04:c4:bd:b9:1b:ce:eb:63:dd:d5:b0:9e:
                    02:31:00:42:da:9c:95:30:1f:eb:d8:f7:09:24:6d:
                    9d:91:18:29:ac:5b:fe:60:7f:f0:45:aa:3f:a2:81:
                    9f:9a:6e:e3:81:b4:9b:fc:17:9f:be:7a:dc:f2:a5:
                    0d:f0:8d:29:4a:5e:25:4f:d9:87:73:1b:b5:25:54:
                    d6:50:a6:a9:1b:ac:5f:df:66:69:9d:12:4a:c9:b6:
                    18:13:6c:c9:fc:18:73:52:52:91:dc:c6:b6:73:1e:
                    9a:5f:c2:90:20:ef:1d:e6:41:cc:1e:73:34:62:5a:
                    66:e4:35:02:37:15:65:64:4f:7b:a2:0c:06:1c:a9:
                    f6:32:20:7b:9f:7c:64:73:2b:44:48:a4:14:28:b7:
                    51:f4:4e:93:b2:3d:eb:b6:71:14:92:bc:53:4b:6e:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:47:0B:23:47:F1:9B:A9:4A:D7:3C:3D:89:D6:DB:71:25:C7:FB:30
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/VkcLI0fxm6lK1zw9idbbcSXH-zA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d8:c8:01:6a:c8:f2:9e:90:7c:2e:42:cf:07:de:2b:55:58:f0:
         10:b3:27:5c:ee:c5:c4:fb:1e:d2:90:c1:1a:5c:af:56:7b:62:
         b6:d9:10:e0:cf:9f:43:55:be:89:c0:e6:8b:71:8a:1e:d6:a8:
         56:5c:24:dd:0d:ff:de:e0:ae:ca:7c:0e:aa:34:9e:c2:eb:05:
         14:6e:3e:93:56:8b:de:83:40:61:7c:0e:a5:45:48:17:73:78:
         6a:ec:23:f4:73:df:29:f9:b3:1f:4e:49:01:29:a9:ea:aa:91:
         ff:ec:c1:ba:49:b4:a1:99:ed:76:1a:e1:ae:3e:64:f4:5b:3a:
         51:40:7a:d0:78:90:66:e5:f6:7d:5c:0f:23:96:c7:c3:46:d7:
         22:0a:45:d9:11:a0:53:13:47:9d:d1:a3:37:fa:a1:3b:97:45:
         8d:68:ae:81:69:be:68:b4:8c:93:e8:22:75:92:30:31:15:26:
         8b:62:5a:e5:c5:af:f8:89:7d:34:1a:14:53:d8:67:73:59:f9:
         17:bf:7e:14:a2:79:a0:7e:41:03:6b:29:b8:75:2e:4d:17:31:
         68:19:b4:80:54:4a:75:d5:91:2c:8d:0f:e5:14:fd:f4:cd:05:
         30:37:0d:d1:2e:17:4a:95:a4:1d:36:ca:8e:44:f4:3d:b0:be:
         cc:66:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 18:27:48 2025 by rpki-client