Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/emWj2VgiVlnXfT2TpNhpR3ZtY_g.roa
File:                     emWj2VgiVlnXfT2TpNhpR3ZtY_g.roa (raw, json)
Hash identifier:          D+HYMvInNR3N8a2Y11lWzr/FNqRrM98UVuBahuMrfmE=
Subject key identifier:   7A:65:A3:D9:58:22:56:59:D7:7D:3D:93:A4:D8:69:47:76:6D:63:F8
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0221
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/emWj2VgiVlnXfT2TpNhpR3ZtY_g.roa
Signing time:             Thu 01 May 2025 01:31:37 +0000
ROA not before:           Thu 01 May 2025 01:31:37 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        210.132.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:37 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=7A65A3D958225659D77D3D93A4D86947766D63F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d0:6a:00:b6:81:39:ac:ea:37:34:ec:23:8e:
                    ce:13:29:70:1e:9c:e5:5b:ec:7a:90:09:b4:2b:05:
                    2e:10:2c:1f:ea:fa:88:ed:bf:ab:bf:55:de:10:94:
                    44:1f:c5:9f:37:bf:f8:5b:10:79:c5:26:e9:57:04:
                    dd:0d:91:7b:48:08:2b:32:82:82:b1:4d:0f:b2:37:
                    72:d3:be:02:c9:c6:44:4a:07:52:d3:8e:fe:c7:d9:
                    b5:49:7e:fc:a3:25:02:29:bb:17:7c:15:6e:b9:bf:
                    b4:7f:98:02:90:6c:7b:ce:8e:70:ae:ce:42:14:fc:
                    38:e5:fa:02:38:ff:84:7c:56:04:ba:47:ab:cb:73:
                    21:1f:d6:e9:8a:da:cb:0d:2f:13:86:21:52:41:21:
                    7d:0a:d1:95:ce:e8:00:d3:5a:0c:33:21:cf:5d:37:
                    d0:18:27:9a:96:4d:a9:a5:58:06:3c:55:70:50:17:
                    49:38:9a:59:0e:ac:a2:2f:90:2c:df:70:dc:22:bb:
                    a5:d5:86:fe:39:4b:c4:78:b4:04:1b:02:4b:de:54:
                    38:cd:49:1b:b8:6b:10:4f:1d:66:0a:9a:65:1f:97:
                    7f:cd:b8:42:49:83:40:97:c9:8e:04:37:38:65:e2:
                    47:4f:37:18:77:55:f7:6b:a7:48:c8:8e:52:8b:04:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:65:A3:D9:58:22:56:59:D7:7D:3D:93:A4:D8:69:47:76:6D:63:F8
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/emWj2VgiVlnXfT2TpNhpR3ZtY_g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6a:61:cd:0b:d9:5c:8d:be:a3:8f:ba:35:b7:35:72:26:1a:cc:
         19:b8:ee:b4:28:a8:86:2f:86:02:21:ee:0b:91:df:08:6d:41:
         2d:b1:7a:06:2f:e0:ed:4e:dd:73:66:d9:29:4d:0d:0f:18:28:
         3e:57:6a:5f:0e:91:db:17:76:fd:d4:af:d9:85:60:52:e9:83:
         8f:e9:cd:ed:62:5b:58:72:4b:84:a1:3b:c6:b2:51:2b:08:4e:
         45:a8:fa:44:de:b1:fe:bf:5a:c4:db:78:8a:4b:76:d5:af:b3:
         26:f0:b1:47:a5:15:b8:46:0f:96:73:b5:f8:b1:d5:ef:84:c1:
         ae:f1:d2:02:55:25:2f:74:d1:e2:4e:6a:9c:77:f0:6d:3d:06:
         8e:d8:34:0e:61:8a:3f:f2:ac:9b:b4:14:bf:64:bd:ed:7c:dc:
         2e:84:f0:62:64:49:22:94:c2:a2:90:90:b4:31:64:fc:6a:02:
         4e:bf:b7:70:fa:51:f4:3c:14:2e:22:a5:21:1a:f9:6b:75:71:
         72:02:16:1e:94:5c:1c:25:0c:dc:c7:a9:08:05:8a:08:ce:4f:
         d5:f7:d1:45:e7:c8:6b:e7:2a:b4:ae:8d:70:d0:75:70:86:dd:
         1a:b3:c4:b1:60:59:f2:70:d6:ca:d5:70:0b:04:ce:35:d8:75:
         4f:9b:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:15:21 2025 by rpki-client