Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/pdslocNtAfBZ6vW4iQN315Vgd4I.roa
File:                     pdslocNtAfBZ6vW4iQN315Vgd4I.roa (raw, json)
Hash identifier:          V3fq4bB635g6CrEIpusFQ3yqPoPGoe/ITNtjBW2RQ7Q=
Subject key identifier:   A5:DB:25:A1:C3:6D:01:F0:59:EA:F5:B8:89:03:77:D7:95:60:77:82
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0237
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/pdslocNtAfBZ6vW4iQN315Vgd4I.roa
Signing time:             Thu 01 May 2025 01:31:47 +0000
ROA not before:           Thu 01 May 2025 01:31:47 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        218.47.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:47 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=A5DB25A1C36D01F059EAF5B8890377D795607782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:44:c1:69:70:76:9e:09:53:91:77:15:c1:
                    eb:cf:dd:6c:cf:59:a7:ee:2f:d2:c8:73:83:cc:09:
                    d8:9e:c1:b9:f6:2b:c1:40:e7:a8:c2:b1:f9:ca:24:
                    07:af:b4:b1:b6:66:7f:21:e3:24:ec:58:38:ff:c0:
                    b0:80:c7:cd:41:42:69:f0:b1:98:53:36:5f:35:5a:
                    42:1e:be:81:9f:57:3f:ba:a1:84:6d:da:16:9b:aa:
                    47:69:35:ed:c8:ad:2e:fa:50:c4:0c:85:1c:2a:a9:
                    20:e4:3f:2d:f8:99:78:3f:8a:7f:53:fc:57:94:6e:
                    63:b8:6c:78:8b:c5:53:a7:bc:9f:2a:3a:c5:5b:35:
                    73:1d:2a:76:24:ea:e7:2c:90:a6:ae:4a:1f:f4:5d:
                    70:2d:25:36:bf:6b:79:e8:15:c3:9e:68:a7:1d:04:
                    2a:5f:3b:1b:03:16:62:58:93:75:d0:75:77:4b:a1:
                    d7:4c:8d:1a:c5:22:60:9e:b4:e9:de:9d:6b:15:03:
                    ea:bb:5d:55:7b:6a:72:a8:98:f7:32:4f:24:41:f4:
                    e3:9e:4d:ab:4f:1d:43:2d:d2:c7:90:a4:82:2a:52:
                    ba:11:66:c8:6a:dc:75:5f:06:11:06:4a:96:9b:b1:
                    c8:56:f4:ba:e5:7f:c4:56:7e:ea:f9:d0:e6:61:41:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:25:A1:C3:6D:01:F0:59:EA:F5:B8:89:03:77:D7:95:60:77:82
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/pdslocNtAfBZ6vW4iQN315Vgd4I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:cd:22:48:7a:90:80:60:84:a3:37:5e:02:99:a9:a7:3d:de:
         1f:ff:f9:51:dc:2f:ab:54:e3:26:98:d3:15:83:6a:f9:e8:27:
         ea:2c:1c:c2:c9:e7:61:82:e9:28:33:08:22:b5:8b:65:e5:51:
         74:66:4e:65:5c:50:6c:a4:fe:ed:8b:1b:96:bf:ee:fb:b8:7f:
         cc:6e:2d:07:15:8e:a6:4d:f6:93:c3:f6:68:46:2d:35:a3:a2:
         de:38:f9:3e:f8:20:be:91:a2:20:e6:f7:25:28:fe:86:16:4c:
         b9:18:50:29:aa:89:85:48:ec:19:9b:fb:7c:8a:5e:4f:ea:02:
         91:85:ff:2d:5a:da:16:f1:09:4a:73:e2:b5:f7:73:8b:65:61:
         6f:a1:5b:bf:49:18:f2:a5:94:21:b0:70:e8:89:a3:72:80:86:
         dc:3f:60:fb:b0:59:66:20:d7:a0:d9:97:96:83:99:6b:eb:d8:
         48:39:e2:25:4d:b3:e7:ee:e8:6c:c7:a1:df:66:b4:6e:85:55:
         a1:49:d3:c8:49:6c:19:07:2a:ab:0c:af:d0:d0:7b:23:39:1a:
         74:7b:84:80:31:9d:78:01:59:a8:51:d1:98:08:7a:e9:37:30:
         c2:06:0e:e1:76:a2:7f:d7:d8:5a:8c:0d:42:5d:0a:5b:57:c6:
         ed:f4:fc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 01:12:46 2025 by rpki-client