Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1384/wZ6jAUg9prXZ3b_9He_EYUvauFM.roa
File:                     wZ6jAUg9prXZ3b_9He_EYUvauFM.roa (raw, json)
Hash identifier:          cBZidElBPyy9qdllRz9EqfCHM4hknNp/WWl12H8m858=
Subject key identifier:   C1:9E:A3:01:48:3D:A6:B5:D9:DD:BF:FD:1D:EF:C4:61:4B:DA:B8:53
Certificate issuer:       /CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
Certificate serial:       4F
Authority key identifier: 87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/wZ6jAUg9prXZ3b_9He_EYUvauFM.roa
Signing time:             Thu 01 May 2025 01:32:35 +0000
ROA not before:           Thu 01 May 2025 01:32:35 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     14618
IP address blocks:        150.70.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 02:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
        Validity
            Not Before: May  1 01:32:35 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=C19EA301483DA6B5D9DDBFFD1DEFC4614BDAB853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:9d:af:39:d0:e0:ec:bb:43:df:75:65:3b:
                    97:c8:39:3c:0d:40:be:86:2f:3f:66:1b:ef:d1:f6:
                    51:ad:ff:81:a1:82:76:4d:70:c0:01:6c:a6:38:02:
                    7e:ed:b3:c6:05:72:4b:d6:c0:2b:f6:55:77:04:7e:
                    17:4a:4d:c5:84:15:53:40:4b:5f:e8:23:89:9d:e8:
                    14:2c:0a:21:a7:ff:c8:89:27:dc:43:5f:f6:5a:98:
                    eb:4f:03:2f:ca:75:fe:29:c1:ba:20:51:7f:be:c2:
                    45:db:af:79:42:f4:09:5b:b8:6c:0c:dc:f5:4c:6d:
                    f3:28:40:be:6b:d9:d5:92:fe:03:c1:7f:a6:8b:ea:
                    c8:e4:a6:94:0a:89:a7:67:c2:e1:92:3c:d8:77:ff:
                    5c:c7:01:b0:80:60:8e:9c:84:ab:86:ed:87:09:15:
                    2a:64:20:d2:3d:e2:0a:73:70:ba:53:fb:e6:d5:83:
                    bf:78:bd:00:45:5f:65:f3:dc:ab:92:cc:97:4a:03:
                    0d:be:5f:39:ea:e0:7d:93:01:03:21:b3:cc:a3:b9:
                    71:cc:6c:ff:d2:2a:4b:34:90:26:20:1f:5b:3b:f0:
                    2e:76:a0:2f:75:e4:97:b6:bd:b9:bf:f0:ff:85:f5:
                    26:a4:35:c1:f2:aa:c5:4e:aa:7f:9e:b8:2e:c6:bb:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9E:A3:01:48:3D:A6:B5:D9:DD:BF:FD:1D:EF:C4:61:4B:DA:B8:53
            X509v3 Authority Key Identifier:
                keyid:87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/wZ6jAUg9prXZ3b_9He_EYUvauFM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.70.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c5:81:4a:8b:ed:c7:6a:22:32:3a:0f:40:53:86:2e:8c:15:
         64:6b:ca:45:d9:ef:b6:bf:57:e0:27:0a:96:5d:78:ed:af:c8:
         a9:b7:ae:c2:c2:0c:3c:ec:35:df:34:7f:4a:ad:e8:17:fa:d0:
         79:60:c6:0c:f3:68:e4:81:5f:e6:41:83:f3:96:41:05:8f:aa:
         c7:5f:98:26:5f:95:4e:59:5e:92:8b:85:5e:c4:e2:d3:a5:8a:
         53:81:13:30:ae:e8:d2:cc:b3:5e:0c:f0:e0:8d:b1:7c:66:ee:
         41:85:ea:6b:5b:f8:8b:de:8c:89:dc:60:8c:a3:4f:9e:74:1b:
         db:68:fd:e4:0f:26:13:8e:f6:e1:a2:ca:7c:bc:8c:1c:c3:4d:
         43:30:e2:db:68:85:56:43:4a:de:ca:4a:1b:48:ee:d4:d7:be:
         d7:93:60:0d:4f:33:c5:c1:74:4c:49:d4:de:96:15:73:dd:cc:
         18:f4:3d:e1:6a:79:e2:a9:f2:7a:00:50:0e:fa:22:b4:8f:cc:
         e7:97:19:68:15:16:88:5b:d9:d9:67:80:95:f8:2f:e1:15:13:
         49:3d:7d:15:c7:72:dc:bf:bc:24:21:49:c7:fb:93:28:69:f0:
         f1:f4:fe:66:38:e7:b2:4d:00:fe:76:fe:94:dc:8a:3f:a6:dc:
         a0:cc:0d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:00:40 2025 by rpki-client