Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/LJbzIXvN8xJ5rryQ2EMXAaJTu48.roa
File:                     LJbzIXvN8xJ5rryQ2EMXAaJTu48.roa (raw, json)
Hash identifier:          9R+mB9XABKoH3ITjsCxBrQEitFyGiZxb4HDCY7Kkm9Q=
Subject key identifier:   2C:96:F3:21:7B:CD:F3:12:79:AE:BC:90:D8:43:17:01:A2:53:BB:8F
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       99
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/LJbzIXvN8xJ5rryQ2EMXAaJTu48.roa
Signing time:             Thu 01 May 2025 01:29:45 +0000
ROA not before:           Thu 01 May 2025 01:29:45 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     24277
IP address blocks:        115.166.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 02:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: May  1 01:29:45 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=2C96F3217BCDF31279AEBC90D8431701A253BB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:48:8b:d3:73:46:3e:be:27:e0:c3:c1:8a:
                    e5:3d:68:c6:27:95:75:b2:93:81:7a:7d:3c:48:53:
                    12:1b:88:9a:13:5d:ba:3a:03:d4:09:9b:96:b8:09:
                    71:a1:5e:e7:6f:8a:95:b4:7f:fe:f3:bb:26:7e:42:
                    9e:bc:ac:bc:91:a4:52:69:8c:4d:d2:bc:dd:99:a5:
                    1d:9d:72:b3:14:f7:1e:62:48:96:0f:3b:29:07:85:
                    40:bc:9e:6b:45:79:b3:87:f0:4c:46:ef:b7:a5:11:
                    c5:39:4d:f6:e1:94:15:d2:4a:59:c6:51:e6:f2:0d:
                    c8:2e:4e:cc:83:f2:9b:78:49:7f:73:14:e7:4f:e9:
                    e1:45:d9:c2:2b:9d:db:05:d6:18:a4:cb:f9:e3:01:
                    cb:68:00:a5:0a:b5:cc:cb:9b:55:ac:ff:a0:be:ad:
                    c0:ad:2e:00:45:43:3c:2d:72:8c:b6:b5:5f:4b:70:
                    07:ca:13:91:36:16:b1:b7:85:42:f0:9f:9a:c9:37:
                    22:e7:b0:d0:50:3e:6d:fe:60:92:2a:f3:42:14:0c:
                    7d:4f:96:ec:e7:0a:13:e2:aa:53:af:6b:25:c9:28:
                    5a:71:43:52:4b:42:88:af:70:77:56:ab:5f:b6:a1:
                    1a:1c:97:45:6f:e5:83:3a:59:99:4f:fd:89:aa:0c:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:96:F3:21:7B:CD:F3:12:79:AE:BC:90:D8:43:17:01:A2:53:BB:8F
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/LJbzIXvN8xJ5rryQ2EMXAaJTu48.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:9f:5e:38:6b:c4:b5:8d:0b:7b:76:86:42:7f:8f:fd:27:70:
         11:da:8b:b9:3e:13:09:f5:8c:09:4a:a9:ae:60:81:84:e5:9a:
         19:57:40:d0:b6:ed:29:1d:4a:4e:46:0d:95:ba:37:f2:38:8f:
         9b:3b:b9:98:76:36:00:78:79:3f:49:df:4e:a5:6b:8c:3d:0f:
         1d:81:15:5b:af:20:46:73:56:08:62:9e:86:48:3e:a0:be:1b:
         e1:6a:70:e1:fa:c5:ba:96:5c:51:03:85:0b:6e:1e:fb:59:ad:
         db:50:b4:b0:2c:16:f7:99:d7:89:cc:a8:ba:24:00:46:4c:70:
         c5:fe:dc:82:84:25:76:4c:8b:49:42:a1:f1:a4:0e:42:1a:f3:
         e6:5a:3a:5e:9b:d4:e3:5e:b2:41:b2:b6:05:bf:33:28:89:5f:
         93:c7:f5:9d:ed:66:13:99:0f:01:57:e9:3e:6a:73:a9:7c:9b:
         cb:db:dc:e1:97:1c:6e:de:46:a6:a6:4a:ce:28:5a:ce:34:5d:
         49:e1:90:07:87:1d:b9:08:ee:c7:76:01:92:e3:e6:70:c3:51:
         02:fe:99:08:3e:57:01:32:f9:32:20:4a:09:5a:1a:dc:a0:2a:
         dd:71:25:b8:84:98:fe:f8:43:c3:e4:b8:ec:0e:71:bf:59:9b:
         86:07:90:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 04:34:58 2025 by rpki-client