Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20134/ff8ac2XzBBiqHZumsPvA1OW9uro.roa
File:                     ff8ac2XzBBiqHZumsPvA1OW9uro.roa (raw, json)
Hash identifier:          omsLZEnD7HMJGoieFW5Q65QvQMJBlN+HugX9CnXCPMY=
Subject key identifier:   7D:FF:1A:73:65:F3:04:18:AA:1D:9B:A6:B0:FB:C0:D4:E5:BD:BA:BA
Certificate issuer:       /CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
Certificate serial:       19
Authority key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/ff8ac2XzBBiqHZumsPvA1OW9uro.roa
Signing time:             Wed 07 May 2025 06:22:33 +0000
ROA not before:           Wed 07 May 2025 06:22:33 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     131960
IP address blocks:        122.102.56.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 02:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
        Validity
            Not Before: May  7 06:22:33 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=7DFF1A7365F30418AA1D9BA6B0FBC0D4E5BDBABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:9b:51:f7:03:0a:20:69:13:e8:d7:7d:51:
                    fd:31:86:89:1d:82:37:5d:90:3b:06:fa:46:6a:1b:
                    b0:22:28:5d:4d:a8:98:5a:47:22:16:0e:e0:0c:82:
                    a2:5c:a6:68:6b:36:c6:d2:44:97:55:6e:d9:f8:81:
                    7d:3c:92:2b:7e:a3:bb:b7:b7:45:3c:46:c2:85:88:
                    a6:9c:4c:a8:fc:6e:20:b6:27:02:af:91:99:03:03:
                    f0:5c:24:71:2f:ff:f7:17:12:30:9e:b4:d4:a0:de:
                    0a:5a:fa:f1:d9:3a:11:97:65:a1:38:4c:d8:6d:07:
                    f7:65:f6:ca:c8:51:1e:a1:1a:cb:35:c7:ad:75:12:
                    68:ac:77:32:9c:9f:e0:b4:ed:65:ba:e5:9e:05:ad:
                    a1:92:cb:31:f4:36:2e:d8:d6:a8:72:dc:0c:3a:4e:
                    1e:f7:42:b0:a6:d6:2d:24:b7:fd:fb:51:43:a5:f9:
                    dd:67:80:11:8d:1b:64:60:6d:f0:a2:77:76:f8:bb:
                    cc:36:4c:d6:0f:47:0b:6b:dc:7d:3b:f2:bc:d8:81:
                    eb:70:43:fe:49:a9:a8:9b:81:53:97:64:68:b5:46:
                    74:4e:29:30:d5:f1:c2:76:f5:5a:36:b2:ea:41:ae:
                    72:8b:64:5a:3b:f3:08:b9:48:b7:bf:3f:98:b3:b6:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FF:1A:73:65:F3:04:18:AA:1D:9B:A6:B0:FB:C0:D4:E5:BD:BA:BA
            X509v3 Authority Key Identifier:
                keyid:D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/ff8ac2XzBBiqHZumsPvA1OW9uro.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.102.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cd:24:79:b1:2a:eb:59:61:ce:4e:47:5e:0d:e6:01:93:2a:61:
         3c:aa:7d:37:e2:c9:ac:46:12:6c:85:02:dd:87:0e:6d:2b:06:
         34:ef:4c:ee:5d:97:b6:e7:d6:d4:65:dc:a7:32:88:15:2c:d0:
         e4:58:35:8d:bc:8c:ca:fb:78:69:13:c9:11:23:f4:46:00:fa:
         7d:e1:0c:dc:bf:09:36:5c:71:43:80:e4:a5:2a:7f:c7:2e:56:
         94:a1:11:0f:90:4c:b3:92:d2:3d:0a:8c:50:54:f6:8d:c2:e9:
         9b:9c:09:4e:29:85:5a:fb:48:31:3b:95:3b:94:f8:e2:03:60:
         7e:1c:1d:d2:2b:a8:7e:79:31:b1:c9:0d:0f:ff:e5:7e:a2:4c:
         9b:dd:44:c7:d1:c0:ac:18:17:54:1c:0a:1f:4f:02:c0:4d:f3:
         26:d3:c5:83:ce:3b:77:38:dc:62:c7:6b:94:7e:a2:59:af:b2:
         42:93:b8:10:2e:be:eb:25:78:9a:07:af:a5:b3:18:8a:b5:2c:
         23:af:06:79:60:60:9d:b0:d6:74:d3:05:d2:5a:84:c7:52:37:
         a0:61:be:32:07:dc:ce:cd:28:7e:8d:ff:ec:4a:35:95:a1:24:
         70:84:00:bb:fd:32:b3:d2:d5:8f:d6:d6:4b:ae:77:0d:f1:5b:
         75:02:81:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 19 05:00:20 2025 by rpki-client