Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/1dOPw2bKvIRlmGHwahgQF9GNyUg.roa
File:                     1dOPw2bKvIRlmGHwahgQF9GNyUg.roa (raw, json)
Hash identifier:          C71MdmKQqU3iEL+MUqS+p4lhto8rjTCHNTD8KotrccU=
Subject key identifier:   D5:D3:8F:C3:66:CA:BC:84:65:98:61:F0:6A:18:10:17:D1:8D:C9:48
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       010D
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/1dOPw2bKvIRlmGHwahgQF9GNyUg.roa
Signing time:             Thu 01 May 2025 01:32:14 +0000
ROA not before:           Thu 01 May 2025 01:32:14 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        61.211.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 21:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May  1 01:32:14 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=D5D38FC366CABC84659861F06A181017D18DC948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:98:68:40:08:9d:a0:ec:58:a6:bf:f8:47:2f:
                    fa:bd:03:4d:88:b4:68:c1:b8:41:40:b3:d1:5b:0b:
                    4f:c5:f3:d3:b2:13:49:fc:fb:c3:4b:93:85:c0:f4:
                    92:9c:c3:d3:8e:e6:1a:4b:63:75:3d:d2:3a:8c:b3:
                    17:31:a3:ba:98:a3:96:57:a1:54:92:2b:41:5d:28:
                    fe:ee:ad:31:6f:f2:d6:22:36:7a:b4:75:8a:10:19:
                    e6:2d:9b:b0:bd:96:f3:97:f9:aa:86:32:77:18:8f:
                    b1:d7:3b:31:59:da:a4:a1:c2:d3:aa:a2:93:39:a7:
                    10:aa:e5:83:ac:a4:da:99:91:1c:17:c5:c9:82:96:
                    df:be:2f:84:35:95:96:26:b2:89:64:9b:ca:84:76:
                    e3:37:73:31:ff:9b:fa:d3:e6:b0:68:40:4c:ae:a6:
                    67:14:77:e1:46:6f:58:68:19:85:da:39:66:35:8c:
                    fa:d6:40:1d:28:1c:0f:10:f1:c5:3a:33:02:a9:8d:
                    f4:94:5b:b8:37:e8:64:21:f1:ca:0d:09:ef:a9:e7:
                    b0:ec:34:4e:5f:ba:d0:99:b5:a1:3c:65:9a:c0:c5:
                    16:9a:f6:d2:e3:ea:73:35:7a:5a:a6:f4:1a:3b:02:
                    7d:d3:80:c5:f9:4f:94:13:68:d7:be:85:1a:4d:8d:
                    e1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:8F:C3:66:CA:BC:84:65:98:61:F0:6A:18:10:17:D1:8D:C9:48
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/1dOPw2bKvIRlmGHwahgQF9GNyUg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:86:60:80:09:cc:7d:68:88:ba:df:3a:f0:ca:b2:5b:6b:c9:
         62:42:e3:02:90:02:bb:49:46:49:7a:12:be:6e:8e:8d:ba:bb:
         a0:58:65:a1:3b:13:dd:44:18:6d:67:cc:97:e8:05:61:81:39:
         bd:b9:0a:9b:3f:d1:93:29:0c:b2:73:8d:d5:52:28:e6:71:3a:
         4c:b8:b9:f8:74:2c:79:3f:93:3f:a0:43:c0:89:50:9a:d5:c8:
         c6:76:a3:e3:17:15:ee:8d:85:a4:10:9c:7f:b6:59:a4:22:ef:
         36:60:dd:3c:a7:aa:cd:74:2a:d2:c5:93:fa:43:55:13:70:40:
         7c:49:6a:8c:a8:f4:50:08:cd:10:98:4f:48:74:b1:ac:07:42:
         39:2e:ce:f0:d0:3a:7d:74:8f:a1:0b:9d:1b:39:d2:21:d8:f2:
         81:f7:33:93:20:d1:97:3d:d3:da:dd:68:90:6d:ad:dc:d6:48:
         28:ef:52:12:4b:09:ab:14:0e:4e:e7:33:11:49:7f:8f:28:19:
         c4:fb:f3:28:14:07:44:fa:7a:b5:89:ba:18:dc:93:23:c3:b7:
         5d:14:36:31:d3:c4:77:75:24:57:3d:08:46:d4:3f:cb:19:66:
         e9:11:d5:2c:7d:3a:37:70:15:10:a3:72:e6:c6:62:90:57:01:
         30:51:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:04:29 2025 by rpki-client