Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/GBaS18Gh19rpTy8QU0I7jXujVPM.roa
File:                     GBaS18Gh19rpTy8QU0I7jXujVPM.roa (raw, json)
Hash identifier:          aIhbksKhq47enzH6MO/BxnNIYDSSRO10rqcNL7xJkkY=
Subject key identifier:   18:16:92:D7:C1:A1:D7:DA:E9:4F:2F:10:53:42:3B:8D:7B:A3:54:F3
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       010A
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/GBaS18Gh19rpTy8QU0I7jXujVPM.roa
Signing time:             Thu 01 May 2025 01:32:13 +0000
ROA not before:           Thu 01 May 2025 01:32:13 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        153.121.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May  1 01:32:13 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=181692D7C1A1D7DAE94F2F1053423B8D7BA354F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:5b:01:7c:d7:1a:3a:50:64:05:15:be:aa:
                    c5:c2:4d:93:5b:da:df:2c:8f:ad:41:51:ab:69:ed:
                    ad:ee:59:ac:37:f3:ec:36:ba:0d:67:b8:70:24:00:
                    8d:84:be:4a:1c:9c:6e:94:c1:47:98:17:dc:af:d7:
                    7e:b9:26:a6:0e:a3:da:b5:ef:36:bb:03:b6:cb:c6:
                    8d:12:a7:78:02:35:b7:8f:77:04:2f:2e:0f:87:c5:
                    2e:3e:05:11:92:83:c1:58:9b:e6:89:45:a8:fe:87:
                    0d:a9:40:d0:89:71:8d:41:11:a3:ad:01:8b:0e:d8:
                    c9:39:19:77:91:40:67:6c:cc:68:e6:11:0a:77:3b:
                    ed:8d:67:8e:8b:6b:a7:24:44:3c:fd:10:e7:36:bc:
                    cf:95:15:f2:4b:77:be:8e:e6:61:c7:ca:35:18:3b:
                    55:e5:e2:da:a2:c1:33:61:ed:a3:1e:59:41:b4:92:
                    37:bb:dc:67:39:ef:37:55:ad:0b:51:0c:b8:1a:9e:
                    11:a7:39:55:8a:a2:4f:ab:0c:4a:6d:8e:74:9b:62:
                    44:08:84:35:89:70:47:97:31:c1:66:94:72:06:cc:
                    87:d5:e8:74:cc:ab:6e:46:99:57:4c:62:7b:80:66:
                    1a:60:5c:0f:08:b2:f6:12:fe:23:ca:15:5c:0b:a4:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:16:92:D7:C1:A1:D7:DA:E9:4F:2F:10:53:42:3B:8D:7B:A3:54:F3
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/GBaS18Gh19rpTy8QU0I7jXujVPM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:17:ec:d4:1b:bd:91:4b:d4:7f:da:f0:32:67:89:a9:d9:
         92:f2:8a:ad:85:ce:af:14:6a:cb:4f:bb:ec:29:2e:bd:11:11:
         dd:07:d8:49:76:39:be:63:a4:89:46:d6:82:72:87:e7:76:6c:
         dc:95:bc:1a:cc:91:c4:02:31:96:c4:b2:30:69:09:01:99:e2:
         4d:c1:d3:19:df:23:87:6a:31:9a:ac:28:1d:f0:1b:6d:b5:65:
         a9:0a:3c:86:df:3d:d7:b2:a3:20:71:86:ee:8f:e3:d1:81:ba:
         24:b9:11:09:c9:5f:84:b0:51:a9:6b:9d:e1:3b:04:f4:a4:7e:
         ed:f1:83:a8:32:4f:3f:ae:2d:ec:68:3f:1e:63:ca:ca:1d:c7:
         f7:45:01:08:f9:db:d6:af:2e:2a:fd:ed:5d:d0:97:d0:f4:48:
         a0:af:a6:53:e1:36:7d:51:8e:eb:ba:09:5d:28:dd:e7:e0:fa:
         ac:b7:43:a5:fa:59:52:d9:69:d2:d7:95:25:f6:51:33:13:a0:
         b2:10:38:8d:17:0f:77:d3:2c:7f:2c:60:0c:ac:46:c8:ce:5f:
         ec:db:8c:d4:91:08:1d:98:b3:70:a8:75:bc:12:58:91:42:ca:
         b9:ce:c4:ad:f4:a6:f5:d6:b7:6a:0f:1f:cf:7b:02:58:76:1f:
         66:bc:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 23:23:58 2025 by rpki-client