Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/GJOtrJcS36bDtXKQVdYR-QAq_jY.roa
File:                     GJOtrJcS36bDtXKQVdYR-QAq_jY.roa (raw, json)
Hash identifier:          7RGO+F+7sDtSM6yLJJW7RO82fYI+YRgZv4ITjQcziZs=
Subject key identifier:   18:93:AD:AC:97:12:DF:A6:C3:B5:72:90:55:D6:11:F9:00:2A:FE:36
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       0108
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/GJOtrJcS36bDtXKQVdYR-QAq_jY.roa
Signing time:             Thu 01 May 2025 01:32:11 +0000
ROA not before:           Thu 01 May 2025 01:32:11 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        202.242.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 09:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May  1 01:32:11 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=1893ADAC9712DFA6C3B5729055D611F9002AFE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8b:bc:66:70:68:8f:b3:ba:01:77:10:38:47:
                    36:f5:1f:ad:54:e4:6f:bc:35:53:06:07:ef:58:05:
                    dc:6e:a5:4b:9c:bd:30:35:04:3c:f7:5c:cc:a7:d1:
                    76:d4:99:c2:b5:70:c9:c2:3a:b1:f7:e4:92:4f:ac:
                    73:03:bb:9c:ab:e8:b8:8f:5d:68:40:bf:78:70:5e:
                    54:7e:0e:a7:9b:a5:1b:cc:4b:f2:5c:08:97:06:0c:
                    52:57:31:73:4e:33:6f:1b:74:c5:b0:2f:fc:bd:20:
                    85:38:3e:d3:9c:46:79:98:95:5d:fd:02:1b:dd:e0:
                    8d:b6:b5:88:83:02:0c:41:06:a5:7d:61:9d:58:1f:
                    3a:69:ad:42:8a:b7:b4:ca:43:08:70:97:5e:37:49:
                    de:b3:ca:8b:89:2f:b7:b0:4f:96:93:5b:09:be:e0:
                    82:a3:42:64:4d:9c:cb:aa:28:27:e3:6d:0d:7a:cf:
                    72:ca:c4:c0:c5:e0:a6:b5:3b:0e:d7:73:a5:ba:c4:
                    c3:49:7b:4c:a7:c7:71:8c:fa:21:eb:9e:d6:b6:60:
                    a5:0e:07:79:78:2e:2d:fc:fe:ae:34:ee:61:f7:6e:
                    bc:23:6a:a0:8d:e4:f8:e4:6c:c6:f8:56:e7:20:b5:
                    8c:b8:e6:1a:45:73:3f:c4:41:5c:4d:67:58:b8:dd:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:93:AD:AC:97:12:DF:A6:C3:B5:72:90:55:D6:11:F9:00:2A:FE:36
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/GJOtrJcS36bDtXKQVdYR-QAq_jY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.242.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:87:6f:e8:2b:ac:9d:26:7d:e0:51:e9:77:e8:f1:66:ac:f1:
         a8:7e:91:71:03:a7:93:06:fb:66:0f:ee:0f:d4:3c:59:d0:12:
         fa:c0:8e:54:6a:ab:4d:8a:eb:65:3f:79:ff:16:58:cb:36:9b:
         fc:29:f6:3a:2f:71:32:40:f3:96:39:9e:94:c9:71:7d:79:6c:
         78:af:66:6b:03:b7:7d:12:35:71:94:1c:c3:88:64:f5:e4:51:
         fc:91:7b:2f:85:c5:87:5b:69:39:f3:36:10:81:1a:7c:2f:ac:
         9d:15:48:53:61:85:76:8d:f5:70:6d:9b:ac:82:f1:c0:3f:07:
         3e:a9:b6:10:2c:7d:37:8c:43:05:bb:00:47:f7:6a:d7:38:b0:
         37:79:26:c6:be:e8:e5:b0:b2:30:42:b1:1e:c6:d8:94:f8:57:
         3c:a2:dd:5f:44:cc:09:4c:c5:00:06:10:21:27:91:bb:23:ac:
         0f:28:91:e4:19:a9:e5:21:2a:af:6d:28:bd:ba:20:56:8f:e8:
         f5:d6:9e:19:8a:76:0b:0e:ad:1a:5f:33:46:d5:d0:60:8a:7e:
         9a:01:49:9b:4d:3a:8b:9e:d1:da:80:0b:1b:d8:41:df:bd:30:
         0c:5f:d2:ce:24:49:22:7e:0b:f7:40:31:85:49:03:c0:fb:4e:
         ca:c2:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 15:27:54 2025 by rpki-client