Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/YbyB3t4o75aM3jxL-HSQF-7gcb8.roa
File:                     YbyB3t4o75aM3jxL-HSQF-7gcb8.roa (raw, json)
Hash identifier:          U/QEZxNfN5MTYeY1lkPnmCE0SgJ5fknWAAaQhRLPXAw=
Subject key identifier:   61:BC:81:DE:DE:28:EF:96:8C:DE:3C:4B:F8:74:90:17:EE:E0:71:BF
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       010E
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/YbyB3t4o75aM3jxL-HSQF-7gcb8.roa
Signing time:             Thu 01 May 2025 01:32:15 +0000
ROA not before:           Thu 01 May 2025 01:32:15 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        153.121.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May  1 01:32:15 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=61BC81DEDE28EF968CDE3C4BF8749017EEE071BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:55:8f:f3:3d:46:32:a7:28:50:48:42:91:81:
                    20:e6:45:0a:a1:39:84:b2:b2:4b:58:db:c2:61:d7:
                    b9:df:e9:77:7e:02:04:f6:2d:d8:e6:0e:0c:c7:61:
                    5e:1d:68:49:bd:ec:03:c8:f8:47:39:b4:db:bf:25:
                    94:04:2d:ca:05:64:e8:46:aa:fc:92:50:ba:7b:83:
                    30:71:d5:fb:3f:d8:8d:27:50:74:a5:8f:95:87:e4:
                    b9:43:05:f3:20:50:fd:3b:9a:eb:2b:ea:cb:29:18:
                    51:e4:38:e8:98:8f:7f:18:cd:5b:20:a2:6b:71:f1:
                    15:dc:dc:6b:f2:b8:f4:da:7e:79:80:09:36:ee:4b:
                    9c:14:eb:31:b4:35:d1:a4:41:ba:d6:44:13:e8:8f:
                    c5:7d:dd:d4:d6:38:e6:b3:51:1d:31:be:c8:8a:f6:
                    ee:9c:1a:81:09:96:4a:5a:28:c8:eb:9c:47:96:61:
                    44:85:b4:eb:9f:21:e2:87:2c:ed:c9:e2:c9:fd:d3:
                    43:a3:d3:04:56:03:8d:be:f1:28:bf:5e:c7:cb:ae:
                    b7:33:82:c8:1d:b9:10:4b:1d:f7:bc:ff:3e:0f:65:
                    cb:a1:5b:ff:9e:ad:fe:8a:18:bc:8d:02:ea:ae:c7:
                    c7:75:68:d3:7a:21:e3:68:e3:5a:c4:dd:55:b7:aa:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BC:81:DE:DE:28:EF:96:8C:DE:3C:4B:F8:74:90:17:EE:E0:71:BF
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/YbyB3t4o75aM3jxL-HSQF-7gcb8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:8a:ec:f7:9c:72:a1:aa:b2:d3:fe:48:b2:d4:f3:bb:99:3e:
         12:ae:72:e7:ec:93:ab:63:fa:bf:d4:81:71:e2:c7:3d:db:61:
         70:f4:d4:4d:fc:8c:3c:39:04:b3:83:79:6e:87:f0:0b:15:19:
         ae:9a:f8:8b:c0:8d:9f:b9:3e:9a:82:16:0f:7d:cd:db:e0:42:
         ae:08:c3:f5:82:af:23:78:02:9d:b6:d5:54:48:9b:92:96:43:
         61:3e:29:37:43:d6:14:52:7f:2a:e6:63:24:87:39:9b:c4:06:
         ea:cb:c1:1a:40:39:6c:f3:71:db:c3:24:d8:de:66:45:03:be:
         6c:98:8c:fe:ae:44:3d:6f:04:a7:ae:4a:91:01:b5:27:31:2b:
         52:cb:84:32:69:f1:c0:bb:26:43:e6:16:5f:e8:43:83:af:e4:
         25:64:96:39:a0:fb:32:76:48:cf:69:b3:1a:b7:3a:d1:f8:1e:
         78:f8:05:e2:f9:09:fb:5e:3b:b0:58:2a:6a:27:ae:88:fb:eb:
         ab:82:70:c8:59:58:2e:27:cf:c7:fa:2f:4c:8f:78:22:0e:1b:
         26:a1:15:f6:63:40:de:54:8b:3d:de:5b:a0:cd:4b:cc:3d:cc:
         ca:2a:88:e9:8d:26:bb:f2:7a:17:36:38:3e:1a:42:68:93:2d:
         4f:c2:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:55:31 2025 by rpki-client