Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/jV4S1ue5xtVeKHRu18n5P2mFRGE.roa
File:                     jV4S1ue5xtVeKHRu18n5P2mFRGE.roa (raw, json)
Hash identifier:          Hu11gqMCiluV3eckeVsCNh0dvkO96dVassf4MYy0eeo=
Subject key identifier:   8D:5E:12:D6:E7:B9:C6:D5:5E:28:74:6E:D7:C9:F9:3F:69:85:44:61
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       55
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/jV4S1ue5xtVeKHRu18n5P2mFRGE.roa
Signing time:             Thu 01 May 2025 01:28:45 +0000
ROA not before:           Thu 01 May 2025 01:28:45 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     16509
IP address blocks:        27.131.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: May  1 01:28:45 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=8D5E12D6E7B9C6D55E28746ED7C9F93F69854461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:15:ff:58:e1:64:fb:1b:0a:ea:e9:ce:ea:
                    62:d0:cf:69:7d:36:19:99:9d:2f:d4:54:d0:50:ea:
                    e1:75:0c:81:6c:e8:8f:36:48:be:63:b9:14:90:78:
                    44:c1:20:c1:5c:c2:6f:f5:71:38:1a:8c:3b:a4:a4:
                    eb:0f:d5:4b:e0:6a:5b:98:3c:d0:c2:a7:9c:02:c3:
                    52:28:80:bb:4d:83:6a:af:47:1d:56:28:8f:f5:09:
                    38:a8:09:9c:10:fa:2f:56:36:61:1b:eb:90:da:cc:
                    58:64:de:79:e8:f4:e8:1b:b2:21:a5:3a:30:3b:6a:
                    fc:8b:67:e8:d9:23:cb:0a:20:3d:71:9c:ce:7d:c7:
                    46:d2:28:a4:d3:ca:f0:82:6c:c7:36:da:23:bc:4f:
                    26:a5:a9:96:f6:bb:62:17:cd:e4:4d:e2:ef:74:85:
                    e3:41:68:27:32:29:7e:c7:aa:ab:36:bc:14:cc:92:
                    dc:6a:f7:ea:e1:d0:f8:99:fe:cc:9b:aa:a4:02:3f:
                    14:5e:0d:96:b0:50:22:10:22:18:a1:c9:8e:f7:76:
                    8d:24:cc:db:8a:8d:4e:67:bc:7f:a8:22:66:35:d3:
                    dc:56:61:62:9d:a8:42:ff:12:59:6e:c5:56:8e:72:
                    24:65:f3:11:67:af:89:0a:0c:ea:09:62:c5:c8:82:
                    2e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5E:12:D6:E7:B9:C6:D5:5E:28:74:6E:D7:C9:F9:3F:69:85:44:61
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/jV4S1ue5xtVeKHRu18n5P2mFRGE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:81:43:cc:71:32:1d:6f:dd:cf:a2:32:e2:1b:41:3d:93:29:
         7d:ff:c6:44:45:19:16:96:f3:c3:f2:41:64:9c:ca:ef:d6:82:
         7b:22:8f:99:88:55:5c:a7:20:75:0f:0e:41:09:01:12:6c:cd:
         13:47:df:bb:6e:f0:cd:fb:8d:bc:e3:31:88:1d:f9:4a:e3:3c:
         dc:00:36:81:3c:91:fc:12:34:a4:81:69:7c:0f:74:a5:c7:43:
         b7:b3:32:3c:95:fe:ec:cb:40:b2:c1:4b:f4:7a:b0:71:ae:59:
         fd:e6:b9:6d:82:fe:3d:d0:ee:64:4d:6e:ea:37:8b:50:c0:3f:
         44:dd:73:26:2b:be:b9:6c:f4:f4:73:cd:7e:f7:6c:ef:3c:e6:
         ea:ae:94:c4:12:30:19:dd:05:fd:22:5e:44:bd:31:6f:33:35:
         1d:e9:37:22:ff:e9:ca:70:b8:bf:97:69:c4:5c:9e:23:e2:ea:
         e7:26:d8:a7:0f:85:f8:9d:56:1a:58:3d:f8:01:91:49:91:15:
         c8:dc:84:cd:c3:13:20:cd:37:03:14:eb:f1:c7:01:ed:a4:f2:
         6b:ae:ba:68:42:a0:52:26:48:f1:13:3d:fc:0c:c0:28:93:58:
         4c:fa:19:da:c3:9d:1f:86:9d:66:6e:4a:d2:52:1b:a7:ba:ed:
         41:91:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 17:59:19 2025 by rpki-client