Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/wwum9wGaJKSoab9eGlOnVWFAXHU.roa
File:                     wwum9wGaJKSoab9eGlOnVWFAXHU.roa (raw, json)
Hash identifier:          CkBWI3+wJlXXtxhze/8+YJQ8wIUnBIGSb7Vm/n0BeX4=
Subject key identifier:   C3:0B:A6:F7:01:9A:24:A4:A8:69:BF:5E:1A:53:A7:55:61:40:5C:75
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       54
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/wwum9wGaJKSoab9eGlOnVWFAXHU.roa
Signing time:             Thu 01 May 2025 01:28:45 +0000
ROA not before:           Thu 01 May 2025 01:28:45 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     14618
IP address blocks:        27.131.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 14:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: May  1 01:28:45 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=C30BA6F7019A24A4A869BF5E1A53A75561405C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:d9:76:95:82:25:2d:c8:71:2a:65:9f:ba:
                    d9:b5:f1:57:4d:6a:d7:08:ce:f4:77:02:91:59:f6:
                    0f:f7:95:8a:74:f9:dc:35:fe:d2:04:83:08:a4:80:
                    b9:7b:07:2b:dd:c6:db:44:d0:01:56:ba:2d:13:c6:
                    0e:df:f9:73:fd:ec:59:9d:c5:49:f7:5a:97:a9:4a:
                    01:82:78:d7:f5:a0:6f:a6:6a:a9:22:f3:9d:eb:1b:
                    2e:b7:6b:6f:03:02:46:2e:18:49:a6:af:a6:a3:db:
                    0b:0d:14:29:d2:95:26:32:8d:e1:4e:4b:86:14:84:
                    71:3a:03:ed:f8:ee:f0:69:56:6d:42:0f:1e:19:1f:
                    df:24:8a:60:ed:91:98:9d:ff:25:fd:65:c7:5f:bd:
                    31:e6:cd:a5:46:76:3a:38:40:ca:95:ab:29:1b:df:
                    a6:a0:ba:57:d1:c6:7e:df:6d:f0:f1:c6:20:08:f3:
                    db:85:73:bd:bc:16:5c:14:06:bc:8c:d0:e4:21:e9:
                    b9:77:41:f9:c3:ba:0d:55:71:01:46:83:6e:bc:6d:
                    88:36:46:4f:5f:4f:e6:95:7f:37:e2:db:10:e7:75:
                    1f:58:d3:1d:2c:59:da:49:67:11:69:63:2c:23:04:
                    fe:2c:0f:65:57:1d:54:5e:cc:53:53:78:af:d1:ae:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0B:A6:F7:01:9A:24:A4:A8:69:BF:5E:1A:53:A7:55:61:40:5C:75
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/wwum9wGaJKSoab9eGlOnVWFAXHU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:2f:7f:68:17:b9:2d:17:44:54:75:d9:77:82:ab:e5:2c:
         25:a1:a7:bc:ca:6b:fc:9c:21:78:1f:ce:8b:14:49:71:5f:01:
         c0:e4:df:f7:d7:38:9f:64:39:a7:5c:77:7f:9e:5e:78:de:a7:
         9c:59:fe:76:e1:99:fd:f1:0c:51:fb:01:a1:73:b3:fc:a2:3c:
         63:09:9c:7d:5a:ba:73:73:82:f8:d6:bc:41:28:53:54:78:3d:
         61:11:84:fc:ae:41:8d:b4:b7:74:58:b8:65:d4:91:0a:0e:fe:
         19:f6:14:d4:e9:eb:08:a7:18:18:f9:74:46:28:d2:72:84:d8:
         ab:69:a7:d1:99:cc:07:f5:6a:85:32:ad:cb:98:31:4a:5e:48:
         73:9d:f6:97:5d:63:c5:4b:81:2b:6c:3e:35:3d:fe:b9:ba:50:
         9e:e4:f6:66:c5:ac:30:b1:89:ce:e1:90:38:04:5a:a1:b3:f4:
         e2:24:5c:11:dc:d4:93:5b:6b:60:ef:64:cc:01:f8:34:1a:a5:
         06:b2:50:16:ec:54:f8:6a:19:7d:af:9f:0a:73:7f:b4:b3:fe:
         e3:c4:4d:1c:eb:66:6d:cb:ef:6e:6c:22:ad:2d:8e:d8:e7:89:
         f3:4d:fb:a6:1d:1c:a2:40:fc:08:e4:51:ae:c0:09:e5:3c:27:
         13:ef:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 16:12:05 2025 by rpki-client