Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/esw5Xkj97Gne4v1RFaFDsXBBr4I.roa
File:                     esw5Xkj97Gne4v1RFaFDsXBBr4I.roa (raw, json)
Hash identifier:          V0xT/VSunF7jaHwJL+TK0CKJue5grlPG/cSX6S2QbVA=
Subject key identifier:   7A:CC:39:5E:48:FD:EC:69:DE:E2:FD:51:15:A1:43:B1:70:41:AF:82
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01AB
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/esw5Xkj97Gne4v1RFaFDsXBBr4I.roa
Signing time:             Thu 01 May 2025 01:32:05 +0000
ROA not before:           Thu 01 May 2025 01:32:05 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     32787
IP address blocks:        210.148.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 09:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: May  1 01:32:05 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=7ACC395E48FDEC69DEE2FD5115A143B17041AF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:5b:06:7a:5e:9d:49:d2:2b:b2:6f:e0:16:
                    b1:2a:5a:33:46:d8:86:d4:76:0e:4d:8c:6e:07:37:
                    2f:28:43:6d:df:86:83:79:15:7d:46:4a:db:61:7a:
                    b3:b5:ca:d0:7a:06:6e:ed:bf:b0:5f:ac:36:dd:b9:
                    85:4f:d5:b1:2a:9f:0c:4d:25:cb:7c:3e:26:76:89:
                    03:3f:7a:c9:e4:2d:f5:5b:80:1b:26:91:cf:ed:b3:
                    e4:bc:2c:75:76:02:3d:93:15:b3:66:dc:7f:09:6a:
                    9d:cf:fb:88:16:77:d1:07:fe:fd:8f:7e:80:16:d4:
                    e4:be:ba:ee:f9:de:97:55:0f:c4:10:36:bf:88:71:
                    8d:73:6a:e0:69:45:25:74:ea:7e:f6:24:c2:21:fc:
                    5b:ce:db:7d:37:14:d3:d6:63:99:5a:d7:af:e2:28:
                    fb:1a:12:f9:10:25:ae:6d:6b:4b:f1:16:8c:c7:22:
                    53:8c:fd:be:c9:a8:52:f2:65:e9:ba:68:85:46:9f:
                    4a:cc:cb:c5:fa:f6:70:dc:4d:49:98:f4:02:0a:68:
                    cb:77:c5:9f:7b:4e:f5:75:7d:60:65:23:23:2e:66:
                    4c:15:33:38:e2:f5:10:d5:f7:85:35:1e:96:5b:e2:
                    78:da:c0:e0:04:01:95:4d:38:d3:27:7d:6f:9c:dc:
                    76:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CC:39:5E:48:FD:EC:69:DE:E2:FD:51:15:A1:43:B1:70:41:AF:82
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/esw5Xkj97Gne4v1RFaFDsXBBr4I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:73:df:fe:ea:d3:9e:6c:06:33:c9:ad:76:17:66:25:df:4d:
         33:31:4e:fb:01:e3:3a:7d:93:51:a6:f9:01:ea:d6:fb:8a:03:
         6a:6f:6f:5e:fb:b3:1e:ab:af:34:d2:df:08:db:b0:96:2d:0f:
         15:27:d0:6f:c8:08:bb:8c:98:1a:fd:08:c3:7b:68:6e:cf:b8:
         72:ba:84:14:f8:2d:a7:ab:c2:03:c2:98:4d:19:c4:54:f8:a3:
         59:f4:b4:91:ac:f9:6b:25:b6:57:21:a1:15:16:22:e0:59:6c:
         ee:a9:f2:07:5d:6f:2e:88:4a:c0:e6:48:ca:98:51:6f:52:0c:
         54:d4:b6:e8:af:45:e1:9b:6c:11:a3:3c:48:fd:14:77:b5:e8:
         ad:c7:b9:cd:0f:58:43:5a:eb:ef:47:16:4a:b2:58:7c:cc:ed:
         82:6c:53:f4:1b:37:0f:cb:9e:ea:b2:b4:73:c2:55:98:b8:b8:
         ef:aa:f7:d5:bf:90:cc:b7:f8:23:97:7a:ab:00:55:7a:a8:59:
         c6:94:cc:9a:ef:23:ef:bd:a8:67:d9:56:5c:37:05:f7:08:19:
         1c:7f:40:9b:d2:e9:a1:24:fe:0c:6f:f7:62:eb:42:51:85:61:
         06:5f:f6:26:f7:e9:1a:48:c6:88:e5:05:a9:08:d6:12:45:49:
         04:a9:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:01:19 2025 by rpki-client