Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/tXziTToM6n3H8YdoTde8uhYU9ew.roa
File:                     tXziTToM6n3H8YdoTde8uhYU9ew.roa (raw, json)
Hash identifier:          pk96cgXvFuvJHQgeAW+/NCTA14zYOSNsfURjwJ0b81k=
Subject key identifier:   B5:7C:E2:4D:3A:0C:EA:7D:C7:F1:87:68:4D:D7:BC:BA:16:14:F5:EC
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01A7
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tXziTToM6n3H8YdoTde8uhYU9ew.roa
Signing time:             Thu 01 May 2025 01:32:03 +0000
ROA not before:           Thu 01 May 2025 01:32:03 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2497
IP address blocks:        163.140.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 02:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: May  1 01:32:03 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B57CE24D3A0CEA7DC7F187684DD7BCBA1614F5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:65:6c:28:98:03:cf:8c:d6:52:27:01:db:55:
                    9e:ff:38:d3:8b:d7:d0:04:10:6c:82:66:9b:a9:a8:
                    a8:23:39:e4:d4:05:05:12:0b:c0:58:e2:50:3f:e7:
                    c7:a6:d5:b0:38:40:d0:21:b2:0e:55:9a:ac:c8:7d:
                    50:cc:01:9c:3e:72:9a:6c:ad:03:db:9e:ee:ca:df:
                    78:ad:7c:86:bf:3d:a0:33:3a:af:89:92:e0:95:77:
                    f7:4f:1c:97:9b:60:08:8b:87:2c:0b:63:e3:bd:4c:
                    6c:53:1a:3f:d9:70:81:ff:3d:b6:0d:8b:93:5a:4c:
                    43:47:de:55:41:c1:b2:0b:32:85:7d:9b:61:c9:5f:
                    ad:f2:b2:28:58:50:af:7f:01:94:d2:9d:89:b1:38:
                    a0:99:74:2d:04:57:bc:e2:d8:88:aa:81:5f:30:4c:
                    91:0f:0d:43:34:6c:75:fc:7d:44:74:96:b8:a6:60:
                    d3:10:f2:5e:51:e6:14:82:fe:f7:2d:46:5b:6e:fe:
                    67:a2:a0:30:fb:e1:d9:ba:e7:4e:c3:0f:6a:6b:83:
                    05:c7:7f:c2:a4:ba:89:7c:70:31:26:f9:e6:07:90:
                    ec:2c:89:95:e2:b5:0c:03:a9:af:58:c6:33:95:5e:
                    57:15:5e:26:e9:c9:e4:17:42:85:72:85:b2:61:fa:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7C:E2:4D:3A:0C:EA:7D:C7:F1:87:68:4D:D7:BC:BA:16:14:F5:EC
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tXziTToM6n3H8YdoTde8uhYU9ew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:10:e4:5f:05:76:88:a2:f4:ba:83:a7:b8:2d:32:52:11:6b:
         03:5d:b1:7c:80:6d:88:6e:46:d7:48:4d:cc:ac:d2:b0:68:f7:
         61:4a:ef:21:be:1e:86:4b:a8:ee:fe:f7:a7:2f:33:5d:eb:35:
         0f:99:82:b5:96:e9:9d:c3:db:34:7f:87:18:c6:c9:e9:41:0f:
         b0:d5:d1:13:d9:08:9b:2a:8f:70:fe:ee:94:82:5c:cf:61:b0:
         39:41:bb:85:3d:10:f9:18:43:0d:50:35:42:72:72:1d:1b:fd:
         6c:f6:36:91:4a:43:df:2f:fe:da:f1:b9:34:58:ee:33:68:61:
         ab:85:36:fd:f7:25:f9:0b:5e:2f:1d:7f:e1:58:53:a3:f6:33:
         06:07:5b:b9:d6:dc:79:cf:21:bf:21:53:7a:27:54:06:47:08:
         ae:46:ab:4b:10:6c:43:67:31:a5:e6:60:07:ee:a7:90:64:95:
         9e:af:c6:27:36:25:45:9b:2d:a6:8d:2b:34:78:7d:19:37:a2:
         d4:ac:d3:93:f9:84:f0:f9:c9:b1:4f:73:69:0a:46:c6:b6:7a:
         c2:7c:0d:1c:db:c7:11:cb:d3:43:9e:0e:ab:49:9e:19:06:cc:
         f9:47:73:4c:5a:f0:9e:b6:75:c9:af:67:f3:30:c7:a9:0f:98:
         b6:35:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:53:48 2025 by rpki-client