Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/y7D8R-1K72WeCaY_qOQPsQN_qso.roa
File:                     y7D8R-1K72WeCaY_qOQPsQN_qso.roa (raw, json)
Hash identifier:          gSo7rQVFj8qeLZV+X0yMSHd148qzRChlh4SzdV69JtY=
Subject key identifier:   CB:B0:FC:47:ED:4A:EF:65:9E:09:A6:3F:A8:E4:0F:B1:03:7F:AA:CA
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01A9
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/y7D8R-1K72WeCaY_qOQPsQN_qso.roa
Signing time:             Thu 01 May 2025 01:32:04 +0000
ROA not before:           Thu 01 May 2025 01:32:04 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     32787
IP address blocks:        210.148.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 21:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: May  1 01:32:04 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=CBB0FC47ED4AEF659E09A63FA8E40FB1037FAACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d7:27:94:b8:e3:ad:8f:d3:9f:75:9e:fd:22:
                    1e:00:7d:cc:5a:a2:92:f1:28:5d:d7:42:a1:a6:34:
                    54:7a:19:11:fb:6c:02:26:13:ab:32:b5:0f:32:87:
                    bd:0a:fd:43:55:aa:53:5f:ff:12:ba:93:61:c4:73:
                    9b:71:a6:4b:2f:09:ea:11:eb:3c:5b:28:1f:fe:7e:
                    28:91:da:4d:95:9c:fb:a7:78:7f:2a:45:fd:22:15:
                    1c:7a:52:8d:f7:72:17:64:dc:f4:07:12:1d:1c:a0:
                    f2:0e:3d:0c:91:31:22:5f:3f:9a:14:c1:aa:9c:a0:
                    68:af:9b:6d:7c:0c:16:8b:e4:31:6e:57:9d:b6:18:
                    62:66:08:ce:f0:fd:bc:1f:f6:f0:ce:dd:ca:3d:9b:
                    87:c5:11:eb:a5:d2:a7:4d:3c:13:c4:8a:dc:b2:32:
                    01:17:cc:2b:02:6f:43:07:71:c8:dc:00:73:0d:f3:
                    17:ea:7b:a8:b1:a1:55:f5:99:9c:0c:44:83:b8:38:
                    47:39:ce:78:da:90:09:1f:85:cd:41:eb:f9:23:2c:
                    58:35:e0:33:e9:89:b4:63:ad:6b:77:e9:72:cb:31:
                    d0:bd:00:d9:3a:01:36:43:8a:6e:43:b2:10:44:a9:
                    ef:61:06:3e:66:35:f7:47:e2:84:a2:19:f7:57:16:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B0:FC:47:ED:4A:EF:65:9E:09:A6:3F:A8:E4:0F:B1:03:7F:AA:CA
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/y7D8R-1K72WeCaY_qOQPsQN_qso.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ea:6b:84:45:dc:40:e4:57:a4:26:13:b3:7d:51:11:2a:0c:
         08:b9:e4:13:82:f3:a0:97:51:b1:d9:71:9c:14:85:0a:24:a1:
         b7:0d:f1:21:e1:d0:d8:7b:97:9e:b7:aa:ac:54:24:1b:8f:ab:
         87:e9:f6:3e:b5:eb:65:2c:94:ff:32:93:e3:1e:44:e4:6b:89:
         c8:91:a7:35:b1:95:de:aa:19:47:b3:2e:1d:21:cf:44:cd:f5:
         a5:34:86:76:e0:c6:02:35:1d:9f:7b:b4:19:e0:0d:50:4e:11:
         88:c9:33:42:40:53:a4:71:cd:72:2c:7b:0b:49:bc:1d:62:66:
         4d:9b:a2:21:a6:3f:3e:da:e7:3c:5a:1b:a4:7f:e4:c8:2f:2c:
         63:db:ec:7f:29:d0:bf:0b:16:e0:ab:22:65:e4:99:b6:76:8a:
         79:44:98:af:38:2d:40:6d:ad:96:69:bf:ae:22:02:ea:4d:4b:
         c9:3d:94:85:68:15:74:d6:6c:77:07:17:12:36:6e:e9:fd:41:
         dc:df:27:26:56:e6:f9:0f:a8:d6:65:d7:f3:21:22:14:ed:79:
         ab:07:f7:bc:b9:6a:60:15:f0:76:a0:37:41:f3:c9:1c:20:f3:
         1b:fa:2e:8a:50:84:96:64:2c:f5:26:be:10:c4:f7:7d:f0:12:
         49:7f:fc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 23:32:33 2025 by rpki-client