Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Cp4zJGPc1UWR14epMl5rufLTZs8.roa
File:                     Cp4zJGPc1UWR14epMl5rufLTZs8.roa (raw, json)
Hash identifier:          6lQMiirMd3CC8ig+8syO9rWgmJr91j2z0BdFWMirhyE=
Subject key identifier:   0A:9E:33:24:63:DC:D5:45:91:D7:87:A9:32:5E:6B:B9:F2:D3:66:CF
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       DF
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Cp4zJGPc1UWR14epMl5rufLTZs8.roa
Signing time:             Thu 01 May 2025 01:29:15 +0000
ROA not before:           Thu 01 May 2025 01:29:15 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        220.102.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 14:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:15 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=0A9E332463DCD54591D787A9325E6BB9F2D366CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:2b:70:99:78:25:56:24:ca:49:32:d5:b0:
                    b0:99:aa:d4:3a:74:f8:28:f5:7d:2d:a6:4a:10:9e:
                    ac:04:ec:ef:3a:16:7f:cd:17:27:d7:02:ac:40:e3:
                    51:c8:0c:60:df:1c:4b:73:bf:7f:83:ef:fd:ab:e3:
                    de:9c:d0:36:4a:53:e2:c2:dd:38:9a:38:ea:51:62:
                    a4:a6:8a:9b:b3:9d:18:54:7c:82:d6:10:8b:e8:ef:
                    9d:5d:c2:ed:df:10:03:51:b9:ac:08:49:6c:c1:d1:
                    4f:c4:60:7a:c9:0e:6d:fa:38:25:7c:93:f7:f6:d6:
                    eb:09:84:51:99:44:77:e2:bd:ad:c6:52:db:c6:20:
                    d8:70:56:c7:36:44:f8:0d:a1:25:6b:39:e1:17:cd:
                    dc:d7:9f:78:41:17:02:4f:2a:91:f4:ed:1d:0a:48:
                    52:2a:f5:04:2a:33:6a:87:95:5f:e7:ce:68:e7:49:
                    c8:c8:9a:74:a4:97:37:b1:ae:00:9f:f9:c9:c6:0c:
                    34:b1:bb:66:c9:b5:5c:34:77:2f:d4:31:7f:eb:cd:
                    45:cc:3c:59:ec:89:d2:54:6f:0b:a1:dd:5f:bb:a4:
                    08:8b:d1:4c:81:d5:81:f2:71:bb:d8:73:63:4a:8a:
                    ab:4f:60:0d:df:35:11:85:95:db:db:6e:96:b4:c9:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9E:33:24:63:DC:D5:45:91:D7:87:A9:32:5E:6B:B9:F2:D3:66:CF
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Cp4zJGPc1UWR14epMl5rufLTZs8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:cf:96:42:ab:07:a6:6f:94:6f:c4:ce:84:98:b5:ab:bc:84:
         88:ef:61:71:22:87:3c:6b:69:8d:73:89:ad:82:60:be:42:97:
         36:0a:63:a6:43:31:18:6c:0c:61:f8:04:db:1c:e1:42:89:97:
         ec:45:b3:fb:d9:a9:99:d3:9e:78:bd:ee:8d:54:1d:bd:f3:92:
         2a:12:22:2f:e7:29:9b:c7:55:34:9e:22:a4:71:04:68:84:51:
         8e:4f:a7:de:1a:05:14:25:bc:33:1a:0e:48:94:3c:21:90:ef:
         0f:43:eb:8f:0f:c3:32:7a:5b:78:0d:d9:77:97:23:2f:ad:de:
         49:4e:6b:0d:fe:66:74:06:27:ce:a5:5f:bb:29:c5:a7:7c:93:
         61:84:48:be:fa:2e:10:97:fd:1e:77:52:c6:ed:ce:60:76:36:
         e9:d6:d9:5d:ee:52:db:91:b2:39:38:0e:8e:5f:5b:1f:70:02:
         11:02:b2:55:ca:a7:c5:99:72:1a:c1:03:94:24:09:c3:a4:7d:
         8a:6a:6f:c3:6b:86:c5:57:8d:8f:1f:25:58:7a:67:a5:b6:e9:
         56:a7:49:e2:1a:d6:46:d7:61:41:8a:08:c2:ca:95:62:2d:3b:
         32:95:bd:82:3d:75:0a:d2:59:d9:f4:ee:a6:9a:4a:79:b2:a6:
         a3:cf:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:18:25 2025 by rpki-client