Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Ky5dY3rmXBVmC8hBiAbfSX-OaAU.roa
File:                     Ky5dY3rmXBVmC8hBiAbfSX-OaAU.roa (raw, json)
Hash identifier:          Iktcgjv0Hao61RR/A6O7rcW0mRjn2rNiTY/FLy+5g4s=
Subject key identifier:   2B:2E:5D:63:7A:E6:5C:15:66:0B:C8:41:88:06:DF:49:7F:8E:68:05
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       D2
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Ky5dY3rmXBVmC8hBiAbfSX-OaAU.roa
Signing time:             Thu 01 May 2025 01:29:09 +0000
ROA not before:           Thu 01 May 2025 01:29:09 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        118.108.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 18:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:09 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=2B2E5D637AE65C15660BC8418806DF497F8E6805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:f7:0f:a7:3c:d1:0f:b0:f2:98:bb:91:9a:
                    ff:b9:ac:d9:f1:90:45:a8:8d:6e:4a:0f:8c:f7:08:
                    de:16:df:c7:62:21:4b:4e:4f:b5:b0:99:f3:02:49:
                    4e:b1:ef:b7:94:e8:c2:62:69:77:3a:34:e8:81:a3:
                    9c:9d:ae:a8:88:01:dc:3e:1d:d5:de:bd:46:d2:3a:
                    e7:68:7e:d4:4e:32:75:bc:51:59:ce:7a:05:db:14:
                    65:4c:16:4d:31:db:41:56:d2:9b:bf:50:08:1b:12:
                    6c:9e:22:02:6b:3a:35:4c:60:0e:90:d2:24:1a:c3:
                    60:8b:81:db:2a:d4:3d:27:f9:2a:30:f2:0f:ee:a7:
                    db:ee:bd:f5:63:39:51:bc:52:63:62:28:8d:ab:6a:
                    48:6e:96:83:c3:9f:8e:8d:a3:1f:c0:c2:9a:87:4f:
                    49:bb:3e:66:34:bd:b4:11:02:1e:fa:06:d3:47:1f:
                    c1:f0:32:a8:7a:4c:62:df:76:3e:a6:5b:78:a3:cd:
                    05:1f:84:14:13:1e:a3:a2:3b:1e:ce:7b:ef:50:f7:
                    b6:c5:f3:e1:4b:db:30:ec:74:b8:35:10:be:23:26:
                    c3:e4:75:ff:f3:3c:20:68:4e:c9:e5:2c:e1:79:7f:
                    8f:03:c5:b8:43:50:bf:ab:7a:ae:cf:3c:ad:29:91:
                    99:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2E:5D:63:7A:E6:5C:15:66:0B:C8:41:88:06:DF:49:7F:8E:68:05
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Ky5dY3rmXBVmC8hBiAbfSX-OaAU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.108.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:d2:e0:ed:2b:3a:26:bf:6e:0b:79:9c:7a:bc:8c:db:ee:
         c1:42:97:08:e0:be:13:ad:a1:50:35:27:00:23:7c:48:dd:bf:
         1f:c1:4b:f9:49:f4:0b:28:50:51:cc:4a:07:a3:6b:d6:80:64:
         01:49:63:66:d2:a6:84:1e:8f:a3:3b:77:fa:9a:13:18:91:57:
         49:a5:df:e7:2b:76:8d:42:e5:de:95:ea:3b:97:28:a3:d5:e9:
         b8:0a:0c:59:ee:77:1c:d7:e9:a2:de:28:9e:79:d1:cd:9f:24:
         7b:8c:a6:f3:05:3e:6b:75:af:5b:c6:16:04:c1:10:58:a9:f3:
         27:86:f6:8e:42:d7:c5:78:45:62:b9:d3:cd:c0:83:28:11:ef:
         5f:91:b4:ca:62:2e:d2:56:8b:b7:79:f3:04:00:4d:54:ff:f6:
         88:7f:55:39:4b:b4:7d:74:35:2e:04:04:bb:be:3c:0f:72:d7:
         7e:fc:38:2c:80:c0:6c:21:33:75:b7:ce:ae:49:39:30:92:ed:
         a6:99:48:96:92:35:97:d1:63:ed:64:b5:c7:4e:02:d9:d5:d0:
         ce:da:04:7d:fd:5c:9e:dc:b4:b3:83:46:8e:08:17:ac:ef:3c:
         24:fe:b8:5b:74:81:96:4f:4b:04:e3:cf:98:cf:ed:19:a3:f4:
         9a:86:59:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:07:20 2025 by rpki-client