Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/QPCz49nIDTj5AxfojpKdxYRNX2U.roa
File:                     QPCz49nIDTj5AxfojpKdxYRNX2U.roa (raw, json)
Hash identifier:          GZfZd4tAMQfzfiO1N/UuZdEAz/ydA1QQJBeBDtjXCQI=
Subject key identifier:   40:F0:B3:E3:D9:C8:0D:38:F9:03:17:E8:8E:92:9D:C5:84:4D:5F:65
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       DD
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/QPCz49nIDTj5AxfojpKdxYRNX2U.roa
Signing time:             Thu 01 May 2025 01:29:14 +0000
ROA not before:           Thu 01 May 2025 01:29:14 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        27.127.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 20:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:14 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=40F0B3E3D9C80D38F90317E88E929DC5844D5F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:0a:57:8e:30:f5:18:69:fd:c5:6e:01:30:
                    04:14:fa:ba:2e:03:e0:99:6f:84:25:18:d6:b7:49:
                    6d:67:8b:f7:11:2f:e3:15:47:a2:28:16:fe:7f:85:
                    59:4f:a2:5d:f4:cf:2a:96:c0:f7:12:6a:2e:1d:c2:
                    e7:7b:bb:be:f6:8b:48:7f:0c:ec:c8:f7:09:2a:54:
                    09:18:ed:50:75:f2:38:ba:bb:62:1d:b7:c9:5e:99:
                    5b:a2:f7:ee:10:be:c5:7b:3b:5e:29:cf:67:82:5f:
                    ec:4e:78:a0:55:e0:27:44:e2:cf:ab:ff:63:fb:4d:
                    15:40:d6:e8:e1:92:b7:f4:7f:d8:b7:40:52:dd:db:
                    f9:48:90:22:1f:b9:f8:8c:3e:f9:86:e1:a5:5e:7a:
                    5e:f9:c4:72:90:1f:13:e6:c5:c9:6f:25:fe:c3:9d:
                    cb:31:2b:f1:88:21:0f:20:17:a9:27:bc:35:73:5f:
                    68:d0:4a:a9:3f:76:15:ab:86:cd:23:2e:31:fb:9c:
                    82:cb:67:3f:5d:04:db:94:0f:02:cc:53:f9:c0:3f:
                    1e:aa:22:82:6a:5d:c6:11:94:d0:57:3f:a3:1b:a4:
                    19:4f:8a:15:3f:9c:80:6b:5a:18:30:be:e7:39:31:
                    e3:70:e9:81:0a:1e:b6:14:36:2b:13:d9:fb:08:87:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F0:B3:E3:D9:C8:0D:38:F9:03:17:E8:8E:92:9D:C5:84:4D:5F:65
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/QPCz49nIDTj5AxfojpKdxYRNX2U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         be:45:01:64:7e:34:df:7e:50:70:54:93:df:6b:2e:3a:fb:63:
         7c:6e:d5:7f:d4:1f:73:92:06:7f:cf:a7:42:d4:4d:35:81:cb:
         03:c2:1d:8d:f9:32:a1:6a:04:f0:31:75:7c:e2:69:dd:38:35:
         f6:f9:00:a8:a3:cd:17:d6:a5:27:81:26:16:60:2b:d8:49:2f:
         b0:1c:d2:e0:3a:b9:5d:18:0d:e4:52:ff:b3:60:87:0a:06:b8:
         6a:90:be:ba:18:73:24:7e:63:4c:73:6c:ea:a1:60:2f:a2:25:
         b6:5f:8a:d5:17:ca:99:73:5e:4b:10:9e:eb:a9:ae:d7:92:5f:
         10:b1:3e:8b:26:63:e7:0b:1f:68:64:9b:2c:93:58:88:39:9f:
         6e:b5:cc:57:a2:2a:fa:8b:d0:9f:69:3b:cf:46:ea:5f:a2:a1:
         29:c0:fa:ad:f8:ea:8d:2f:54:49:44:94:d1:be:8c:6a:a5:fd:
         56:fe:49:85:ef:86:17:20:23:ff:70:11:fa:81:c3:43:9a:a8:
         57:e5:0f:0f:65:45:7d:c9:a7:9b:a6:5d:5a:d5:ec:29:19:d6:
         2f:78:3b:90:8b:5a:7c:87:52:88:d9:7d:73:ca:5b:62:9f:62:
         07:23:a1:9a:6f:26:1c:ca:28:41:77:18:63:c2:79:f0:ae:98:
         0a:ea:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 22:43:17 2025 by rpki-client