Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/m4HDDHgfw37Amlukb46Fsn19uoY.roa
File:                     m4HDDHgfw37Amlukb46Fsn19uoY.roa (raw, json)
Hash identifier:          7mXDrlcQIvGDAh3NwgNpAPHD6wevGrrc4beY4t/ZX3k=
Subject key identifier:   9B:81:C3:0C:78:1F:C3:7E:C0:9A:5B:A4:6F:8E:85:B2:7D:7D:BA:86
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       CB
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/m4HDDHgfw37Amlukb46Fsn19uoY.roa
Signing time:             Thu 01 May 2025 01:29:06 +0000
ROA not before:           Thu 01 May 2025 01:29:06 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        60.236.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 04:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:06 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=9B81C30C781FC37EC09A5BA46F8E85B27D7DBA86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:d9:07:9f:1b:65:3b:f4:1f:b1:1f:bf:d6:
                    41:5a:e4:79:e8:4a:91:ed:a6:11:ab:28:5b:ea:cb:
                    b6:f1:25:ee:45:13:c3:fa:c5:21:39:54:9c:2f:bb:
                    b9:73:bb:2a:8e:94:e0:4d:13:cd:32:a9:a4:ef:1c:
                    2a:e9:f1:18:e2:18:be:c1:0a:28:20:3e:ab:92:aa:
                    ee:84:6b:a3:28:71:4f:3b:2b:e6:36:7b:b9:76:bb:
                    64:b8:91:d8:89:83:7a:95:6e:ae:cd:e1:fc:2d:a2:
                    91:61:76:5e:bd:54:55:80:ac:cc:a1:a9:b2:f9:97:
                    01:7d:d2:95:a4:35:4f:eb:c4:8f:00:02:bf:0c:ed:
                    72:7a:e0:67:c4:c5:21:46:fd:72:5d:06:43:fc:29:
                    0c:44:ec:c0:9d:f6:e9:12:30:ab:fd:5a:ff:7a:ff:
                    64:9c:28:e9:ac:73:b0:46:94:d6:02:ae:95:69:60:
                    66:e4:78:c6:fc:58:ed:f9:83:3d:a0:2c:27:5d:76:
                    3c:c3:2e:11:30:83:73:7c:db:32:31:00:7d:38:e9:
                    f9:c1:61:5c:d9:1e:10:ff:90:ea:b9:0c:98:12:c5:
                    f3:d0:2d:9e:10:03:bc:1b:83:59:fd:c8:5e:a2:c7:
                    72:c1:39:8c:25:8f:9a:32:d3:26:86:78:0b:9a:44:
                    1f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:81:C3:0C:78:1F:C3:7E:C0:9A:5B:A4:6F:8E:85:B2:7D:7D:BA:86
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/m4HDDHgfw37Amlukb46Fsn19uoY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.236.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3d:dc:97:02:a6:69:0d:82:65:5b:17:cb:25:3d:ba:89:d7:bf:
         74:c1:d9:0f:38:e7:61:2e:0b:f4:b1:8c:0c:79:36:db:ee:27:
         c3:d1:7d:86:9d:5c:85:3f:ce:56:0b:c2:ac:9e:9d:fc:e7:30:
         c0:18:20:e6:51:39:a7:45:59:48:01:31:95:dc:8f:7a:7f:70:
         6a:b7:21:5d:57:82:27:7b:60:75:8b:f8:2e:91:63:5d:34:23:
         3d:cd:ad:d6:99:08:f0:43:d4:51:cf:b1:ab:95:64:7d:27:0d:
         c3:a1:93:ce:4e:ca:91:67:a7:12:be:c3:82:7a:af:5c:b4:70:
         2c:c4:ec:e3:90:b7:f5:7e:3a:37:11:29:f6:ec:c5:ce:75:c2:
         a1:af:a6:77:63:b4:11:cb:8c:eb:e9:ec:52:68:38:f7:ac:f3:
         76:d7:1a:c6:95:72:12:dc:d2:50:36:33:3b:aa:4f:f8:d9:55:
         fe:01:14:ab:77:1e:7a:c9:6b:6e:ac:4e:5a:16:45:6c:54:c5:
         af:17:76:72:27:8b:be:06:08:5a:2e:44:d8:41:32:88:d4:4d:
         80:06:82:71:5f:6f:dc:07:20:ec:d1:6e:44:4c:85:0e:e1:49:
         e2:07:bb:f8:7c:65:59:f7:bc:bc:9d:c3:d5:63:91:1c:f0:47:
         f7:f9:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 08:19:33 2025 by rpki-client