Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/q9yRQUM0edZoNW5YUBHYyA9qDUw.roa
File:                     q9yRQUM0edZoNW5YUBHYyA9qDUw.roa (raw, json)
Hash identifier:          3mwoirVv7V9P8u/Q2aqzPaznKaEy/x0/OPb5Mi13j9M=
Subject key identifier:   AB:DC:91:41:43:34:79:D6:68:35:6E:58:50:11:D8:C8:0F:6A:0D:4C
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       D6
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/q9yRQUM0edZoNW5YUBHYyA9qDUw.roa
Signing time:             Thu 01 May 2025 01:29:10 +0000
ROA not before:           Thu 01 May 2025 01:29:10 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        218.227.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 06:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:10 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=ABDC9141433479D668356E585011D8C80F6A0D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:d3:2d:ab:08:51:b8:0a:8c:09:f8:53:f2:
                    1e:3e:dd:f2:02:cc:46:3b:38:2f:a1:33:67:10:f4:
                    e3:8d:ce:e1:10:c5:aa:75:66:97:0e:e1:f2:da:90:
                    53:26:c3:5b:11:cd:05:88:94:73:ac:b5:c1:21:d4:
                    73:97:a7:59:37:d2:96:e7:ec:1b:1d:73:0c:53:c0:
                    9f:f4:55:86:ff:5e:24:bb:bc:17:df:32:c7:67:2b:
                    34:28:a5:d0:6a:74:53:e2:28:12:e9:d2:d4:2f:26:
                    fb:35:65:17:c5:20:48:23:6d:5c:3b:94:79:de:b2:
                    39:31:16:cc:8e:48:51:83:21:90:54:8c:78:f9:90:
                    9d:e5:7c:be:7a:2b:66:9c:7e:91:8b:5e:81:ce:09:
                    f6:77:f6:3d:76:bd:52:00:6c:d8:88:07:1f:8c:2f:
                    fc:d2:c1:5c:a1:f1:76:a2:30:a8:2f:7a:dc:0e:f2:
                    3b:61:9c:d3:c5:33:94:3d:c9:00:48:86:df:b0:f3:
                    e6:9e:11:17:e4:d0:cc:d7:66:36:5a:2c:2f:68:5f:
                    84:41:b0:d2:50:85:00:20:55:27:91:10:81:86:2b:
                    44:7f:36:71:4a:24:51:6e:32:09:a2:9d:01:9c:24:
                    d9:5b:af:dd:58:30:34:44:b5:22:bc:f0:6f:3a:0e:
                    80:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DC:91:41:43:34:79:D6:68:35:6E:58:50:11:D8:C8:0F:6A:0D:4C
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/q9yRQUM0edZoNW5YUBHYyA9qDUw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:ea:fe:5f:d0:41:37:9c:27:67:47:36:74:43:50:44:36:e0:
         d9:a7:52:69:c6:d5:46:be:90:15:11:1b:bd:02:9f:4d:2e:58:
         b7:86:59:e1:d4:38:03:48:bb:b3:ee:51:37:a8:00:9e:8b:b7:
         0d:24:0e:23:97:97:5c:d8:3d:21:76:f9:af:a0:5f:b6:15:8d:
         cd:1e:13:73:01:91:fc:1f:c6:8c:a2:82:bd:34:40:ba:28:76:
         5d:23:26:16:df:52:03:2a:57:ac:eb:cb:1e:a6:31:b9:e7:f9:
         13:fb:db:a6:d2:1c:9a:87:53:df:37:48:32:ec:e1:7f:0d:35:
         52:1b:c1:a9:9d:2f:c4:ea:f6:12:a4:5e:8c:e2:6e:df:73:2c:
         b3:56:70:cc:2d:8d:01:58:95:18:fa:2c:3f:00:39:b0:f7:31:
         b0:82:8c:a1:d5:04:c0:fa:5d:2a:d6:b8:79:d6:43:2c:5e:e4:
         50:51:87:e7:24:60:6b:4f:2e:cb:af:4a:9d:ed:3e:49:54:d3:
         bb:4c:e8:d7:4b:c6:e9:2d:25:5a:f3:f5:d7:4b:54:7f:9a:77:
         15:d1:94:b7:75:3d:45:96:21:79:3d:42:b3:54:49:d7:9d:6d:
         71:6b:1b:a1:e1:a3:e1:1b:18:dc:11:84:82:99:54:65:de:62:
         85:64:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 09:42:41 2025 by rpki-client