Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/rEFbOTFDcJCUrh2hQOz0DJ4M5Jk.roa
File:                     rEFbOTFDcJCUrh2hQOz0DJ4M5Jk.roa (raw, json)
Hash identifier:          LA8F4By+Y2U3g/EK1oLw1bWVrZdu9bZb1frXLCS0+R0=
Subject key identifier:   AC:41:5B:39:31:43:70:90:94:AE:1D:A1:40:EC:F4:0C:9E:0C:E4:99
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       E3
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/rEFbOTFDcJCUrh2hQOz0DJ4M5Jk.roa
Signing time:             Thu 01 May 2025 01:29:17 +0000
ROA not before:           Thu 01 May 2025 01:29:17 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        61.193.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 13:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:17 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=AC415B393143709094AE1DA140ECF40C9E0CE499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:07:11:92:dc:95:b7:3b:ab:88:aa:21:3d:
                    bc:60:7f:f2:b8:61:25:21:95:8c:b8:02:0c:91:af:
                    b4:d4:af:28:45:1b:71:91:26:2d:5e:6b:5a:13:47:
                    e5:1e:2e:a4:69:ba:80:9e:be:70:64:04:87:00:e2:
                    28:a1:83:e7:e8:56:b5:65:f6:ab:df:61:07:fd:df:
                    8c:ea:4e:f9:e0:00:5a:83:2f:d2:63:95:43:cb:bd:
                    f6:63:3c:d3:2b:20:06:fc:9e:e8:61:66:0e:2c:dc:
                    8f:2e:4d:b4:67:7e:b9:9f:fb:e4:f6:c9:94:b5:47:
                    fc:e3:30:24:ba:b4:14:31:b7:21:8f:d7:6b:55:d4:
                    3b:98:a5:47:24:43:f8:9c:03:9a:7e:9d:59:5e:4f:
                    c7:82:f4:3e:f3:23:00:8f:49:c6:ee:5c:31:2e:74:
                    95:ac:00:dd:c2:f5:be:71:e9:79:1e:06:34:19:37:
                    01:a4:ea:7a:bd:98:8c:69:b5:9d:f5:8a:4c:58:c0:
                    80:01:06:3a:89:59:3a:f6:4d:ef:77:42:ba:be:3a:
                    0c:48:ac:ad:75:57:97:49:60:1d:e9:81:0d:c7:1a:
                    f6:6d:a7:c3:a7:af:bb:9f:e7:05:e2:0e:31:9b:22:
                    ea:a9:85:2b:12:1a:93:cc:c3:49:bf:68:4a:93:4e:
                    20:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:41:5B:39:31:43:70:90:94:AE:1D:A1:40:EC:F4:0C:9E:0C:E4:99
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/rEFbOTFDcJCUrh2hQOz0DJ4M5Jk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.193.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8d:af:80:a4:7d:ce:1f:6d:62:9c:4d:a6:97:21:3b:6e:67:bd:
         ec:30:87:0a:73:93:8f:a6:d7:5b:68:65:2f:3a:ab:36:13:16:
         45:dd:a5:5c:20:67:95:66:e0:29:5b:0d:0e:6c:e4:f1:bb:51:
         fa:81:16:32:78:04:a5:a4:58:dd:82:d5:47:f8:c9:79:10:ad:
         bf:61:a9:f0:ba:9f:8f:08:ee:a7:22:37:39:4f:ac:b9:7f:00:
         b5:a5:87:52:71:57:ad:45:ef:6e:e2:06:af:b5:c3:b8:ef:55:
         2a:ff:be:0f:a1:af:a7:48:04:c3:c7:36:b2:9f:3e:93:eb:f8:
         ae:44:73:bd:50:d0:55:0a:5d:96:8c:ee:41:b3:8b:22:c5:42:
         01:7e:1d:93:67:26:2e:fa:72:bd:47:b4:cc:aa:3a:85:c6:ac:
         92:43:4b:48:72:09:13:49:6b:12:c5:6c:cd:53:60:c0:3c:25:
         cd:d4:1f:b1:e2:ff:81:e2:aa:d9:2c:75:bf:a3:8b:c4:40:e0:
         b1:03:29:dc:5d:0c:1b:39:9c:95:35:2b:96:a3:58:c4:ff:a4:
         24:5a:2b:34:37:75:3e:00:3e:37:24:75:6b:35:3f:9f:9e:e0:
         28:a5:21:92:75:c1:1a:22:6c:73:67:d1:c2:a1:ef:f5:e6:5a:
         01:0c:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:57:17 2025 by rpki-client