Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/u1IEEftpWOOVDWxs2G5vE0MkJ3c.roa
File:                     u1IEEftpWOOVDWxs2G5vE0MkJ3c.roa (raw, json)
Hash identifier:          I7c5o7GzsKioHzXn+N4W+Uy8Xt29h5CJod1EkvBmG70=
Subject key identifier:   BB:52:04:11:FB:69:58:E3:95:0D:6C:6C:D8:6E:6F:13:43:24:27:77
Certificate issuer:       /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial:       65
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/u1IEEftpWOOVDWxs2G5vE0MkJ3c.roa
Signing time:             Fri 31 Jan 2025 01:31:03 +0000
ROA not before:           Fri 31 Jan 2025 01:31:03 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7671
IP address blocks:        122.100.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
        Validity
            Not Before: Jan 31 01:31:03 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=BB520411FB6958E3950D6C6CD86E6F1343242777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:09:35:46:c5:b7:f8:a2:8d:5c:e6:eb:1c:dd:
                    8e:01:82:f5:81:58:6e:c8:62:f5:9b:47:a4:3d:b3:
                    14:03:c8:92:61:57:d5:44:61:d7:85:01:32:ba:fa:
                    13:16:57:7c:97:84:6b:56:e2:81:90:92:1d:f3:d4:
                    1e:1c:d7:1e:07:59:ac:0c:a5:71:13:5a:8e:0d:45:
                    89:0e:36:10:91:9e:9d:e7:f6:1d:3d:17:15:15:9c:
                    5a:92:63:89:11:41:8d:d7:3a:e4:9c:eb:1c:9b:95:
                    cd:3d:b0:83:31:4c:b2:5e:56:05:fb:0a:2a:ba:bd:
                    ee:88:05:4b:8a:4c:f1:5a:c6:73:0e:77:76:4e:fd:
                    1a:9b:e4:82:5d:4e:ad:ce:f3:52:50:76:89:d7:19:
                    d5:16:d5:84:a3:4e:a0:f5:fc:72:42:f4:8f:84:e4:
                    f0:d5:59:19:78:4f:9e:aa:58:09:20:c7:b2:c7:eb:
                    c9:a0:1d:86:67:a3:6e:16:2f:5d:d5:94:76:15:4d:
                    9e:7a:08:0f:f5:69:d5:64:cf:4d:a3:97:b4:3e:b3:
                    60:6d:c6:8d:51:d7:b9:19:29:e2:7c:29:2b:ea:fb:
                    6c:66:c3:38:32:72:49:03:76:bd:32:59:e1:34:3a:
                    11:dd:55:ab:3b:31:78:80:4a:8d:1d:ea:4a:da:5b:
                    ab:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:52:04:11:FB:69:58:E3:95:0D:6C:6C:D8:6E:6F:13:43:24:27:77
            X509v3 Authority Key Identifier:
                keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/u1IEEftpWOOVDWxs2G5vE0MkJ3c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:52:6f:7f:70:2e:78:fb:dc:db:67:11:6c:76:40:8d:e7:03:
         10:9d:79:c9:98:9a:6a:f2:53:8e:47:e7:ad:6d:54:9b:02:1b:
         0e:de:e7:b6:92:a2:e5:db:d8:78:48:9c:3e:0b:6c:ea:e6:5b:
         5f:92:7e:31:99:22:31:39:59:55:12:f4:a1:90:c9:72:2e:8e:
         54:b9:b0:47:5f:12:05:66:48:04:6c:1b:f8:51:bf:2e:c9:a6:
         d9:e5:0f:a4:97:e0:68:4a:6c:dc:f5:6c:5f:ee:a3:b6:21:af:
         d1:ef:8e:f5:df:b2:2d:52:db:ed:3e:c0:77:0b:bb:fc:8f:1a:
         93:f7:8c:60:8c:f0:87:a8:41:65:b0:b7:c2:34:80:ec:f3:1b:
         82:51:d4:91:c8:96:dc:b2:74:70:11:5a:ab:8c:66:0b:35:22:
         85:ff:7d:20:c7:23:4e:a6:60:aa:e9:1d:77:69:e9:30:52:9b:
         59:17:03:f6:61:29:78:f6:3d:9d:ef:e9:cd:3b:a3:0e:cc:27:
         a6:46:59:1e:f4:33:b7:db:3b:c7:3e:8f:8f:f1:ba:b6:15:2e:
         06:93:d9:b9:e6:9d:d6:91:d8:77:9b:15:c9:ec:cb:9e:01:32:
         b2:57:4f:f5:8c:da:fd:93:44:d1:6a:e2:46:a3:97:cc:75:73:
         c6:4c:2c:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:36 2025 by rpki-client