Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/vxiw72qJLhOZWd4axelngyu2BMs.roa
File:                     vxiw72qJLhOZWd4axelngyu2BMs.roa (raw, json)
Hash identifier:          cWyZP78E8QjkwpLE90bWmmtG3kW6i8AXs2mNvKYd69g=
Subject key identifier:   BF:18:B0:EF:6A:89:2E:13:99:59:DE:1A:C5:E9:67:83:2B:B6:04:CB
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       74
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/vxiw72qJLhOZWd4axelngyu2BMs.roa
Signing time:             Tue 01 Apr 2025 01:29:46 +0000
ROA not before:           Tue 01 Apr 2025 01:29:46 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     55392
IP address blocks:        217.178.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Apr  1 01:29:46 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=BF18B0EF6A892E139959DE1AC5E967832BB604CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:a1:b3:25:65:b1:5f:1c:0b:03:e9:98:a2:
                    28:e3:dc:1a:c3:1f:4b:f9:17:44:cf:30:8e:90:46:
                    a0:26:af:82:bc:3a:4f:69:e1:fb:37:40:60:1a:a6:
                    32:4b:ca:e1:69:45:86:cf:47:4c:46:5d:ca:18:a3:
                    c4:b7:51:9d:63:81:aa:54:de:e4:65:b1:01:58:c8:
                    5b:9c:d8:96:7a:c2:56:a0:65:25:5c:b2:69:f4:ed:
                    de:8f:18:c4:04:59:75:10:bd:08:57:05:68:80:c9:
                    cc:73:21:62:fb:b4:fa:a2:66:23:f5:34:52:a5:bc:
                    55:4a:fe:1f:f2:7c:ff:af:48:49:e1:6e:f2:24:df:
                    d7:91:15:c5:93:04:a9:15:54:70:55:e8:bd:b4:ab:
                    b1:e2:81:8c:f9:94:57:68:c2:64:f0:13:91:f2:7e:
                    af:80:e3:ea:95:49:0d:2d:94:80:c0:7c:e6:b5:31:
                    0c:98:31:ca:52:92:02:8f:bc:f5:e2:b0:f5:1f:f3:
                    b9:72:03:d6:d8:d3:a0:28:96:2d:3e:94:9e:57:36:
                    87:76:51:02:1f:cf:2d:40:74:d0:57:bb:a8:5e:5c:
                    90:31:e3:2a:db:69:98:63:30:a9:7b:6b:ca:10:59:
                    b5:e5:0c:ed:9f:f8:e4:92:4a:b1:37:bf:c7:ba:e2:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:18:B0:EF:6A:89:2E:13:99:59:DE:1A:C5:E9:67:83:2B:B6:04:CB
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/vxiw72qJLhOZWd4axelngyu2BMs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:2a:8d:67:c9:97:29:db:b0:b5:85:3c:d6:10:1a:cd:8c:16:
         5a:03:40:31:98:c4:bb:9e:a5:89:9a:15:59:fe:d4:0e:52:67:
         1d:f6:a1:8d:0e:7b:b3:09:1a:b6:f3:bc:4f:da:41:f5:5a:ae:
         6e:79:d2:4b:8a:05:99:b1:6a:31:2c:1b:fd:c0:0c:14:91:ae:
         01:fb:1d:40:f1:a5:c5:19:30:f2:57:d7:2d:15:00:4b:77:d7:
         6a:19:86:e7:e4:8f:87:96:f7:26:8b:7f:34:98:80:30:37:3c:
         53:3b:4e:5e:24:38:96:e9:f2:b6:f5:89:e6:de:aa:82:4f:46:
         a8:ba:71:f0:ac:9b:45:15:df:05:7a:23:5d:9f:d6:1a:70:85:
         e2:51:08:d1:fe:e0:6b:bd:b1:89:57:a4:fc:40:99:b3:9a:21:
         47:79:94:af:d2:ba:01:ad:fd:c6:81:0c:ff:77:1b:15:b3:d7:
         41:fc:4f:ae:ac:67:49:ef:c1:09:a7:83:92:87:90:1b:dd:3f:
         25:7c:4e:a2:e6:58:86:5f:2c:71:16:0c:40:dc:f9:37:1d:7a:
         25:79:a1:95:4c:47:cc:4e:48:9c:10:f9:98:5b:c3:b8:93:7d:
         4f:b8:2c:b1:9d:34:2d:d0:53:2f:c9:18:0c:60:be:5a:23:76:
         88:96:7a:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:14 2025 by rpki-client