Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/-Tm2eH07T15fThwWbWoAIMl2Hu8.roa
File:                     -Tm2eH07T15fThwWbWoAIMl2Hu8.roa (raw, json)
Hash identifier:          IBwz1Qj/Aik2ymWu9GTUMZ+fdFrjOBQQqj1MWnAmqP0=
Subject key identifier:   F9:39:B6:78:7D:3B:4F:5E:5F:4E:1C:16:6D:6A:00:20:C9:76:1E:EF
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       5B
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/-Tm2eH07T15fThwWbWoAIMl2Hu8.roa
Signing time:             Tue 01 Apr 2025 01:30:06 +0000
ROA not before:           Tue 01 Apr 2025 01:30:06 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     7660
IP address blocks:        203.181.194.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Apr  1 01:30:06 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=F939B6787D3B4F5E5F4E1C166D6A0020C9761EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a2:c0:99:9a:d2:14:31:d0:dc:ce:cd:ce:f1:
                    23:92:de:76:07:b8:de:1a:2c:f5:15:70:0d:8e:93:
                    a6:f9:d5:03:0e:7f:65:55:d1:9a:37:cc:68:25:ad:
                    bf:17:45:16:8f:d4:82:34:f4:41:68:72:fa:a9:9f:
                    a8:ad:c3:44:13:4b:23:e6:36:f5:f0:fa:03:98:04:
                    b6:3e:cf:e3:fe:10:7e:2c:9f:af:c6:9a:07:e0:73:
                    2a:80:33:7d:47:de:97:73:2e:03:d8:4a:7b:15:5e:
                    22:d6:a6:df:cf:b4:85:88:8d:6e:5e:13:30:09:bf:
                    67:68:11:b6:4f:80:88:c9:6e:bf:c3:53:be:e1:17:
                    e6:45:97:d4:c0:85:e1:d0:c3:e3:1c:35:fa:a1:ca:
                    27:14:52:fb:99:3c:8b:97:af:ba:b5:4b:a1:4f:07:
                    6d:56:af:83:8d:6f:09:96:b2:48:82:8d:f9:0f:b6:
                    94:7f:33:06:97:f5:b5:92:5b:6d:28:04:cd:22:12:
                    b5:f7:33:3e:eb:da:fe:d0:de:69:12:92:f9:3a:39:
                    01:68:c4:b0:2e:9e:20:7f:69:1a:f1:d8:24:78:9c:
                    4b:92:17:b6:92:c1:37:87:f8:a4:88:ed:21:6e:89:
                    63:29:aa:0f:7c:93:0f:35:2d:fb:2c:42:ac:a1:bc:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:B6:78:7D:3B:4F:5E:5F:4E:1C:16:6D:6A:00:20:C9:76:1E:EF
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/-Tm2eH07T15fThwWbWoAIMl2Hu8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:c8:41:20:31:e1:c1:ac:4c:4f:67:a4:19:16:2a:f2:19:
         1f:de:c2:bf:2d:81:b7:7a:ef:bf:4a:fe:5b:86:e7:09:13:6c:
         b4:22:0a:a2:00:9f:ec:d3:1c:93:5c:65:85:10:97:fc:cd:23:
         21:e9:19:cb:c7:b6:c7:d4:e3:e4:95:e5:56:f0:7c:18:21:97:
         f4:32:b3:41:dc:56:93:59:53:68:0e:fa:f9:9f:ed:f7:7c:c4:
         4f:7d:83:75:6e:5e:7b:ad:b8:e4:07:80:80:e1:2d:f4:6a:10:
         97:d1:f4:ff:65:5a:00:59:ff:94:d3:4a:d7:4e:91:69:5c:70:
         19:fe:01:78:80:1f:19:87:e3:1c:be:9e:a9:9d:ca:7c:60:d4:
         24:e3:47:f7:a5:d6:f1:35:6f:d8:80:cb:6d:22:61:aa:8a:1f:
         ba:ff:18:2f:4f:c6:c9:94:79:3c:13:2d:9d:27:71:d4:09:f8:
         26:5b:15:bb:b0:12:e6:73:b9:89:01:2d:cb:b7:a8:4b:fd:fd:
         6a:42:0e:c6:3a:df:3e:31:90:07:46:3f:a2:e5:db:8a:6e:be:
         b1:d2:42:ad:29:13:28:7f:95:c8:4f:5c:cc:8a:6e:38:75:6d:
         77:00:76:36:4d:5a:49:b7:c2:c6:d7:5d:5a:99:fa:f1:b9:22:
         ca:0c:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:21 2025 by rpki-client