Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/ye8satSyGKbjXq2wGWLRIbvyrEc.roa
File:                     ye8satSyGKbjXq2wGWLRIbvyrEc.roa (raw, json)
Hash identifier:          9CiQevt9usBDnkT78jHxbIPlR+8c8B0yukm147LMJbI=
Subject key identifier:   C9:EF:2C:6A:D4:B2:18:A6:E3:5E:AD:B0:19:62:D1:21:BB:F2:AC:47
Certificate issuer:       /CN=C3941FA221377E9A206102B848EBB972A8709DD5
Certificate serial:       5D
Authority key identifier: C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/ye8satSyGKbjXq2wGWLRIbvyrEc.roa
Signing time:             Fri 31 Jan 2025 01:30:44 +0000
ROA not before:           Fri 31 Jan 2025 01:30:44 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     55392
IP address blocks:        14.1.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3941FA221377E9A206102B848EBB972A8709DD5
        Validity
            Not Before: Jan 31 01:30:44 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=C9EF2C6AD4B218A6E35EADB01962D121BBF2AC47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:2a:4d:31:08:36:a2:44:e5:ff:6f:c0:30:
                    ff:43:3f:59:e4:9e:cb:30:7a:79:f8:b8:69:d8:fe:
                    e3:3a:ec:f8:1a:72:bc:f6:d1:f7:49:28:bd:ab:d1:
                    b5:c7:eb:b7:ae:93:98:a2:7d:f0:2b:2d:8b:96:3a:
                    e6:10:dd:06:84:a4:fe:9e:fe:24:b0:92:61:23:6c:
                    5a:31:ba:6b:98:6c:4a:4c:f5:4d:1d:39:de:16:08:
                    c6:7a:bb:41:67:1b:bb:4a:d9:82:83:65:81:86:70:
                    38:ef:f9:69:44:ad:62:ee:9f:59:38:c3:df:7b:90:
                    18:76:9b:4f:12:58:ac:48:6a:78:42:8a:da:cd:45:
                    31:1d:b4:ef:42:15:81:1e:0e:f8:da:5c:22:0d:4f:
                    47:2c:f1:5e:18:6e:3b:99:51:3e:59:52:2c:bb:51:
                    ed:9f:2c:ee:6a:1b:49:cb:d7:6e:62:f5:ca:08:6c:
                    31:84:7f:4e:ce:d0:37:5d:22:af:5d:79:55:dd:fd:
                    91:1c:4b:9f:25:53:75:d8:f9:83:17:a9:10:f0:1d:
                    24:18:de:de:c4:bf:44:ac:b2:91:64:2e:54:b2:ca:
                    f7:0a:05:54:f4:20:d1:b5:32:77:52:bb:7a:9e:24:
                    19:36:3f:ea:06:bb:43:9d:6f:96:0b:da:5a:bf:95:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EF:2C:6A:D4:B2:18:A6:E3:5E:AD:B0:19:62:D1:21:BB:F2:AC:47
            X509v3 Authority Key Identifier:
                keyid:C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/ye8satSyGKbjXq2wGWLRIbvyrEc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.1.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:53:0a:20:79:99:40:54:5c:15:c4:7f:16:2e:d6:d6:c0:
         7a:3c:56:84:b4:1f:bb:f5:36:4f:4c:3e:73:b3:90:59:6e:64:
         bc:c0:54:2a:5b:34:2c:dd:81:39:e2:b3:ce:8c:6e:e5:e6:2b:
         0c:70:c5:c4:ae:c5:c9:6a:08:87:2d:6d:9c:07:f7:56:f7:dd:
         b4:f8:d1:0d:4c:72:39:3e:89:56:18:c3:21:ee:84:e5:6e:bb:
         2e:1f:ab:e0:87:ba:dd:e5:7b:28:d2:e8:3a:57:40:50:ae:bd:
         3b:86:b4:8a:11:d5:af:f6:1f:17:d9:12:9d:d4:fd:5f:46:91:
         6e:b2:66:0f:a3:7c:ac:2e:7c:4b:ee:c2:1b:fa:54:be:5e:ca:
         fc:11:2d:3c:8f:97:8a:65:e8:75:d4:33:7e:ce:7a:17:33:c8:
         c7:aa:14:b3:d7:86:ca:b8:dd:d2:e4:e0:16:e4:86:80:0f:e2:
         e2:b9:c4:e0:a8:c9:df:1e:b7:e6:ae:0a:91:7a:c1:c8:a4:14:
         6f:cb:2c:93:f2:1d:03:33:0f:8a:00:8b:f8:64:ef:12:04:de:
         c5:59:d3:43:45:6a:b4:cd:d1:e9:9c:93:8d:fd:1e:f6:c3:55:
         21:6f:70:a1:74:ed:5c:98:cf:27:9a:fb:af:94:3d:ec:a8:ec:
         d8:dd:e7:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:58 2025 by rpki-client