Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/__Po91YUrnh8hYP3AqbODRkoZ94.roa
File:                     __Po91YUrnh8hYP3AqbODRkoZ94.roa (raw, json)
Hash identifier:          rDrZVxpFDD0MBSfYXoly11cb7hVLfwIZ1lNXHJqgtFA=
Subject key identifier:   FF:F3:E8:F7:56:14:AE:78:7C:85:83:F7:02:A6:CE:0D:19:28:67:DE
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01FB
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/__Po91YUrnh8hYP3AqbODRkoZ94.roa
Signing time:             Sat 01 Mar 2025 01:31:00 +0000
ROA not before:           Sat 01 Mar 2025 01:31:00 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        27.114.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar  1 01:31:00 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=FFF3E8F75614AE787C8583F702A6CE0D192867DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:65:70:11:15:aa:5c:22:50:36:d5:93:e9:
                    32:74:5d:1b:c7:9e:fa:cf:a0:13:d8:81:df:2a:67:
                    15:d4:e6:d5:ee:df:36:62:13:82:ee:5c:08:bd:d0:
                    17:ba:0d:4f:8e:43:27:61:e1:9a:f8:72:29:71:2a:
                    24:cc:6d:df:c8:03:97:fa:77:7b:36:53:70:b8:19:
                    76:68:09:69:ea:4d:91:eb:fc:00:f4:24:e0:f4:0c:
                    31:b1:d1:ab:84:65:df:1b:2e:16:65:1f:f0:90:88:
                    9e:a0:44:e7:31:c4:00:93:e3:27:9e:20:b5:e5:c8:
                    ee:9a:4d:2e:4e:44:5a:a0:45:95:90:f7:73:cd:92:
                    64:84:71:30:e5:ac:8e:90:c2:ab:ef:18:a0:54:92:
                    28:94:92:29:0f:6a:5b:c6:97:2c:97:a3:d4:81:46:
                    31:71:6b:1e:02:6c:47:ac:77:c6:8e:08:4d:60:9c:
                    24:bf:eb:6c:7a:3e:ed:82:ce:02:a7:af:77:19:0e:
                    49:21:86:2d:5d:df:b8:2a:ea:6a:92:58:b5:f1:97:
                    e7:3c:e0:d1:9f:e4:28:f6:82:5b:66:bf:48:ce:8e:
                    d1:7b:20:39:01:fa:e6:fe:68:ae:40:92:b6:7f:00:
                    b5:87:80:ed:00:89:e4:ed:38:d3:3d:0b:e3:fb:a7:
                    4e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F3:E8:F7:56:14:AE:78:7C:85:83:F7:02:A6:CE:0D:19:28:67:DE
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/__Po91YUrnh8hYP3AqbODRkoZ94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.114.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d8:91:e8:8c:47:2c:3f:5e:15:e5:63:30:15:63:64:68:b2:54:
         ca:55:5b:36:64:7d:05:6d:c6:92:35:0f:1c:71:c0:70:ad:46:
         69:d0:8b:49:95:36:08:9a:fc:d6:94:67:cd:3d:0d:02:e9:59:
         9b:7f:fa:26:fc:1d:6c:b2:20:68:1a:5d:ac:a5:e2:44:b8:e8:
         64:14:d5:72:02:9f:75:30:ac:47:e4:c6:f4:ea:ab:35:9b:40:
         78:71:5a:a7:3c:fd:fc:92:a7:3c:b3:96:9b:66:82:ef:9e:b9:
         32:a5:1e:27:28:fe:4e:bc:fb:f8:91:4b:3a:9d:22:f7:34:69:
         d9:0b:28:b7:61:e1:31:c9:2d:6c:a3:ab:29:da:d4:50:9b:96:
         ab:65:3f:df:bb:05:ab:4b:1a:9c:d8:dd:49:dd:85:57:03:c0:
         4c:15:a2:8b:44:54:84:80:8f:03:1f:a7:52:e3:fb:cd:82:50:
         15:62:8f:06:0b:50:9e:8f:c0:0f:d8:c9:b4:10:6d:db:16:b1:
         bf:d0:a1:16:c0:5d:eb:86:18:f5:31:3a:2b:32:c2:80:87:fa:
         fb:8b:06:7c:08:4a:a0:a7:a8:75:26:91:99:ab:7f:67:d6:65:
         54:41:53:34:98:ed:94:99:6d:bf:d8:64:6b:c1:1b:e8:2b:6e:
         e4:5b:ad:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:14 2025 by rpki-client