Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/7j-7RSvXQhH39od7EJam5ncG0HI.roa
File:                     7j-7RSvXQhH39od7EJam5ncG0HI.roa (raw, json)
Hash identifier:          vpxFOabqPm8XgNXDw92WtRmJK86J2JMGgBeuTo52Obg=
Subject key identifier:   EE:3F:BB:45:2B:D7:42:11:F7:F6:87:7B:10:96:A6:E6:77:06:D0:72
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       33
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/7j-7RSvXQhH39od7EJam5ncG0HI.roa
Signing time:             Sat 01 Mar 2025 01:29:33 +0000
ROA not before:           Sat 01 Mar 2025 01:29:33 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     18071
IP address blocks:        133.184.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar  1 01:29:33 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=EE3FBB452BD74211F7F6877B1096A6E67706D072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:69:8e:fb:3b:fc:83:e9:be:3b:9d:bd:65:
                    de:f6:06:be:99:5f:bd:c2:5d:41:1f:e0:61:bf:b0:
                    87:00:23:5a:8c:35:f6:42:6e:23:15:51:04:6e:b3:
                    ce:6f:7e:c2:1e:c0:7e:ce:43:55:c9:f0:b5:a7:7f:
                    38:1f:94:9a:6a:04:04:75:8d:37:ed:85:52:8c:47:
                    3b:e5:56:71:8d:a9:c5:5e:1c:83:cd:2c:c1:41:7f:
                    1d:c1:fd:6b:4c:bc:c0:3d:63:b3:2f:a1:42:56:71:
                    f5:34:12:a6:fb:83:3d:c3:56:8a:41:37:b7:97:fa:
                    84:89:3d:06:93:35:3f:39:86:d2:4e:57:c4:8c:d8:
                    fd:0f:d2:96:44:60:46:7e:8e:01:bd:d1:98:8d:fc:
                    24:72:65:4d:c8:da:55:5c:60:83:c4:6a:d0:9a:65:
                    26:3b:9f:53:46:78:4a:f9:23:bd:77:a2:96:6b:d9:
                    b0:88:8b:25:52:fa:82:44:2d:ff:8b:59:0b:b7:ce:
                    b6:26:ab:82:08:4e:27:45:a5:c7:e2:d7:62:f6:ae:
                    5c:d2:97:2c:24:47:eb:b8:76:0a:53:78:b8:d5:bc:
                    01:fb:64:4d:2d:a9:7c:4b:c7:ed:a8:8f:c7:fe:52:
                    ea:f0:ae:be:6c:b7:13:ac:0e:b7:32:db:66:77:d5:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3F:BB:45:2B:D7:42:11:F7:F6:87:7B:10:96:A6:E6:77:06:D0:72
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/7j-7RSvXQhH39od7EJam5ncG0HI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:85:88:46:a0:8a:f6:e7:ad:be:0b:fd:de:87:c6:d4:32:cd:
         0e:e5:f1:7a:d7:68:40:0f:17:59:0f:de:5b:25:b7:fc:7e:b4:
         eb:aa:e5:e8:4d:e6:2f:51:13:49:13:16:e1:f1:4c:15:08:04:
         61:d8:b6:f3:c5:ed:bf:f6:29:72:5a:e7:df:e4:7e:1e:a2:81:
         06:5c:26:58:f5:f9:11:18:0d:96:6c:b3:c7:3f:0a:6f:aa:33:
         39:1a:f3:2f:25:ed:86:5d:a4:91:f2:0d:48:ee:42:f6:f6:44:
         92:41:6d:ff:ee:66:85:16:ee:eb:30:e9:73:f3:94:02:db:2d:
         cd:fc:85:f2:16:41:d4:49:64:72:30:74:63:08:d0:5f:cc:58:
         c3:37:b9:27:12:b2:a8:db:b9:e5:ff:c5:7b:bd:1c:a2:8f:4e:
         ca:22:af:b9:fd:85:11:60:fa:61:ea:a5:c7:37:43:85:50:e6:
         ee:5f:7e:d8:8b:1e:5b:cd:c0:c1:27:9d:b1:7d:c7:3c:3a:3a:
         f8:54:86:d8:97:72:f4:fb:84:d0:c3:db:6b:2f:9f:19:0d:7e:
         60:27:25:b5:12:ce:6a:04:1e:95:f1:76:1a:1c:d7:91:eb:92:
         88:0a:4d:68:72:ce:3e:a8:c9:35:43:e3:f9:c5:cf:ce:32:33:
         d3:4a:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:08 2025 by rpki-client