Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/GB2iQgFnDfkZn2MF3Z8m12KIClE.roa
File:                     GB2iQgFnDfkZn2MF3Z8m12KIClE.roa (raw, json)
Hash identifier:          ermzhu5uGQST3qh5rfoZfs58F/lUMmCrWxrIowdsi9M=
Subject key identifier:   18:1D:A2:42:01:67:0D:F9:19:9F:63:05:DD:9F:26:D7:62:88:0A:51
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       32
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/GB2iQgFnDfkZn2MF3Z8m12KIClE.roa
Signing time:             Sat 01 Mar 2025 01:29:32 +0000
ROA not before:           Sat 01 Mar 2025 01:29:32 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     18071
IP address blocks:        133.182.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar  1 01:29:32 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=181DA24201670DF9199F6305DD9F26D762880A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:c0:a7:d1:92:e4:89:a7:c7:8f:c6:d9:c7:
                    10:d7:cc:28:41:e0:ca:9d:2d:4e:a8:00:c4:38:95:
                    84:92:f6:9c:e5:05:be:79:cf:ab:13:2d:36:e1:35:
                    c0:be:b1:ec:a9:03:72:a3:cc:4b:fa:0b:c3:35:57:
                    ca:c1:8f:e4:45:bd:b8:43:cb:c3:ea:7a:c5:f3:d7:
                    4f:00:23:69:a3:08:77:7e:ea:10:db:90:ce:6a:4c:
                    c4:89:57:00:14:7c:39:d5:f5:8c:8c:7d:81:4e:09:
                    fb:40:d0:df:e3:4d:68:71:cd:90:bf:ad:56:fc:9a:
                    1f:72:9d:71:f1:d6:4d:16:42:75:64:b9:35:d2:7f:
                    73:56:10:93:af:84:72:09:58:52:59:b3:af:33:e1:
                    bf:c4:44:89:1c:ea:b7:d3:a7:2b:d5:15:c4:22:16:
                    29:0e:f0:23:b5:43:41:78:d7:e8:8c:93:87:87:89:
                    12:45:99:44:32:3c:2c:d1:0a:b2:21:5f:e4:07:b3:
                    4b:da:0f:a0:92:10:07:a9:8d:09:b1:1c:56:02:44:
                    ca:00:30:ce:ff:c5:7c:c3:4b:d4:8f:88:17:64:4e:
                    69:61:1c:dc:76:aa:dd:7e:5b:f8:78:47:da:30:a6:
                    b9:87:7a:5f:35:33:88:bc:d4:62:bd:61:31:d5:6c:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1D:A2:42:01:67:0D:F9:19:9F:63:05:DD:9F:26:D7:62:88:0A:51
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/GB2iQgFnDfkZn2MF3Z8m12KIClE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:59:58:b8:ab:38:f0:12:2b:27:00:16:37:a0:fd:bf:91:30:
         e8:e9:45:8e:96:d7:17:b4:ec:4c:3f:74:26:a9:b9:aa:87:c4:
         fb:f6:9d:e9:07:12:58:f4:47:0c:10:08:47:9c:f1:57:43:6c:
         c3:06:81:71:c7:38:6d:3d:a6:df:38:af:0e:a8:1a:1f:4f:0f:
         27:3a:e7:e4:35:29:55:9b:a3:f2:94:9b:21:14:97:ca:e9:94:
         50:e6:92:8d:18:55:b9:7b:4c:d7:43:79:f3:f2:6a:7f:80:3a:
         e8:0b:0d:78:4a:5a:2f:35:3e:44:5c:24:1f:96:27:e8:16:97:
         92:f9:6d:f5:a1:70:e0:1d:94:cf:03:93:39:55:fe:60:2e:61:
         ec:de:bd:be:55:da:a5:4f:76:73:fa:3d:6b:d5:95:b1:b2:78:
         86:59:83:cd:72:1d:df:49:9b:c7:61:d6:a3:cc:23:8f:bc:5f:
         55:c7:6f:94:e8:de:9b:06:1e:da:1b:da:aa:77:ac:8f:9e:63:
         55:63:78:9a:7f:53:9b:98:a1:d1:46:0c:47:39:2a:5a:8c:62:
         b5:62:3c:d2:1c:bc:59:c4:e6:ed:de:63:3c:ec:68:30:84:dd:
         1a:96:04:b1:9c:68:8a:ac:a9:46:02:bd:56:27:cb:fb:62:d5:
         1f:75:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:26 2025 by rpki-client