Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/VEh769gIDkyDmSsG8MHyE1Ei55s.roa
File:                     VEh769gIDkyDmSsG8MHyE1Ei55s.roa (raw, json)
Hash identifier:          vIWrK3/QYpUnrqkemJheOojIp5IiPuZlhJPQywsLa4M=
Subject key identifier:   54:48:7B:EB:D8:08:0E:4C:83:99:2B:06:F0:C1:F2:13:51:22:E7:9B
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       2F
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/VEh769gIDkyDmSsG8MHyE1Ei55s.roa
Signing time:             Sat 01 Mar 2025 01:29:31 +0000
ROA not before:           Sat 01 Mar 2025 01:29:31 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     18071
IP address blocks:        133.181.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar  1 01:29:31 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=54487BEBD8080E4C83992B06F0C1F2135122E79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:cc:06:b1:df:f4:7e:53:82:25:dc:99:ef:
                    bd:c0:c3:b7:c0:d0:47:5f:9c:47:1c:d3:88:e1:9b:
                    f3:c6:22:27:e5:1c:aa:53:74:12:99:c6:7b:de:36:
                    94:70:c8:20:87:f8:d5:ae:f5:a9:a5:53:22:4d:28:
                    a8:04:6a:79:99:75:da:49:67:0d:4d:46:91:16:f0:
                    de:8e:7d:76:59:2d:83:22:ac:57:8e:1b:3a:fa:05:
                    06:51:48:f0:bc:d2:64:ec:45:f8:94:4b:63:ee:fe:
                    a2:1e:4d:12:b0:e5:3a:08:ee:9e:4d:46:91:e1:ee:
                    5a:eb:f5:44:57:04:e7:ed:21:96:1b:16:15:6e:30:
                    3b:0b:f4:8c:78:f5:7e:00:8e:87:14:9a:c2:f1:d7:
                    d0:83:6e:48:22:b3:71:1e:b8:a2:ec:f9:0a:54:ee:
                    f7:ba:60:3d:8b:94:e4:0b:66:b3:a2:68:cc:97:94:
                    31:3e:f9:15:5f:1d:f1:9f:06:1c:bd:46:3b:0e:70:
                    bd:46:a3:ba:65:c9:e6:31:4d:d4:51:47:35:b7:dc:
                    bb:76:e7:76:27:b2:f9:05:13:b3:0f:86:89:a7:df:
                    0a:a5:71:19:a6:df:e8:2c:85:d9:08:ec:41:4f:e7:
                    29:fb:9a:0a:a4:c7:99:87:61:20:39:0e:75:90:6a:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:48:7B:EB:D8:08:0E:4C:83:99:2B:06:F0:C1:F2:13:51:22:E7:9B
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/VEh769gIDkyDmSsG8MHyE1Ei55s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:9c:e9:43:23:be:e4:a2:d8:37:29:ba:1e:a9:4d:ef:c6:
         9f:15:95:2b:d5:96:16:57:bf:06:5f:71:93:5f:bb:d3:90:fb:
         52:a7:5f:66:74:79:21:60:bc:08:ad:da:c5:f1:70:36:a1:ef:
         b8:ca:c1:38:d5:42:c0:04:90:e6:5c:67:5c:c8:f7:50:58:eb:
         9e:48:6a:11:75:f0:24:73:88:d3:78:99:b5:dd:d0:44:04:6f:
         7b:b8:38:20:92:36:8e:b2:6b:10:16:e5:35:7e:a2:a4:ad:3e:
         85:46:3c:6c:6f:e3:98:33:5e:65:41:88:4b:d6:60:20:7d:4f:
         70:c9:03:35:30:9e:2a:ab:5a:6d:aa:37:c7:55:60:25:5b:81:
         30:c9:fd:d3:0e:a6:14:25:91:7e:44:ec:79:ad:9d:dd:fc:6f:
         73:a2:9d:0d:9b:af:6d:14:37:ba:ea:7a:50:f4:fe:26:9b:ad:
         5a:c0:29:15:ba:4a:31:79:0c:1a:af:e7:31:7b:51:ff:c4:f6:
         79:a7:a1:e8:6e:00:61:67:b0:7e:e8:38:fa:70:9f:c6:f4:48:
         7c:8d:dc:b3:42:22:d9:f5:a9:05:87:4f:3c:17:95:3a:ed:01:
         28:84:fd:d8:c3:71:e4:e5:bf:2f:78:d4:45:9f:5c:4e:0d:59:
         6c:c7:89:0c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI1MDMwMTAx
MjkzMVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoNTQ0ODdCRUJEODA4MEU0
QzgzOTkyQjA2RjBDMUYyMTM1MTIyRTc5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALbczAax3/R+U4Il3JnvvcDDt8DQR1+cRxzTiOGb88YiJ+UcqlN0
EpnGe942lHDIIIf41a71qaVTIk0oqARqeZl12klnDU1GkRbw3o59dlktgyKsV44b
OvoFBlFI8LzSZOxF+JRLY+7+oh5NErDlOgjunk1GkeHuWuv1RFcE5+0hlhsWFW4w
Owv0jHj1fgCOhxSawvHX0INuSCKzcR64ouz5ClTu97pgPYuU5Atms6JozJeUMT75
FV8d8Z8GHL1GOw5wvUajumXJ5jFN1FFHNbfcu3bndiey+QUTsw+GiaffCqVxGabf
6CyF2QjsQU/nKfuaCqTHmYdhIDkOdZBqmfUCAwEAAaOCAiUwggIhMB0GA1UdDgQW
BBRUSHvr2AgOTIOZKwbwwfITUSLnmzAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTkzNy9WRWg3NjlnSURreURtU3NHOE1IeUUxRWk1NXMucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA
ATAFAwMAhbUwDQYJKoZIhvcNAQELBQADggEBABWsnOlDI77kotg3KboeqU3vxp8V
lSvVlhZXvwZfcZNfu9OQ+1KnX2Z0eSFgvAit2sXxcDah77jKwTjVQsAEkOZcZ1zI
91BY655IahF18CRziNN4mbXd0EQEb3u4OCCSNo6yaxAW5TV+oqStPoVGPGxv45gz
XmVBiEvWYCB9T3DJAzUwniqrWm2qN8dVYCVbgTDJ/dMOphQlkX5E7Hmtnd38b3Oi
nQ2br20UN7rqelD0/iabrVrAKRW6SjF5DBqv5zF7Uf/E9nmnoehuAGFnsH7oOPpw
n8b0SHyN3LNCItn1qQWHTzwXlTrtASiE/djDceTlvy941EWfXE4NWWzHiQw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:43:58 2025 by rpki-client