Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/i0E6PKcJqwfNm32n7k9fBtLArMI.roa
File:                     i0E6PKcJqwfNm32n7k9fBtLArMI.roa (raw, json)
Hash identifier:          6QriwW/+mOfzv0rJcCzhD16qJMAkxuPei/XaYge6bfA=
Subject key identifier:   8B:41:3A:3C:A7:09:AB:07:CD:9B:7D:A7:EE:4F:5F:06:D2:C0:AC:C2
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       2E
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/i0E6PKcJqwfNm32n7k9fBtLArMI.roa
Signing time:             Sat 01 Mar 2025 01:29:30 +0000
ROA not before:           Sat 01 Mar 2025 01:29:30 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     2497
IP address blocks:        133.183.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar  1 01:29:30 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=8B413A3CA709AB07CD9B7DA7EE4F5F06D2C0ACC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:7f:f3:34:83:30:c3:a9:a6:27:37:dd:7f:
                    5d:4a:11:22:46:ef:07:eb:0e:2c:22:6f:67:23:df:
                    6b:a3:24:61:57:32:ce:3d:75:34:7e:65:f7:9a:9d:
                    a6:dd:ca:8c:3e:dc:4f:8c:16:28:78:32:d7:d9:9d:
                    93:10:29:d6:b3:f3:ac:fe:6a:ff:64:79:79:1b:f1:
                    04:f0:f7:ca:7f:0c:39:ca:75:54:fc:56:5c:e2:8f:
                    a7:03:34:3f:5e:55:ea:e9:22:e0:3f:61:20:52:da:
                    30:a6:f4:f2:b4:55:36:6a:7e:97:2c:46:64:8b:c9:
                    03:db:68:22:2e:e2:b0:31:c5:89:3d:fb:81:46:8c:
                    78:ee:41:7c:51:91:12:f5:42:4e:a6:ab:b0:2a:56:
                    7e:6f:27:de:05:cc:92:ed:20:23:22:5d:21:b7:af:
                    cd:40:e5:ab:37:f5:70:b2:76:81:87:63:c5:f1:27:
                    3f:85:03:05:fb:a1:9d:e8:1b:56:94:d1:16:a1:d7:
                    27:24:52:67:a9:f1:fd:b7:0a:20:a8:5d:3b:13:d2:
                    1c:5c:6e:33:70:93:f6:ea:7f:a4:51:3b:cc:bc:da:
                    0b:58:64:8c:38:79:12:3f:7d:55:e8:ef:ae:a8:87:
                    48:bd:4f:54:6a:93:04:3a:d4:63:13:19:10:d8:00:
                    ae:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:41:3A:3C:A7:09:AB:07:CD:9B:7D:A7:EE:4F:5F:06:D2:C0:AC:C2
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/i0E6PKcJqwfNm32n7k9fBtLArMI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:3a:e6:b3:2d:5b:19:f7:8d:b2:6d:17:3a:83:74:15:ad:
         0f:a8:60:10:f7:25:95:03:2d:4b:e2:f0:dc:79:93:7d:08:c7:
         68:d1:39:10:32:3c:0f:02:07:7c:0c:02:3b:e7:20:2b:09:9b:
         30:92:34:03:95:e7:c0:fe:5d:87:6f:23:96:61:bb:a2:e9:1b:
         fa:db:b6:e3:e5:6c:2b:95:ae:c2:03:27:97:34:e0:6b:d4:ef:
         d2:51:c7:19:8e:6c:91:1b:86:74:c7:83:c6:e4:76:1a:22:9c:
         df:0b:c8:02:bf:f6:32:0a:38:24:0b:2c:ac:45:ea:83:06:30:
         c0:14:8e:ed:6e:05:e0:db:04:07:5a:0e:e3:0f:1d:90:1e:62:
         74:a3:5c:7b:1e:49:ce:99:bd:0b:f5:6d:74:c3:9d:01:f4:81:
         cb:06:27:fc:88:d4:1d:3e:d0:f0:ad:ec:ce:f9:f5:43:66:96:
         4a:7a:e4:d4:da:79:f7:c8:9d:23:7d:e0:20:cd:b9:82:ad:01:
         aa:db:8f:70:47:ab:bf:c7:4d:27:72:bc:f8:71:42:62:07:92:
         f6:cc:0b:ec:02:e0:c8:bd:a3:20:ec:68:91:b3:8f:d6:a3:0c:
         86:5e:35:e9:b0:36:69:d8:bf:a9:52:0f:8c:07:95:84:70:66:
         a1:5b:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:11:52 2025 by rpki-client