Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Cfm3w42kH_BiRnEFoGs4MJYFQS0.roa
File:                     Cfm3w42kH_BiRnEFoGs4MJYFQS0.roa (raw, json)
Hash identifier:          zgKKxg56xJtqGmiorEnYFEHu9ORix7B0CLb/+rHrplQ=
Subject key identifier:   09:F9:B7:C3:8D:A4:1F:F0:62:46:71:05:A0:6B:38:30:96:05:41:2D
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       3D
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Cfm3w42kH_BiRnEFoGs4MJYFQS0.roa
Signing time:             Fri 31 Jan 2025 01:33:33 +0000
ROA not before:           Fri 31 Jan 2025 01:33:33 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        116.94.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:33 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=09F9B7C38DA41FF062467105A06B38309605412D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:ed:a6:b5:5d:60:99:64:8c:d4:5e:6f:6e:
                    2c:66:fd:d1:d3:df:9a:d7:6c:13:a3:28:22:32:40:
                    c9:c0:82:6d:b4:f7:d6:de:2a:b5:4d:88:7d:15:2c:
                    c2:c3:8e:b6:23:39:9f:67:a2:44:58:ad:3c:7c:73:
                    69:83:d2:ec:28:0c:e3:95:0b:a7:bc:3e:ad:6d:20:
                    ce:d3:34:f8:c3:ce:fc:e9:7d:48:6d:ee:7e:5d:39:
                    79:6b:7d:c7:c7:8d:97:78:03:85:2f:9b:3f:f1:03:
                    52:d7:61:5a:03:ba:dd:bf:f3:c5:29:04:14:93:c2:
                    e4:8f:f8:2e:9d:1b:be:b5:74:c3:a6:1a:3c:20:d6:
                    25:d7:d0:89:e6:73:93:db:2c:16:85:e3:f7:6a:06:
                    79:71:b5:45:dd:57:fe:0c:95:af:52:7b:da:e6:33:
                    20:bc:0c:37:1e:d9:16:f8:86:ab:1c:69:c5:5c:be:
                    38:bf:27:a5:48:bd:81:07:b6:7c:ba:66:7f:b0:89:
                    97:e0:f7:6d:68:48:fa:d6:89:57:4b:5a:4b:d3:1b:
                    01:98:18:25:b2:ed:2f:e8:83:8b:21:2f:f9:38:28:
                    6d:c8:7e:f8:e0:ac:65:86:d6:b4:85:e4:79:6d:03:
                    eb:f6:80:bb:59:5d:96:d7:a8:eb:6f:2b:6c:24:92:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F9:B7:C3:8D:A4:1F:F0:62:46:71:05:A0:6B:38:30:96:05:41:2D
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Cfm3w42kH_BiRnEFoGs4MJYFQS0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.94.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:30:89:2e:7d:0e:6b:5b:19:d8:6e:eb:94:63:87:d9:18:00:
         71:dd:e9:d7:78:f2:f1:d3:4d:9c:f0:6b:4a:89:b0:22:d3:96:
         dc:50:c8:56:e7:04:4f:78:ac:a6:b0:a1:52:04:12:2b:38:b7:
         89:e5:ec:a4:4d:8c:0e:f1:4b:55:c6:b9:fc:50:4f:db:78:57:
         89:f7:69:96:89:4f:da:56:9a:af:eb:ef:70:ff:cf:46:74:f6:
         68:ea:63:ab:26:30:90:c0:92:b0:8e:e4:7f:e9:06:01:78:bc:
         ad:e0:55:a2:48:99:cd:51:77:d4:eb:98:73:b1:ad:80:89:40:
         53:6b:cc:75:18:26:02:42:3b:85:37:a0:5f:7b:cf:a8:1c:3e:
         b7:4e:98:2c:bb:b2:2d:7d:9b:11:16:29:c7:ca:45:95:20:23:
         cc:42:42:3b:30:e9:cc:52:0f:75:87:cd:a2:44:fe:de:32:63:
         27:dd:30:b0:c8:ed:5e:f2:4f:95:11:a0:84:a5:01:b8:7a:27:
         c7:46:65:67:e8:60:4d:ea:06:59:d3:6d:1c:43:37:39:0e:c1:
         00:8f:81:2c:20:0e:64:eb:3b:13:b1:9d:58:b1:c8:f2:c6:90:
         e8:f4:ab:23:57:e8:74:b2:88:cc:bd:ed:f3:4c:70:13:77:94:
         71:a9:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:51 2025 by rpki-client