Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/E7mQq1kF0Zu1sIA5-y3NPgDitt0.roa
File:                     E7mQq1kF0Zu1sIA5-y3NPgDitt0.roa (raw, json)
Hash identifier:          TO/R2PKGRfelVtoHJLzurkbqhSvpvz4wp2EDew17Q48=
Subject key identifier:   13:B9:90:AB:59:05:D1:9B:B5:B0:80:39:FB:2D:CD:3E:00:E2:B6:DD
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       52
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/E7mQq1kF0Zu1sIA5-y3NPgDitt0.roa
Signing time:             Fri 31 Jan 2025 01:33:42 +0000
ROA not before:           Fri 31 Jan 2025 01:33:42 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        218.219.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:42 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=13B990AB5905D19BB5B08039FB2DCD3E00E2B6DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:93:45:6c:4d:51:06:44:78:f5:e7:a0:08:
                    fb:e1:b7:88:e6:88:4f:a2:a6:08:69:90:9a:5f:51:
                    a4:c2:e1:4c:b5:89:37:86:60:b3:ca:23:91:e9:1d:
                    91:e6:79:d2:ea:47:34:f8:7a:87:ce:9e:be:e6:a9:
                    65:93:af:fa:74:fa:3f:ef:38:37:c7:27:2a:a7:05:
                    e5:eb:36:fd:df:42:89:34:f5:55:83:ea:d1:ae:68:
                    52:ae:97:8b:3a:6c:ff:04:71:85:05:72:0b:f7:69:
                    eb:50:50:0f:3d:d0:20:7e:04:38:3d:5c:34:43:89:
                    bc:cb:af:83:42:7c:4c:21:b9:90:c7:b4:be:9e:6d:
                    90:97:1c:2e:61:d8:3d:ab:0a:3e:0a:31:24:8d:a7:
                    4f:f2:c7:0a:4c:07:b2:09:b3:06:5c:db:b1:d9:50:
                    d3:ef:32:ef:a3:fb:1e:27:a5:26:e4:0f:81:a5:29:
                    b9:0a:ac:f5:21:f4:c8:f6:35:f6:53:76:69:d7:58:
                    b4:48:84:d1:3e:19:28:28:31:47:f1:7e:fd:1d:08:
                    b8:f7:85:17:63:6f:9e:bf:45:b7:62:7f:89:34:d2:
                    fb:a9:82:f0:65:9e:8b:f1:4e:1b:e9:4f:24:ee:64:
                    ad:33:80:c7:96:8d:0b:76:99:e8:ab:f2:2d:88:0b:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:90:AB:59:05:D1:9B:B5:B0:80:39:FB:2D:CD:3E:00:E2:B6:DD
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/E7mQq1kF0Zu1sIA5-y3NPgDitt0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:04:4c:66:50:44:70:20:f1:eb:93:c1:21:2b:b3:be:fb:
         48:76:7d:54:f1:48:1a:89:ae:b1:87:4d:c3:e3:2e:3c:58:7a:
         02:75:90:7a:53:07:05:48:b0:33:d4:3d:d3:5e:2d:aa:ef:46:
         98:d8:35:76:48:49:f2:32:12:4d:e0:2d:f8:35:2a:f8:88:0f:
         45:1f:c2:eb:c0:63:2b:d3:b4:2e:fe:c8:fc:e6:8d:68:0b:ed:
         db:21:43:e0:54:df:85:59:54:c5:1c:75:21:6a:b0:ec:1d:85:
         8f:c2:df:f9:95:34:ba:ca:c6:9f:e7:13:b6:ff:fa:51:9e:6f:
         ee:a9:8e:03:ec:56:5f:16:d3:7a:50:19:d2:47:45:d9:c5:65:
         05:70:19:58:d0:ed:fc:93:b9:ca:b6:73:96:c8:9b:d4:14:9f:
         dd:39:36:a3:73:c6:90:63:ea:16:33:6e:41:4f:67:12:ca:da:
         bc:c2:a7:28:03:65:b3:a8:09:b4:59:94:1c:ea:d5:3f:ad:91:
         46:63:23:27:96:a3:11:c7:cc:d1:34:20:41:23:a0:57:a4:92:
         4d:ae:e3:31:2a:44:c7:55:09:49:d2:27:85:11:60:ba:14:a5:
         aa:56:3f:5b:f1:c2:75:e0:86:59:5b:da:3d:b4:77:10:f9:b8:
         b0:bc:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:07:29 2025 by rpki-client