Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Mn6SvMA9yZLAwUqbAM1QIvGQQnw.roa
File:                     Mn6SvMA9yZLAwUqbAM1QIvGQQnw.roa (raw, json)
Hash identifier:          zZKlQqakmRZuZQce/BQxQrnPXi1nw1saVUXQt4PLqJA=
Subject key identifier:   32:7E:92:BC:C0:3D:C9:92:C0:C1:4A:9B:00:CD:50:22:F1:90:42:7C
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       42
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Mn6SvMA9yZLAwUqbAM1QIvGQQnw.roa
Signing time:             Fri 31 Jan 2025 01:33:35 +0000
ROA not before:           Fri 31 Jan 2025 01:33:35 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        124.159.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:35 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=327E92BCC03DC992C0C14A9B00CD5022F190427C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:9b:17:c9:71:ed:73:a9:1f:7b:cf:46:5a:
                    e7:2e:8d:85:33:44:ed:2a:8b:ab:59:cf:fe:f9:b7:
                    61:18:bf:7a:c7:94:89:ea:1c:c5:c3:5e:d0:b3:cd:
                    06:4b:a9:dc:36:01:ba:0b:62:34:3f:8e:6b:c7:c3:
                    d2:0b:2e:12:0f:21:3b:c0:5c:f6:cb:c4:37:b7:33:
                    c9:b5:7c:b2:dc:9a:57:47:30:1c:b5:c4:a4:78:68:
                    35:7d:78:72:bd:c3:de:5a:51:d0:2c:41:37:e5:d0:
                    14:16:c2:64:35:18:25:79:a3:85:f5:8e:c4:7a:57:
                    5e:35:7d:da:66:00:e0:11:60:8e:78:a7:74:b5:d6:
                    5d:92:5b:1d:83:80:9d:a1:c9:76:b7:42:4b:8e:1e:
                    ee:13:61:a3:5f:2b:27:15:e8:c8:cb:48:9b:36:31:
                    3a:dc:4b:c9:25:9a:97:45:a7:40:96:d1:94:9a:e6:
                    8a:ea:f0:a6:6b:06:b9:59:f0:3f:a7:eb:08:d9:f5:
                    81:71:bb:c6:0f:56:d6:68:2e:5c:f8:70:87:38:df:
                    b2:97:9d:48:59:99:4c:6e:b8:6e:db:32:a2:93:74:
                    66:b4:04:98:bc:1d:3b:53:80:e1:21:60:63:55:73:
                    db:af:5d:87:c6:3c:69:03:4a:32:39:c3:a9:e3:58:
                    95:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7E:92:BC:C0:3D:C9:92:C0:C1:4A:9B:00:CD:50:22:F1:90:42:7C
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Mn6SvMA9yZLAwUqbAM1QIvGQQnw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:61:c8:2a:30:72:14:25:90:41:a3:4e:fb:6f:b7:a9:d3:24:
         e1:e0:bf:06:b2:5a:3f:88:bd:bf:4e:2f:a4:b7:79:f7:45:65:
         34:e7:a9:29:b9:e5:a0:24:a4:1a:0f:22:81:25:33:c3:4d:9f:
         47:3f:a9:6e:e2:9e:02:d9:54:16:5b:52:e4:3d:2e:f9:33:71:
         5b:5f:33:9e:6b:a9:c9:0a:e9:e1:00:c5:3c:c3:33:cb:e2:f2:
         43:8f:f1:bb:c9:22:f2:e9:93:06:fd:2d:3c:0b:d2:8d:24:ab:
         97:88:9f:13:bc:ba:de:18:00:69:1d:4b:9f:99:26:13:c3:f8:
         3a:80:89:55:5a:92:3d:44:62:d0:29:34:fa:a4:56:e4:6e:d7:
         b1:11:eb:33:cc:82:3b:50:b7:4e:d2:a5:a7:b5:61:d5:8b:62:
         79:1b:58:f4:3e:77:34:89:5f:85:a6:3f:fb:d7:06:99:3c:08:
         33:28:b1:aa:17:d1:e7:1d:d2:0c:e8:ac:c2:f5:5e:42:87:29:
         23:5c:8e:a8:35:3d:fb:29:b0:0e:a2:2e:8e:7b:64:d6:ce:d8:
         92:92:5b:a4:50:46:08:b1:f0:b7:eb:3b:d3:23:ba:cd:cc:05:
         ea:55:33:f3:90:f3:b8:a7:1f:e8:a7:4e:f3:f7:f6:20:6a:17:
         fa:47:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:34 2025 by rpki-client