Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa
File:                     JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa (raw, json)
Hash identifier:          nLbNOJNWQ+vk+Lj7DDY4VcqW2h8sreZ0KTwkzvjd6H8=
Subject key identifier:   24:F2:75:74:DC:C9:E8:B3:33:25:F9:50:BC:AC:42:31:DF:D2:9B:E2
Certificate issuer:       /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Certificate serial:       17
Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa
Signing time:             Tue 01 Apr 2025 01:31:17 +0000
ROA not before:           Tue 01 Apr 2025 01:31:17 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     17955
IP address blocks:        120.88.16.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
        Validity
            Not Before: Apr  1 01:31:17 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=24F27574DCC9E8B33325F950BCAC4231DFD29BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:4e:95:b8:29:71:d7:1b:d9:0a:6e:0f:f1:
                    71:08:bd:4e:4a:94:ab:bf:2a:fa:5c:b2:20:0b:44:
                    c7:56:f6:7e:82:54:27:72:73:ef:c1:ac:42:9b:71:
                    14:98:aa:db:13:3e:43:30:83:dc:98:a7:47:80:c7:
                    af:ec:7c:6e:1d:9f:e3:c8:ae:e1:26:a5:3d:1d:cc:
                    35:db:2d:2d:8f:d0:fe:cb:c3:a6:98:2b:a7:6f:5d:
                    03:19:91:e1:2d:1f:a1:4f:16:ec:bb:2c:fc:b4:50:
                    4b:30:6c:e0:2a:0a:ad:d8:dd:41:62:bd:1a:17:da:
                    09:85:99:4e:5d:35:33:ff:29:73:95:ce:e9:ee:3b:
                    39:56:ea:a2:81:e7:a4:61:65:5e:42:4c:18:04:52:
                    6e:00:7b:ee:01:e4:1c:c0:22:35:6d:c0:4e:84:57:
                    09:a5:2c:29:d1:88:1d:e1:14:df:42:1d:75:62:ba:
                    00:ff:b1:f7:12:7e:2b:ae:9b:45:56:dd:23:d0:19:
                    a9:51:76:90:38:0d:68:01:f2:67:33:ae:49:56:b8:
                    5e:04:a5:cb:18:58:90:25:a3:00:5f:82:41:5f:91:
                    cb:9b:da:bf:23:e6:53:1c:8c:40:32:e4:89:01:fd:
                    76:d6:6d:e3:2a:d4:9d:2c:80:88:a6:f9:06:16:04:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F2:75:74:DC:C9:E8:B3:33:25:F9:50:BC:AC:42:31:DF:D2:9B:E2
            X509v3 Authority Key Identifier:
                keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.88.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:89:b0:36:78:e8:ed:73:e1:8c:33:3b:02:5d:4d:16:ff:f1:
         82:44:31:c0:77:8e:3d:11:0c:c3:6a:8e:f7:38:8a:f5:95:e4:
         bc:35:ed:b4:56:c6:64:13:2b:32:c2:07:9e:a0:26:b0:7c:c9:
         10:b8:3d:b7:2a:3d:b8:fc:0f:54:8e:21:7e:67:2d:7c:59:6c:
         fb:57:13:ee:51:47:17:f3:30:24:da:c2:65:78:30:d1:5a:ea:
         b0:21:d0:1f:a7:43:a3:d6:8f:d1:98:80:b2:4b:dc:ad:39:b3:
         0a:d6:82:46:1d:6e:6a:9d:ce:56:c0:18:64:2d:c1:60:e8:1d:
         4a:1a:0c:56:21:19:52:21:d9:80:3d:c6:d3:29:69:95:bf:23:
         75:c4:96:b6:3b:8c:57:d4:06:88:39:4d:93:9d:97:99:12:da:
         a4:ee:85:93:73:39:fe:54:97:d6:2a:a9:89:0d:49:a7:7b:5f:
         6a:97:2a:ad:94:5b:65:f2:38:62:71:46:d8:43:ac:b7:6c:2d:
         f7:46:4a:b6:97:23:6d:94:55:56:e9:ba:fa:fa:9a:04:ef:7d:
         f4:0f:bf:9e:cf:a1:e8:01:9b:fa:a0:be:29:60:2d:c9:9a:26:
         8f:e8:b0:46:e1:e7:12:6a:ca:39:e7:19:e3:61:ab:8a:71:99:
         b7:4a:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:59 2025 by rpki-client