Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/5MvQsZse66t8ysrF6k--aaFo-c0.roa
File:                     5MvQsZse66t8ysrF6k--aaFo-c0.roa (raw, json)
Hash identifier:          mIWdwg+pf47Ok+raF81TitiYoBQSOHII12G2VNqBgJs=
Subject key identifier:   E4:CB:D0:B1:9B:1E:EB:AB:7C:CA:CA:C5:EA:4F:BE:69:A1:68:F9:CD
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0183
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5MvQsZse66t8ysrF6k--aaFo-c0.roa
Signing time:             Tue 01 Apr 2025 01:30:20 +0000
ROA not before:           Tue 01 Apr 2025 01:30:20 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     2527
IP address blocks:        116.91.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Apr  1 01:30:20 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=E4CBD0B19B1EEBAB7CCACAC5EA4FBE69A168F9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:ee:da:97:69:f2:46:d9:73:ac:68:a1:c9:
                    0d:73:91:7c:34:32:ef:87:e8:1f:cf:c7:7f:ab:dc:
                    02:0b:38:fe:79:fc:a0:8f:ad:2f:81:be:1a:c3:ae:
                    54:2f:5a:e8:92:ba:0f:08:06:3e:9a:b3:a9:6c:3c:
                    a5:b6:40:cb:a1:22:7a:6e:66:25:4e:10:09:62:04:
                    0b:bc:c5:1a:1d:1c:09:a4:c5:6b:ef:ed:08:83:3c:
                    26:21:fe:5a:9d:bf:1d:e7:09:bd:6f:c9:fa:87:20:
                    36:55:7f:40:c2:bc:e4:c7:e5:55:64:8f:dd:3e:d0:
                    3a:7e:73:21:c3:2e:f2:17:90:ae:c3:22:b8:c3:bf:
                    26:e9:a3:56:3b:85:5c:12:c4:d1:1f:71:6e:68:2d:
                    93:18:23:cd:dc:0f:6c:86:f8:3b:6d:9a:d1:8b:d8:
                    46:b6:b7:d7:ca:8b:89:e7:6c:fa:ae:4e:f7:22:95:
                    43:5e:bf:c2:e1:4e:c3:cf:81:61:bb:37:ce:82:e6:
                    08:b3:84:32:d1:9c:b6:d4:8a:e7:59:e9:60:fb:5c:
                    b5:57:23:73:cd:52:f3:95:ef:0b:d4:fa:21:78:97:
                    54:b0:22:2f:26:9a:4c:da:88:a5:d7:14:af:b2:92:
                    d2:d5:92:de:f2:18:cf:c8:db:3a:fc:3b:d8:9b:a4:
                    3d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CB:D0:B1:9B:1E:EB:AB:7C:CA:CA:C5:EA:4F:BE:69:A1:68:F9:CD
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5MvQsZse66t8ysrF6k--aaFo-c0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.91.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:74:df:2c:b2:3e:20:db:84:be:c2:d0:66:b4:78:98:03:b0:
         34:6b:6b:17:38:06:ce:d4:03:2c:b2:23:53:94:8c:32:64:af:
         e7:c6:c7:87:b9:8f:86:c3:ff:21:04:05:45:f3:b5:30:bc:10:
         78:8e:ba:b8:25:9a:84:74:e1:b8:f4:f1:5d:4f:fd:6b:31:dd:
         f5:65:52:e9:69:08:18:6b:fa:4d:c9:1f:d6:fa:a4:07:51:3d:
         cc:91:66:4e:d1:99:1c:21:f3:ef:ba:09:af:6f:2d:21:df:ab:
         cf:99:d4:01:ae:66:ff:b2:e2:20:14:da:02:a7:10:78:7e:08:
         a4:7d:42:57:f7:97:2d:34:50:0c:76:58:b2:78:b3:70:6d:b7:
         7a:68:39:27:59:5c:3f:46:a0:27:39:a6:70:1a:66:81:39:fe:
         9f:ab:83:f6:c7:c3:ff:3d:b9:63:4e:7a:42:c6:74:b6:34:b0:
         04:4c:eb:87:4a:96:ce:2c:63:37:37:fd:fc:d1:5a:ff:3d:28:
         f7:e2:6a:38:7c:bf:a5:47:47:ed:5d:da:d0:0c:ca:33:b7:bb:
         8a:29:c8:bf:17:ff:b3:f4:db:2c:4f:19:fd:ad:e4:81:84:33:
         c4:f3:b3:a6:4b:f8:d2:e6:51:a0:e2:cc:3e:16:41:0b:ab:0a:
         66:63:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:01 2025 by rpki-client