Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/OU-F77FW_ZlCp2oD4Omv4EJZUjo.roa
File:                     OU-F77FW_ZlCp2oD4Omv4EJZUjo.roa (raw, json)
Hash identifier:          ouKzaQjodoGzm2dYsB3pPID1BskNOP3G9Yg6VLKBA58=
Subject key identifier:   39:4F:85:EF:B1:56:FD:99:42:A7:6A:03:E0:E9:AF:E0:42:59:52:3A
Certificate issuer:       /CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
Certificate serial:       4E
Authority key identifier: 0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/OU-F77FW_ZlCp2oD4Omv4EJZUjo.roa
Signing time:             Fri 31 Jan 2025 01:32:32 +0000
ROA not before:           Fri 31 Jan 2025 01:32:32 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     2527
IP address blocks:        90.149.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 02:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
        Validity
            Not Before: Jan 31 01:32:32 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=394F85EFB156FD9942A76A03E0E9AFE04259523A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:75:1d:bf:9e:14:df:ac:0d:b0:96:35:e4:
                    f1:37:80:04:3c:77:fb:2d:a1:e7:e7:85:8e:37:b6:
                    c3:fc:13:e9:fa:f6:cf:30:a4:d3:be:aa:3a:81:fd:
                    4e:09:7e:2b:69:8f:26:98:2b:ac:37:9d:a9:c9:1d:
                    9f:d7:e6:25:77:36:f7:3a:6c:df:df:64:f6:18:02:
                    9a:81:2c:27:3b:12:d1:20:92:2a:a9:a6:e7:21:bc:
                    5d:7f:51:a5:df:80:5c:cb:39:85:ee:f7:ee:1b:b9:
                    c2:d2:6f:30:e6:cc:50:c6:7e:cc:96:f0:8a:e6:e7:
                    bd:b9:1a:43:c4:a7:9e:3e:d0:8a:19:da:c9:a3:fb:
                    c3:c9:89:50:87:ed:a2:59:b9:b3:35:8b:82:23:6d:
                    b1:0a:f0:49:86:61:7a:03:23:6a:3e:c1:07:ee:af:
                    e5:34:c6:58:f9:0f:f0:9f:7e:4b:a1:ae:8d:84:53:
                    f1:6b:91:15:4b:b0:38:23:36:ef:e1:0e:92:88:70:
                    be:f5:6b:3c:29:b3:33:f1:f7:f4:2f:30:fa:ee:29:
                    7c:7a:22:81:c6:09:53:ca:ba:b5:26:20:1e:c2:f8:
                    d5:91:03:f8:60:ad:41:f1:f3:c6:c8:1f:bc:b3:f6:
                    2e:14:f2:88:f5:a8:70:62:f1:d3:5d:0d:f1:a6:a1:
                    6b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4F:85:EF:B1:56:FD:99:42:A7:6A:03:E0:E9:AF:E0:42:59:52:3A
            X509v3 Authority Key Identifier:
                keyid:0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/OU-F77FW_ZlCp2oD4Omv4EJZUjo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  90.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:45:b0:fb:43:b5:21:b1:15:22:8f:8a:76:f9:bb:8e:3d:a0:
         e4:34:6c:0f:3a:df:a1:5d:35:e9:13:fd:6c:e0:9e:ad:51:6b:
         b8:fd:af:28:ef:9a:12:8f:45:fe:43:df:1d:42:6e:76:63:2d:
         09:d6:3e:00:1b:2a:27:97:3d:3a:ca:41:18:66:83:ba:18:75:
         1b:08:c1:d5:9e:9a:a3:2a:99:b2:b5:b3:2f:54:9d:ad:e6:25:
         41:c0:3e:af:27:9d:82:9a:96:4d:e3:43:07:d3:59:09:a1:2c:
         f1:58:29:f1:dd:19:24:ff:a7:9b:bc:26:94:5a:17:e7:2a:c2:
         ed:df:09:fb:21:3d:b5:15:c2:a5:46:f7:e5:67:e3:87:8c:8f:
         46:fc:44:6b:e0:78:44:bc:1d:7b:e6:03:a8:db:5f:a1:55:1c:
         e2:af:3a:81:69:5b:c1:b4:a3:ce:1d:9d:96:7e:8b:d5:a5:49:
         ac:7b:98:35:9d:bf:9f:61:e3:cb:f3:14:eb:f7:23:8b:3a:bb:
         7e:13:8d:9b:da:2b:6f:e0:84:c7:03:01:43:e9:74:50:be:6b:
         d9:8a:d0:6d:c0:07:2d:13:5d:f1:44:01:da:4f:94:60:87:d6:
         d1:8e:6b:e1:6d:69:d4:51:ff:93:26:ea:23:d9:9a:fa:67:31:
         41:c0:01:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:00:58 2025 by rpki-client