Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/A2oHegAz_8wibYpoED6mXZ632ic.roa
File:                     A2oHegAz_8wibYpoED6mXZ632ic.roa (raw, json)
Hash identifier:          LejaBkcGqgP5uqA9e0n7XYRAfIl8ERkeRvbR1jkvc+4=
Subject key identifier:   03:6A:07:7A:00:33:FF:CC:22:6D:8A:68:10:3E:A6:5D:9E:B7:DA:27
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0559
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/A2oHegAz_8wibYpoED6mXZ632ic.roa
Signing time:             Fri 31 Jan 2025 01:36:14 +0000
ROA not before:           Fri 31 Jan 2025 01:36:14 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        27.121.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:36:14 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=036A077A0033FFCC226D8A68103EA65D9EB7DA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6c:85:47:12:40:15:97:a0:b3:bb:58:d4:00:
                    d3:97:c4:d3:fc:27:0e:1c:28:5e:73:01:3c:2d:36:
                    c3:29:91:bf:49:ad:a4:3c:0d:c4:b8:a6:61:8d:b6:
                    9a:b5:92:1b:33:16:7b:62:3e:cd:c0:9a:22:85:e2:
                    30:20:55:21:94:ef:56:b0:51:72:25:39:67:89:98:
                    fd:42:22:00:9a:e0:fd:09:75:ec:40:50:c5:f7:2f:
                    eb:24:5a:2a:5e:19:47:83:1c:62:c8:31:2a:01:b8:
                    9b:2e:f1:df:b1:48:32:b0:5d:35:ad:60:27:81:bd:
                    9d:c2:f5:1f:97:cd:df:77:b3:cd:37:bf:36:88:58:
                    33:50:e3:62:fb:5b:11:7c:5a:03:7e:8e:1f:96:76:
                    4c:0c:64:5d:b4:76:de:e4:9d:23:29:db:fe:fb:05:
                    69:97:fd:e9:9a:4c:7d:51:de:18:67:d0:28:62:e5:
                    f8:f6:5b:8a:41:c3:8a:a9:0f:3f:3e:d4:9d:ee:20:
                    89:18:f7:79:0b:59:cf:2a:7e:5d:f8:17:49:a2:8e:
                    19:de:0d:46:05:a6:3c:8e:ad:3d:26:49:c5:25:84:
                    78:ee:d9:5b:c7:86:56:db:36:bf:5b:db:ad:04:11:
                    c2:c5:2d:a0:54:e6:df:61:3c:21:64:05:0c:d1:34:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6A:07:7A:00:33:FF:CC:22:6D:8A:68:10:3E:A6:5D:9E:B7:DA:27
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/A2oHegAz_8wibYpoED6mXZ632ic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:53:18:73:17:66:df:85:26:4b:e4:db:05:f2:47:62:a7:
         86:85:a4:a0:08:51:7c:dd:da:c8:6f:eb:7f:6c:69:90:0b:dd:
         2b:48:e9:c0:be:66:92:6f:b2:8b:b5:cc:d9:5b:28:8f:d2:44:
         be:42:9e:5b:07:41:f6:7d:22:77:40:d9:df:d0:17:db:65:5d:
         ea:71:99:bf:f5:38:2e:e3:e0:82:01:e4:15:ed:7b:3d:18:95:
         98:25:12:ab:d9:3b:a1:75:f2:55:a4:37:b9:6e:a3:51:5f:dc:
         23:34:7e:80:93:03:c8:8d:5f:36:11:c2:13:f0:c0:ce:04:a6:
         2f:ab:44:41:10:61:19:ba:91:fa:3c:de:82:95:1e:17:78:4b:
         26:2e:c1:34:c5:a3:99:d8:20:15:e2:e5:62:d4:db:59:f1:0e:
         44:f5:6a:63:48:6f:6e:33:1d:fd:64:66:79:20:5a:51:9e:46:
         c5:a4:20:ee:cd:0f:12:4e:de:90:c0:dc:25:83:27:2d:6f:b9:
         a3:f4:1d:b1:97:90:93:d0:c0:f0:3d:2f:a5:4a:0d:30:41:c6:
         c5:0f:f0:6e:51:47:03:08:b8:e4:24:77:1c:6f:2d:83:e7:c7:
         23:c5:e1:89:5b:07:7f:90:c4:7e:8e:5e:0d:90:e0:2c:97:34:
         e5:be:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:44 2025 by rpki-client