Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/OVElWUdCjTH2X936a4eK1Hws11U.roa
File:                     OVElWUdCjTH2X936a4eK1Hws11U.roa (raw, json)
Hash identifier:          RgQMhkfxxGUEmbft0zJj+jAnH7d7uJN7c9bP4aKtfqo=
Subject key identifier:   39:51:25:59:47:42:8D:31:F6:5F:DD:FA:6B:87:8A:D4:7C:2C:D7:55
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       057A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/OVElWUdCjTH2X936a4eK1Hws11U.roa
Signing time:             Fri 31 Jan 2025 01:39:49 +0000
ROA not before:           Fri 31 Jan 2025 01:39:49 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        112.139.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:39:49 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=3951255947428D31F65FDDFA6B878AD47C2CD755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:52:b8:07:19:28:90:a7:f6:c0:1d:a2:d5:
                    25:6f:83:a6:f8:94:06:79:56:58:d2:c4:e9:0e:ba:
                    de:b2:d8:36:ff:ea:92:9a:d9:3d:0c:81:45:9e:4b:
                    ce:79:6b:22:44:4a:f1:de:44:e7:29:98:61:58:6f:
                    f3:d2:ba:8f:04:18:6b:17:b3:5d:0d:75:20:c3:9c:
                    99:9f:a5:88:14:9b:08:e8:23:6f:5c:be:10:43:62:
                    d0:db:52:f8:cf:e3:2b:fb:65:59:2e:38:00:84:20:
                    69:e3:d2:b1:f1:b0:65:62:4d:f1:6b:9d:4e:ce:21:
                    e1:ad:10:e8:cc:ed:0b:3e:0b:36:58:f3:29:c8:28:
                    75:13:be:4b:5a:7f:ad:f1:70:6d:31:af:24:b1:5f:
                    69:08:00:e3:3b:a4:db:11:34:fc:64:80:dd:c8:2e:
                    af:c9:26:ec:8d:e3:04:4d:fd:c3:34:fd:5f:9c:6d:
                    ed:62:c9:33:32:8e:d1:f9:c8:6e:66:cc:cb:84:c9:
                    c2:2d:b5:5a:c4:71:a8:70:50:75:75:24:1c:e9:73:
                    e9:cf:8d:ba:87:e0:a3:69:3a:77:52:1a:18:50:bf:
                    35:5e:97:b5:37:d3:1c:0c:65:20:3f:56:3b:b5:1a:
                    10:7b:8e:8b:42:ec:b2:73:37:30:0d:00:da:df:1b:
                    88:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:51:25:59:47:42:8D:31:F6:5F:DD:FA:6B:87:8A:D4:7C:2C:D7:55
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/OVElWUdCjTH2X936a4eK1Hws11U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.139.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c1:f2:66:22:8a:4b:04:04:14:fa:bb:3d:00:14:7e:86:aa:6d:
         ca:3a:b8:3f:d0:7c:80:76:dd:26:c4:16:a9:bb:ea:1b:17:4d:
         a2:a2:f0:52:cd:6d:de:42:19:7b:8d:ab:0a:f6:40:79:b8:a8:
         8e:ed:70:4b:03:d2:e1:6f:45:0e:fe:e1:26:9e:db:8c:00:cb:
         06:1d:f9:a5:bf:8b:7c:86:b3:7d:c6:cb:99:e7:df:a6:9c:fe:
         20:09:05:c1:a4:da:2a:09:de:2f:d7:3f:1d:f7:85:d7:00:8c:
         f4:0b:3a:07:8f:53:ed:ec:3b:1b:83:20:eb:55:78:61:9a:01:
         3d:6d:46:65:7b:db:c1:9d:22:82:87:5a:76:e4:5a:9b:e3:74:
         6d:b4:a6:a9:9c:cc:ab:dd:e7:b9:ab:fd:74:91:fd:cc:0f:14:
         be:63:62:13:a2:04:11:69:c6:6e:11:b1:a1:43:25:a5:78:1b:
         67:49:83:d7:80:e9:76:fd:ca:16:5c:fb:47:2a:67:f4:51:50:
         88:a0:d2:ba:d1:58:a9:f2:86:95:35:13:2f:3e:8a:53:68:b9:
         d8:50:47:8e:02:1a:f0:d5:eb:5d:0b:cc:10:0e:e8:f1:02:50:
         5b:2a:38:83:82:a0:fc:bc:30:1e:80:c0:2d:c1:17:68:2a:48:
         3b:a2:32:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:32 2025 by rpki-client