Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/xlMZ6f5-YR6cVfb-ATOaV59fezE.roa
File:                     xlMZ6f5-YR6cVfb-ATOaV59fezE.roa (raw, json)
Hash identifier:          mydoNPOPL6gKSNq8m27I2wBszKQSUXZTp/M75NryGJM=
Subject key identifier:   C6:53:19:E9:FE:7E:61:1E:9C:55:F6:FE:01:33:9A:57:9F:5F:7B:31
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0574
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/xlMZ6f5-YR6cVfb-ATOaV59fezE.roa
Signing time:             Fri 31 Jan 2025 01:39:47 +0000
ROA not before:           Fri 31 Jan 2025 01:39:47 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        219.117.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:39:47 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=C65319E9FE7E611E9C55F6FE01339A579F5F7B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:ae:f3:9e:3c:49:16:66:44:60:18:26:2d:
                    ae:9a:32:a4:6c:f4:73:d4:c5:8f:8b:7a:1d:60:8f:
                    85:46:45:d1:ce:78:ae:43:99:9b:6b:17:d2:aa:49:
                    08:a7:9c:dd:21:13:26:e0:70:ff:57:a0:9d:4e:aa:
                    73:e1:da:ee:af:ef:39:17:75:37:bc:3f:ab:fc:05:
                    57:bc:b8:b2:f4:da:21:2a:83:10:77:79:24:66:36:
                    0c:86:84:db:bb:33:03:ed:fd:b6:d7:1c:7c:63:29:
                    bf:80:ed:d8:c2:c0:cd:12:67:3e:16:56:08:83:1f:
                    ea:39:9e:06:46:ae:74:21:96:32:15:00:58:6e:7e:
                    21:a1:75:26:f8:eb:1b:fe:77:90:8c:83:75:a6:90:
                    8b:96:cd:53:8c:d7:9b:2a:02:75:6f:3b:c4:c5:91:
                    21:79:71:5d:81:48:28:79:f8:c4:9f:48:70:69:7f:
                    71:1a:4b:9e:87:7e:b4:26:90:55:59:3f:e1:95:d2:
                    66:6d:4f:f7:19:96:3e:02:58:65:66:6c:8d:01:4d:
                    a2:f7:38:70:f0:d9:95:16:6b:45:78:19:1f:fe:9d:
                    25:e4:38:60:4e:90:e9:f3:5c:00:0b:38:01:c8:07:
                    bf:2e:f0:10:bf:55:2e:55:8e:5d:9e:4b:19:2b:6b:
                    ce:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:53:19:E9:FE:7E:61:1E:9C:55:F6:FE:01:33:9A:57:9F:5F:7B:31
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/xlMZ6f5-YR6cVfb-ATOaV59fezE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c3:e1:4f:10:96:98:65:2e:7f:15:66:ac:be:a1:08:ca:5f:92:
         9b:db:65:33:a9:b0:cb:db:1a:04:59:ca:b0:26:62:bc:34:13:
         84:3a:24:b6:14:75:b6:b6:c6:e1:31:85:39:bb:aa:18:f3:e3:
         87:dc:4d:0b:93:c9:cc:97:6c:9b:1e:2a:59:6e:89:c9:6f:57:
         d6:4f:57:fd:f9:1c:d9:11:38:d8:f7:ef:62:b5:2d:a4:62:a2:
         46:69:24:11:7c:bf:07:e8:46:75:dc:44:3c:cf:3a:cb:65:ee:
         97:70:e9:f3:a1:fb:8b:48:8b:b7:db:88:3c:9c:42:c4:d9:91:
         07:25:6c:4a:2b:40:82:16:cd:af:e4:e2:b2:c0:8b:d4:0c:49:
         af:07:df:47:75:3e:e1:9b:3a:23:86:c0:6b:b5:2e:2b:4a:16:
         b4:ef:e2:eb:c6:a8:0c:ba:d6:28:11:17:c0:ca:58:93:d3:b8:
         24:28:f2:42:30:bd:98:18:70:d5:71:a7:b4:70:4e:de:66:1d:
         10:f1:30:60:db:df:72:eb:15:de:17:9e:a3:12:fb:df:59:45:
         9d:cc:53:f5:af:ec:7e:97:ab:03:20:59:8e:89:37:c6:7c:19:
         a5:17:48:05:b6:41:58:79:bd:28:bf:8b:87:25:0a:d9:76:68:
         cf:c5:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:43:45 2025 by rpki-client