Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/JJ5CZDRc0Z1mUvIYhInUD8__lec.roa
File:                     JJ5CZDRc0Z1mUvIYhInUD8__lec.roa (raw, json)
Hash identifier:          N4XyR9WmCTzHb36tffPPCAOa7AylPhDrNgTVHoduSE0=
Subject key identifier:   24:9E:42:64:34:5C:D1:9D:66:52:F2:18:84:89:D4:0F:CF:FF:95:E7
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       3F
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/JJ5CZDRc0Z1mUvIYhInUD8__lec.roa
Signing time:             Tue 01 Apr 2025 01:28:22 +0000
ROA not before:           Tue 01 Apr 2025 01:28:22 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     17958
IP address blocks:        220.247.184.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Apr  1 01:28:22 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=249E4264345CD19D6652F2188489D40FCFFF95E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:e3:35:c9:3d:d1:2c:60:ef:45:90:30:d7:
                    52:d7:48:71:82:2a:90:e1:32:85:a2:69:9d:bc:0b:
                    ab:05:1a:7b:25:0e:fd:3b:ea:42:eb:3e:22:e5:4d:
                    f3:5e:54:61:3d:ca:14:dd:13:61:9c:ef:bf:a8:8a:
                    7b:ab:6b:d8:07:51:fc:ba:74:9b:f9:f9:75:ec:6a:
                    61:04:83:67:33:f9:a6:34:05:99:c5:07:8e:30:53:
                    16:69:c6:39:13:86:fd:03:b1:85:6f:23:01:40:f5:
                    47:78:8d:33:e8:01:90:38:16:62:48:71:b6:88:2a:
                    cd:76:ef:b9:8e:3b:73:ac:cd:d9:2d:43:2c:26:af:
                    07:db:f5:b2:4d:4a:23:56:13:9e:43:75:a0:95:49:
                    7e:16:04:8b:e7:0f:bb:fd:e3:fd:5a:57:a8:7b:cb:
                    dc:17:28:0c:22:09:fa:4b:d8:ce:ba:21:58:9a:5a:
                    6c:f5:54:9d:3e:e3:84:57:e7:62:51:5d:d4:55:eb:
                    85:dd:c0:c9:9f:98:9d:90:64:ac:dc:13:38:29:09:
                    d3:1c:86:fa:6b:88:d5:c1:27:1c:a9:9d:31:d1:f6:
                    47:d4:78:6a:05:4d:7c:83:fb:c1:ee:96:28:60:bb:
                    5e:1d:4c:34:a0:1a:a2:19:6a:9d:0c:07:d1:3a:3b:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9E:42:64:34:5C:D1:9D:66:52:F2:18:84:89:D4:0F:CF:FF:95:E7
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/JJ5CZDRc0Z1mUvIYhInUD8__lec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.247.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:c8:21:e6:b6:86:c7:91:ff:e9:06:4a:c5:e8:06:4d:82:6a:
         0b:c9:39:62:0a:aa:7c:6b:ae:37:09:e9:f2:4d:70:7f:14:be:
         d8:08:b7:a1:5a:77:74:a5:d0:25:ca:ea:21:6f:ce:15:9d:8a:
         09:69:1b:ce:6e:d9:07:3d:92:d6:00:dc:16:04:de:4c:a4:22:
         8c:34:be:5b:16:75:fa:8a:b2:d2:1d:b3:22:63:22:2e:27:86:
         b9:f0:b7:2c:90:1b:0b:31:19:1d:3b:c4:03:61:59:40:fa:01:
         28:6e:21:6d:89:49:d9:19:61:da:6f:11:af:39:81:41:d4:6c:
         2f:d1:72:d4:67:09:ba:3b:6f:bb:14:0d:73:da:d6:89:8c:c3:
         62:96:38:cd:88:2d:08:86:3d:08:9b:68:e5:d1:6d:fa:73:d7:
         bf:a5:17:28:f7:4d:05:91:4a:02:96:9d:71:3d:f4:7a:f6:48:
         2b:ca:05:5d:03:06:57:6d:04:66:55:8c:09:5d:5e:0b:81:21:
         91:d5:65:d0:d1:be:6d:c5:57:20:57:1f:50:a7:63:d3:08:ba:
         60:04:0e:1d:81:38:1b:e7:c1:16:49:44:2b:ca:31:1b:30:4c:
         17:8d:d0:e4:0c:de:14:1f:20:ed:84:3b:07:02:4d:99:e0:b2:
         57:1c:62:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:39:50 2025 by rpki-client