Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/zQyLXARREiGBA0Fg6PJ_ofr8q6w.roa
File:                     zQyLXARREiGBA0Fg6PJ_ofr8q6w.roa (raw, json)
Hash identifier:          i24jE9BMalcWM0QQqgecJd1MNdnexL6q8DDlW7Jqxwc=
Subject key identifier:   CD:0C:8B:5C:04:51:12:21:81:03:41:60:E8:F2:7F:A1:FA:FC:AB:AC
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       1B
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/zQyLXARREiGBA0Fg6PJ_ofr8q6w.roa
Signing time:             Sat 29 Mar 2025 06:00:59 +0000
ROA not before:           Sat 29 Mar 2025 06:00:59 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     18129
IP address blocks:        27.109.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Mar 29 06:00:59 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=CD0C8B5C0451122181034160E8F27FA1FAFCABAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:5b:0b:85:88:7e:04:f1:91:80:a3:3b:b2:
                    c4:02:83:ba:90:57:ee:fb:e2:fc:8f:ee:26:43:93:
                    d9:37:1b:a1:e2:d3:e7:a6:f2:b2:e7:69:13:71:a3:
                    e5:45:5b:ce:64:6f:a6:7b:94:f5:50:09:33:3d:be:
                    41:57:75:3e:f8:fe:5c:b7:09:20:26:40:64:94:e1:
                    e8:62:dd:c3:60:52:ae:75:58:b4:b6:da:29:c5:a1:
                    dd:4c:69:ff:5c:71:2c:25:fa:02:66:eb:be:b9:32:
                    5e:64:6d:53:ed:88:81:e1:7f:15:16:d5:22:26:c4:
                    ba:b2:47:13:b7:90:4f:df:cc:e4:0c:ae:5f:d8:63:
                    ff:38:1f:6c:fc:a0:95:dc:db:f5:7c:f8:f0:27:e9:
                    05:00:5b:15:58:52:db:7e:d6:ae:36:36:88:a7:50:
                    15:4e:63:9b:b9:e8:b6:5a:9b:ab:f5:09:3e:32:49:
                    8d:57:28:03:a4:0f:05:5f:16:19:e8:58:8b:71:7b:
                    3c:70:bf:99:26:64:45:a2:f3:82:52:b1:2f:49:87:
                    02:6f:54:6e:93:95:f5:b4:57:04:25:8d:1b:94:95:
                    32:f7:85:65:b1:23:64:61:3a:08:64:35:8c:ca:1c:
                    3a:8a:b2:0a:8c:0a:df:f8:ec:e4:f3:cf:c7:bc:06:
                    6d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0C:8B:5C:04:51:12:21:81:03:41:60:E8:F2:7F:A1:FA:FC:AB:AC
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/zQyLXARREiGBA0Fg6PJ_ofr8q6w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.109.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:ce:2b:50:1a:f2:39:ad:b3:a6:9a:c9:05:2b:2c:2f:11:f6:
         e0:c7:a9:e1:ab:5c:e1:7b:27:08:03:93:e8:8b:df:c5:76:a1:
         2f:b0:79:de:dc:ac:7b:13:7a:9d:d0:0b:0a:a9:22:2d:34:3d:
         10:fb:15:d8:73:7d:3f:a0:6f:43:a7:bc:9e:8b:41:57:b8:2e:
         d5:b6:49:4e:6a:f1:be:bf:b1:72:92:a8:0b:56:6b:d7:3c:c5:
         b8:7a:87:db:09:e7:7f:57:4d:99:ef:d8:43:fa:96:ea:66:b0:
         66:3f:fd:3d:06:83:95:92:e5:98:08:14:3c:21:b5:97:13:fb:
         a8:35:01:6b:00:a5:21:07:b2:a8:9d:c3:00:23:db:29:63:a6:
         81:2e:49:55:1b:78:55:4c:35:20:9d:11:6b:29:15:f1:98:19:
         ad:52:97:39:db:44:a4:85:46:2f:58:b4:ac:c9:35:bd:b2:1f:
         4d:d2:9e:b7:6a:c0:bf:d8:44:a1:a5:9c:fd:7d:c0:cd:c5:cc:
         37:ec:af:70:74:3f:d4:27:17:74:17:b9:b1:25:a3:e3:02:86:
         f2:c9:18:1b:39:15:dc:15:83:81:a7:37:e5:2b:4a:16:5a:c8:
         e9:97:fe:fa:62:40:20:eb:d6:1e:7a:87:1d:22:bf:42:f1:2d:
         65:90:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:01 2025 by rpki-client