Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/848/2d9lDEzuFI18CrQX7hoTuewn__4.roa
File:                     2d9lDEzuFI18CrQX7hoTuewn__4.roa (raw, json)
Hash identifier:          Cnz9oe/9Qfn+ZYagfz3mTFD9lPQnta4lx00L+sBQogk=
Subject key identifier:   D9:DF:65:0C:4C:EE:14:8D:7C:0A:B4:17:EE:1A:13:B9:EC:27:FF:FE
Certificate issuer:       /CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Certificate serial:       17
Authority key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/2d9lDEzuFI18CrQX7hoTuewn__4.roa
Signing time:             Sat 29 Mar 2025 05:36:54 +0000
ROA not before:           Sat 29 Mar 2025 05:36:54 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     23775
IP address blocks:        210.255.240.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F35A82A236BCED819088D4D90887E0B965C7CF
        Validity
            Not Before: Mar 29 05:36:54 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D9DF650C4CEE148D7C0AB417EE1A13B9EC27FFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:b5:9a:a8:2a:f7:01:fc:46:a0:63:c2:ce:
                    27:1a:b5:e5:b4:d7:82:e8:0f:bc:46:58:4a:2c:35:
                    30:35:43:68:3b:35:ba:0d:70:32:63:38:87:d0:96:
                    09:3c:a0:bb:de:f8:12:f6:03:a7:59:38:d1:5f:a5:
                    85:5d:e3:d8:29:1d:6a:a8:97:10:60:f1:d6:73:dc:
                    1e:29:c2:f1:62:1a:f1:ae:37:83:37:a0:86:56:e0:
                    e8:22:56:89:2f:ab:c5:65:37:b3:8c:ee:40:a5:55:
                    f7:7d:25:bb:dc:99:92:ce:10:b5:40:59:d1:4e:c1:
                    1b:0c:9f:bc:3f:79:5c:23:02:07:35:c8:64:6a:41:
                    cb:c8:f4:fb:71:7c:aa:b2:ab:8a:8c:9a:ed:06:68:
                    4f:e6:03:a7:5f:ad:c4:8b:43:99:9c:da:27:47:79:
                    0e:48:13:50:13:60:19:68:21:cc:8b:80:c4:f6:29:
                    21:47:c7:61:e9:18:3d:cd:0f:46:48:34:8e:3d:10:
                    72:f3:b6:39:32:78:e7:33:3d:de:95:f8:09:01:ad:
                    0b:11:ef:9b:b8:9b:5e:b2:cf:18:5c:be:df:89:57:
                    8f:5b:e3:f8:92:ed:4e:b4:73:8f:af:47:fe:6a:ee:
                    59:3f:63:35:a2:e6:10:76:61:10:86:d7:a1:17:d3:
                    45:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DF:65:0C:4C:EE:14:8D:7C:0A:B4:17:EE:1A:13:B9:EC:27:FF:FE
            X509v3 Authority Key Identifier:
                keyid:55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/2d9lDEzuFI18CrQX7hoTuewn__4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.255.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:a6:fd:fd:35:3a:b5:c3:1d:7b:a8:83:70:01:e2:b2:97:
         3d:f7:4e:88:54:1f:29:a3:ba:e6:f1:77:05:62:b0:7e:88:8a:
         13:5c:68:4b:ff:c5:05:91:4f:9e:8d:41:32:6c:7d:80:ae:ba:
         56:98:4a:d8:b1:c0:f7:91:be:62:1a:27:ac:c7:0e:4b:40:20:
         7a:6c:7f:d1:41:8e:2d:32:6d:38:d5:f7:59:f9:6a:e7:60:9c:
         86:2f:0a:a3:96:be:cb:b6:b2:fc:63:1c:14:d3:84:f7:fd:1d:
         13:d8:14:74:0c:27:21:b7:9b:84:2b:ef:6f:ce:05:5b:d6:eb:
         33:ea:af:6f:5a:c5:eb:3f:04:b3:f3:72:26:71:81:8c:5d:4d:
         78:af:01:6a:c1:7b:ce:75:79:57:c3:d8:31:31:7a:95:d9:e3:
         72:44:2e:5e:39:69:cc:91:09:e0:ae:49:b8:2b:bf:1b:3b:f7:
         1f:95:f1:43:7e:f7:3c:2a:d1:ae:90:79:fe:b3:58:78:16:2d:
         73:d7:9f:e2:69:00:2a:0a:1b:be:08:62:a2:25:36:6a:11:9b:
         6d:fa:8d:9f:75:a2:d8:74:63:e7:b9:a8:2c:ff:18:53:6c:6c:
         c7:8e:bc:1f:11:4b:1c:14:42:a6:27:8e:0d:69:e2:d8:bf:e8:
         cc:de:c4:86
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NUYz
NUE4MkEyMzZCQ0VEODE5MDg4RDREOTA4ODdFMEI5NjVDN0NGMB4XDTI1MDMyOTA1
MzY1NFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRDlERjY1MEM0Q0VFMTQ4
RDdDMEFCNDE3RUUxQTEzQjlFQzI3RkZGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM6NtZqoKvcB/EagY8LOJxq15bTXgugPvEZYSiw1MDVDaDs1ug1w
MmM4h9CWCTygu974EvYDp1k40V+lhV3j2CkdaqiXEGDx1nPcHinC8WIa8a43gzeg
hlbg6CJWiS+rxWU3s4zuQKVV930lu9yZks4QtUBZ0U7BGwyfvD95XCMCBzXIZGpB
y8j0+3F8qrKrioya7QZoT+YDp1+txItDmZzaJ0d5DkgTUBNgGWghzIuAxPYpIUfH
YekYPc0PRkg0jj0QcvO2OTJ45zM93pX4CQGtCxHvm7ibXrLPGFy+34lXj1vj+JLt
TrRzj69H/mruWT9jNaLmEHZhEIbXoRfTRXUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTZ32UMTO4UjXwKtBfuGhO57Cf//jAfBgNVHSMEGDAWgBRV81qCoja87YGQiNTZ
CIfguWXHzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODQ4L1ZmTmFncUkydk8yQmtJalUyUWlINExsbHg4OC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZmTmFncUkydk8yQmtJalUyUWlINExs
bHg4OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NDgvMmQ5bERFenVGSTE4Q3JRWDdob1R1ZXduX180LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNL/8DANBgkqhkiG9w0BAQsFAAOCAQEASy6m/f01OrXDHXuog3AB4rKXPfdO
iFQfKaO65vF3BWKwfoiKE1xoS//FBZFPno1BMmx9gK66VphK2LHA95G+YhonrMcO
S0Agemx/0UGOLTJtONX3Wflq52Cchi8Ko5a+y7ay/GMcFNOE9/0dE9gUdAwnIbeb
hCvvb84FW9brM+qvb1rF6z8Es/NyJnGBjF1NeK8BasF7znV5V8PYMTF6ldnjckQu
XjlpzJEJ4K5JuCu/Gzv3H5XxQ373PCrRrpB5/rNYeBYtc9ef4mkAKgobvghioiU2
ahGbbfqNn3Wi2HRj57moLP8YU2xsx468HxFLHBRCpieODWni2L/ozN7Ehg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:46 2025 by rpki-client