Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/848/MEnI5JeU-yLosNAylWuX-9p8l3o.roa
File:                     MEnI5JeU-yLosNAylWuX-9p8l3o.roa (raw, json)
Hash identifier:          YVejS9sKolSrQfBkmb6m1PBCgj7G3eHrgV1Ya0lyUEg=
Subject key identifier:   30:49:C8:E4:97:94:FB:22:E8:B0:D0:32:95:6B:97:FB:DA:7C:97:7A
Certificate issuer:       /CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Certificate serial:       16
Authority key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/MEnI5JeU-yLosNAylWuX-9p8l3o.roa
Signing time:             Sat 29 Mar 2025 05:36:53 +0000
ROA not before:           Sat 29 Mar 2025 05:36:53 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     23775
IP address blocks:        202.70.176.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F35A82A236BCED819088D4D90887E0B965C7CF
        Validity
            Not Before: Mar 29 05:36:53 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3049C8E49794FB22E8B0D032956B97FBDA7C977A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:09:ae:bd:e4:4f:b8:dd:7f:a0:39:36:58:
                    75:80:07:09:f9:54:69:87:22:1b:2a:30:6d:3d:71:
                    da:e0:91:2d:d9:62:23:aa:3a:30:3f:34:72:89:4c:
                    52:db:1e:6f:ca:fc:b0:d9:cc:ff:3e:5b:90:e5:9d:
                    50:17:37:68:fd:05:e9:89:a2:83:fc:72:03:ce:a0:
                    59:f2:e3:33:f3:48:e2:cc:82:24:cd:18:76:13:41:
                    03:20:29:35:5f:f4:51:8c:10:d7:b7:61:a4:bb:31:
                    ff:d6:32:df:6e:88:0e:87:e4:e0:ea:a5:08:6d:34:
                    6a:67:cc:11:79:2f:5d:01:c5:8d:15:50:c5:b5:6d:
                    86:46:e5:c2:6a:51:67:43:c1:71:2e:d3:09:08:14:
                    08:2b:92:78:93:1c:b5:b3:e8:73:7b:50:d9:aa:2a:
                    b0:58:f4:2b:af:7e:4c:94:45:7e:62:a2:9d:1b:15:
                    f9:dc:b5:41:d0:23:e3:99:93:70:8c:b8:df:31:c5:
                    9a:48:29:6c:46:95:63:97:a3:48:35:d0:bf:56:b9:
                    fa:06:2b:64:d9:a2:05:de:16:7d:c1:33:a8:42:bb:
                    4f:dc:08:79:53:17:93:9a:68:4e:4d:3c:98:d8:95:
                    4f:d8:18:b5:2c:38:cc:80:95:43:bc:3c:5c:c1:28:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:49:C8:E4:97:94:FB:22:E8:B0:D0:32:95:6B:97:FB:DA:7C:97:7A
            X509v3 Authority Key Identifier:
                keyid:55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/MEnI5JeU-yLosNAylWuX-9p8l3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.70.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:20:23:c3:89:b3:ff:11:78:0e:70:01:e2:8d:c3:5c:b4:b1:
         4c:19:76:ea:f2:a9:a5:41:f6:ff:07:6b:39:e8:fd:d1:29:a1:
         25:cc:92:be:b6:9e:28:fb:05:dd:52:af:f9:77:1b:a4:16:ff:
         ef:8b:39:a2:73:c0:9b:8c:f9:82:6e:1b:3f:78:f7:2d:28:83:
         be:35:06:f0:e0:cf:c9:9d:b4:41:a0:bd:c0:b2:9f:a6:ae:a8:
         27:43:5e:a3:3a:2f:89:39:77:a3:71:ca:bc:26:57:1d:bb:be:
         95:7d:56:03:a8:12:a4:8f:ea:eb:13:5e:a9:48:4a:e5:ff:24:
         97:60:16:c3:70:88:4c:a2:45:04:c7:36:17:2c:37:0b:50:f4:
         af:f4:9a:cc:db:8c:c1:d7:5f:df:c0:39:70:3b:ba:5f:75:8b:
         c9:8e:ea:65:34:c5:0b:31:ba:25:2c:43:82:d4:a3:59:c8:f4:
         c9:63:57:15:22:75:7d:02:11:78:2f:1f:2b:8c:13:10:8b:d6:
         a4:03:22:19:6d:65:f6:ee:d1:48:e9:64:b1:7b:1e:fd:d4:d8:
         04:fa:aa:7f:c0:b8:68:ff:2d:15:5b:cd:29:2c:b3:d4:3e:87:
         27:35:f5:47:9a:d9:81:94:01:ca:19:9c:8a:e7:04:a5:eb:2e:
         c6:7d:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:01 2025 by rpki-client