Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/tSnOZys5ATuRvsS7KDdv0b552x4.roa
File:                     tSnOZys5ATuRvsS7KDdv0b552x4.roa (raw, json)
Hash identifier:          bowoxUgOj88mSY9e7CCqHKux1MlulCt6wOcdtgPM1YY=
Subject key identifier:   B5:29:CE:67:2B:39:01:3B:91:BE:C4:BB:28:37:6F:D1:BE:79:DB:1E
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       1E
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/tSnOZys5ATuRvsS7KDdv0b552x4.roa
Signing time:             Sat 08 Feb 2025 06:48:22 +0000
ROA not before:           Sat 08 Feb 2025 06:48:22 +0000
ROA not after:            Fri 06 Feb 2026 03:05:32 +0000
asID:                     23831
IP address blocks:        223.27.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Feb  8 06:48:22 2025 GMT
            Not After : Feb  6 03:05:32 2026 GMT
        Subject: CN=B529CE672B39013B91BEC4BB28376FD1BE79DB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4d:49:24:9e:1e:de:3c:b0:06:5b:fb:69:06:
                    a9:ac:73:9e:5f:df:98:93:f8:48:fb:7b:b6:bb:f7:
                    f6:9d:39:4b:d5:55:e4:94:d0:9c:96:ff:ec:2d:18:
                    dd:5d:a6:4f:f3:d7:aa:23:1d:76:b6:20:43:ca:53:
                    4f:3a:15:50:18:4d:4f:02:b7:d1:e5:16:63:2c:49:
                    ab:06:b5:bb:1c:46:8f:46:4d:38:0d:62:67:62:ec:
                    41:9e:76:b0:92:8a:1c:af:78:10:62:73:48:bf:35:
                    8b:c4:28:12:7b:84:4d:5d:e4:cc:15:4d:92:ec:24:
                    27:cc:57:61:a5:05:91:37:07:f4:62:3b:e8:83:e0:
                    d9:bb:a5:66:75:74:70:d3:0c:91:d7:47:5a:dd:30:
                    44:6b:86:22:30:a8:b8:58:24:2f:c8:0a:9c:63:00:
                    8e:1d:b2:98:3d:d6:44:b1:8c:69:86:43:9b:e4:98:
                    a2:7e:2d:89:cc:04:09:84:e8:0a:43:dc:55:73:3d:
                    11:28:ef:f8:e2:55:0e:db:d3:df:48:a7:ba:31:8c:
                    12:fd:db:0e:15:4f:31:65:d1:0c:20:58:03:16:35:
                    a8:9e:dc:ee:2c:be:9e:2b:26:5b:ff:d6:e0:7d:ba:
                    17:97:69:72:43:38:89:92:04:da:c2:a6:e4:0d:7b:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:29:CE:67:2B:39:01:3B:91:BE:C4:BB:28:37:6F:D1:BE:79:DB:1E
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/tSnOZys5ATuRvsS7KDdv0b552x4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:66:83:6a:ac:24:34:8e:a4:da:28:eb:e0:11:3a:b8:83:f0:
         4c:ef:3b:60:e6:8f:b9:de:fc:67:c5:e8:61:6a:90:50:7f:26:
         8f:a4:ab:f6:1d:99:3f:64:d6:25:55:bb:ce:b8:3c:4a:22:8d:
         0b:65:b9:a8:44:33:7c:39:d5:7e:1e:35:9f:32:b0:73:a4:91:
         a7:56:6f:3e:04:75:7c:19:ea:67:83:cb:01:aa:05:95:ea:27:
         0e:ea:d1:4d:92:ee:ed:7d:f6:a1:22:56:1e:ea:00:9c:9f:e8:
         65:de:98:6e:01:70:3b:7a:02:a6:1d:2c:30:be:76:ef:05:9e:
         6c:78:04:29:58:c7:8e:6c:32:d2:3f:ad:29:c7:9d:3e:4d:82:
         db:ac:f9:bc:2c:c2:75:9e:95:3f:a5:3e:e8:23:3d:a9:c6:91:
         a2:8c:2e:04:10:96:d9:13:ca:57:8b:cc:bc:3a:28:1b:1d:17:
         56:18:d3:a4:de:4d:e6:94:1b:93:ec:ae:c2:5a:ca:14:59:cd:
         f9:c9:ef:59:f7:4d:a4:aa:94:bc:6a:09:c3:ac:e9:04:93:0b:
         00:d6:f5:9b:b9:6a:b2:49:50:46:02:e1:fd:07:c4:79:26:89:
         07:38:ee:a3:cf:3f:1f:9c:3d:10:17:4c:85:5c:f5:6a:9f:de:
         b1:7c:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:02:02 2025 by rpki-client