Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/yz1eZDQzu_IoiEe-xaJXKhkzgHo.roa
File:                     yz1eZDQzu_IoiEe-xaJXKhkzgHo.roa (raw, json)
Hash identifier:          mSMss7lrAMVrY7SM+fqQDVJaPoYUW7929dRegUbhobM=
Subject key identifier:   CB:3D:5E:64:34:33:BB:F2:28:88:47:BE:C5:A2:57:2A:19:33:80:7A
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       5E
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/yz1eZDQzu_IoiEe-xaJXKhkzgHo.roa
Signing time:             Thu 27 Mar 2025 04:51:08 +0000
ROA not before:           Thu 27 Mar 2025 04:51:08 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     4717
IP address blocks:        202.249.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Mar 27 04:51:08 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=CB3D5E643433BBF2288847BEC5A2572A1933807A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:d2:15:6d:b7:7a:80:e7:7e:02:98:92:bc:
                    e1:7b:e0:f7:1e:b9:4a:7c:f4:25:59:16:cf:26:d0:
                    39:a9:08:91:82:ff:5c:b8:28:5e:16:a2:b9:61:0c:
                    7d:1c:7a:e8:6f:a2:59:44:0b:1b:e1:0a:32:43:44:
                    14:e1:37:13:63:22:fc:59:63:a0:00:92:47:21:62:
                    0b:5c:86:a9:16:dc:03:f9:1a:39:da:5d:c8:ff:74:
                    20:b4:a3:97:1b:5b:ea:3e:26:95:c5:98:70:e2:d3:
                    53:ca:08:ed:dd:1a:bb:78:81:9f:dd:d2:b7:2e:90:
                    03:13:7a:8e:3e:d8:ea:76:7f:24:e6:0a:8e:40:18:
                    e3:e7:fe:3a:b8:48:9a:b1:4d:43:d3:3a:13:9e:7c:
                    6b:78:28:69:d1:94:30:5e:c7:27:4c:18:91:9d:e3:
                    b1:c8:e6:a0:04:a9:eb:6a:12:a8:b6:13:99:2d:71:
                    0d:fa:64:72:2e:5a:c4:c2:0a:fa:b2:2a:08:b2:fb:
                    a4:89:66:08:0d:8f:ce:21:46:4b:6e:a6:60:b0:b6:
                    0e:d5:4d:d0:cb:32:78:87:9e:cb:e7:7e:8d:3b:2c:
                    5c:4f:7d:65:00:51:bf:2c:aa:0a:76:3c:28:02:fd:
                    32:87:27:1e:c3:29:fd:85:3f:a1:07:ce:4c:41:24:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3D:5E:64:34:33:BB:F2:28:88:47:BE:C5:A2:57:2A:19:33:80:7A
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/yz1eZDQzu_IoiEe-xaJXKhkzgHo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.249.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:49:bd:ff:73:18:6b:85:98:73:7c:2f:38:29:1d:35:9d:
         63:ab:bf:4f:43:d1:94:32:26:2e:45:4e:76:43:8e:65:76:c4:
         e3:ce:8b:1e:4d:0e:ce:21:bf:10:29:7f:b2:02:e0:eb:7a:9f:
         d3:3d:40:47:0b:c8:2a:d5:74:54:2e:84:72:38:65:4e:9d:b6:
         d1:ed:fe:bf:0b:e0:0f:66:41:9d:29:0c:9a:77:42:2b:1a:ca:
         c4:1b:94:9a:94:66:8c:85:22:23:d6:e3:a5:52:81:e8:b1:a0:
         dc:fd:73:97:48:e2:7a:1c:92:7c:14:5e:6d:44:a1:a0:5a:d9:
         0f:da:d2:af:0b:6e:9d:06:ee:14:af:72:7b:f7:39:da:74:22:
         8d:b4:b6:b1:be:83:53:37:09:7a:e5:54:e9:a1:20:35:15:6b:
         11:ab:68:23:98:a7:f0:61:98:88:ad:89:48:c1:27:cc:b6:83:
         9a:43:67:f2:9a:54:4a:ee:42:e2:09:c8:fd:35:ea:e5:fd:34:
         7d:a0:26:38:b8:c8:e3:b6:e3:10:25:05:97:6c:b6:fd:c1:bd:
         fa:b1:9c:22:5c:03:c0:3b:00:67:72:6f:90:67:60:72:b2:20:
         e1:fc:c6:75:19:25:83:9b:65:bf:53:29:46:9d:04:32:12:c8:
         43:a7:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:51 2025 by rpki-client