Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/re1T1gWRqXqvmt4z7Eaq_m5S-Cc.roa
File:                     re1T1gWRqXqvmt4z7Eaq_m5S-Cc.roa (raw, json)
Hash identifier:          Hj9sHsHxQhDpfCbi24l4bqoM++fO+wHCrJL0m0eR328=
Subject key identifier:   AD:ED:53:D6:05:91:A9:7A:AF:9A:DE:33:EC:46:AA:FE:6E:52:F8:27
Certificate issuer:       /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Certificate serial:       03
Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/re1T1gWRqXqvmt4z7Eaq_m5S-Cc.roa
Signing time:             Thu 16 Jan 2025 07:54:31 +0000
ROA not before:           Thu 16 Jan 2025 07:54:31 +0000
ROA not after:            Fri 16 Jan 2026 07:42:57 +0000
asID:                     0
IP address blocks:        210.134.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 21:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
        Validity
            Not Before: Jan 16 07:54:31 2025 GMT
            Not After : Jan 16 07:42:57 2026 GMT
        Subject: CN=ADED53D60591A97AAF9ADE33EC46AAFE6E52F827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:e8:58:bf:72:d7:14:d4:5c:ae:a7:58:30:
                    b7:35:a2:b1:c4:08:05:94:63:d6:f1:3c:6a:70:3c:
                    a1:51:f3:71:1a:62:b1:2a:33:5b:9a:7c:6a:72:b5:
                    57:59:a2:32:c3:e2:ac:fb:a2:60:3b:68:8a:76:6e:
                    1b:36:b3:a8:04:bd:6a:3e:e3:69:62:5c:bc:2a:62:
                    08:86:45:f9:2b:93:5c:e0:de:58:c0:6d:99:20:9b:
                    29:35:8d:16:ef:9c:fe:5d:de:c7:a3:a3:8f:e5:3a:
                    06:d1:28:eb:0f:f6:29:30:fb:06:50:4a:c4:da:e1:
                    70:20:30:c6:b9:5a:40:a6:c0:04:b2:c8:84:97:4b:
                    df:c1:b3:2e:e6:26:6e:a5:26:99:e5:39:0f:5d:56:
                    63:a9:51:68:6b:c8:7d:e1:e9:76:5e:93:de:30:25:
                    91:b6:93:73:d9:9f:67:f4:e4:a8:50:57:23:38:ee:
                    e9:51:41:c3:41:a8:a4:8f:bb:cc:ca:6f:bf:48:8a:
                    4e:99:ec:54:32:55:6f:50:ef:9a:57:f3:80:ac:7c:
                    a5:94:cb:fd:5a:52:66:99:49:2d:ac:2b:cf:4c:69:
                    ca:4a:73:cf:f8:25:94:5d:48:7e:85:21:ab:5c:bf:
                    5a:fa:ba:f9:34:86:c3:7f:06:e1:71:ec:97:c7:d9:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:ED:53:D6:05:91:A9:7A:AF:9A:DE:33:EC:46:AA:FE:6E:52:F8:27
            X509v3 Authority Key Identifier:
                keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/re1T1gWRqXqvmt4z7Eaq_m5S-Cc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.134.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:7a:86:1c:7f:42:25:2a:b1:d1:0a:b4:3e:96:d6:cb:54:
         ab:cf:66:61:6a:ea:5d:87:7d:36:7c:3f:06:c7:2d:50:da:50:
         54:6a:07:f5:1a:61:54:a1:86:ee:66:74:7f:89:e5:20:ef:5b:
         f3:80:28:b6:a1:5e:4b:66:e9:bc:e5:08:62:5d:fd:cb:28:46:
         17:45:39:81:f8:cf:93:75:d3:d2:1d:c9:0e:1d:dd:c4:31:20:
         af:2a:c2:f9:6c:b9:46:5c:1d:4b:44:56:89:75:75:b6:bb:1c:
         0a:f0:89:12:dd:33:31:47:b1:8a:be:8a:a7:42:a8:57:fc:13:
         d0:0a:c3:8e:28:17:e0:c4:e1:1d:26:f2:50:39:fe:31:1d:a1:
         2e:a9:05:a9:b5:ee:9d:ca:5f:b0:f9:c8:28:8f:bf:0e:42:fa:
         43:a9:3f:a1:7f:b8:3f:f0:02:4a:9d:6f:69:14:66:94:4e:ca:
         84:a5:ec:65:77:ee:e2:d2:94:4d:5d:ef:05:7e:47:53:02:bc:
         db:75:79:96:30:77:87:e6:55:ca:d3:fb:31:7c:de:76:39:44:
         e7:af:77:da:9a:4c:0d:05:92:df:2c:49:e4:89:ad:97:a6:be:
         81:d3:69:e1:75:75:d1:20:88:c2:a2:2b:da:58:ab:a2:d8:1f:
         bf:09:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:26:07 2025 by rpki-client