Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/jDSFh8EiU5N_JFpfZvZnB30Te9A.roa
File:                     jDSFh8EiU5N_JFpfZvZnB30Te9A.roa (raw, json)
Hash identifier:          /IDq3TpyD7UdXMgGh1X+SPjIU8/1so8Ugfo5ElJia/U=
Subject key identifier:   8C:34:85:87:C1:22:53:93:7F:24:5A:5F:66:F6:67:07:7D:13:7B:D0
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       84
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/jDSFh8EiU5N_JFpfZvZnB30Te9A.roa
Signing time:             Thu 01 May 2025 01:32:00 +0000
ROA not before:           Thu 01 May 2025 01:32:00 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        153.127.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May  1 01:32:00 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=8C348587C12253937F245A5F66F667077D137BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:40:35:f2:a3:91:b8:e5:e6:66:2b:ef:cd:
                    1f:26:bd:3a:8e:50:d8:7a:5d:80:bf:2a:5b:72:01:
                    b5:31:1a:50:26:47:0b:3b:4b:04:d6:95:8d:5e:68:
                    15:a3:0c:75:57:25:78:62:d9:f8:2a:08:8d:58:c8:
                    17:f2:4d:c3:23:07:68:af:0a:75:d3:33:2c:1d:70:
                    31:87:e0:c4:e2:a5:24:b0:af:0c:1c:68:73:13:f0:
                    f1:6d:64:6a:9f:8d:20:30:2f:dc:14:e6:75:f9:f5:
                    fb:02:52:a9:97:66:fc:32:ac:72:e7:0c:5b:97:31:
                    92:81:27:06:64:45:f7:6e:ae:02:a1:c5:92:61:56:
                    12:70:bc:e3:41:03:4b:a7:d4:1e:58:a6:1c:45:c0:
                    73:74:32:50:69:c4:87:6a:69:3a:51:e4:a7:be:ba:
                    ac:18:25:70:1e:ed:9c:51:9f:a5:bf:f7:cc:e4:03:
                    ba:5e:59:98:8b:80:40:ea:59:9a:01:be:5e:05:43:
                    d0:9c:e7:0b:d1:4f:1e:ae:6f:6f:a7:a0:bc:38:61:
                    a5:dd:56:7f:3e:d3:ef:54:2d:10:f3:60:da:37:da:
                    e1:22:40:50:fb:e1:8f:e5:b1:ca:08:53:1e:55:63:
                    39:b3:47:c5:f8:e0:d6:2b:e8:e4:af:1c:5e:26:21:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:34:85:87:C1:22:53:93:7F:24:5A:5F:66:F6:67:07:7D:13:7B:D0
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/jDSFh8EiU5N_JFpfZvZnB30Te9A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         79:70:a6:4f:25:2d:e0:71:06:54:f7:eb:9a:aa:c2:61:fb:ad:
         41:74:07:e2:0c:cb:b9:d7:28:06:dc:b0:48:02:08:25:be:96:
         c4:99:8c:96:75:c6:76:17:88:22:13:ac:fb:6a:7f:d6:3b:d6:
         ee:65:f7:7b:b0:0f:64:40:b2:d1:60:dd:f2:54:4e:12:72:ee:
         f3:7b:59:c5:6b:2a:72:ce:86:ee:b3:79:01:ef:aa:2b:46:de:
         2e:9c:74:38:96:c3:de:36:4b:f9:e0:3b:2a:b2:2c:bc:34:83:
         39:da:4a:bd:38:70:e0:e3:95:10:bf:9f:68:07:cc:32:b8:84:
         c8:59:c3:b1:f1:31:58:40:be:4c:1a:79:c7:42:e5:b3:62:12:
         e3:7f:26:a3:e8:c4:44:ef:ee:cb:d4:b9:3f:27:c2:21:86:96:
         81:46:6e:2d:7e:93:32:ef:29:52:a7:af:95:d0:30:38:41:37:
         12:29:e0:9e:d3:60:ac:3b:a7:58:95:e2:0a:a5:a4:45:03:a0:
         6c:73:99:bf:68:28:b4:7f:93:02:0e:96:64:7c:cc:a6:5a:84:
         e3:05:5f:41:8a:67:6e:5d:c4:67:84:48:67:a5:36:6a:8d:ad:
         f4:64:85:ae:06:62:41:c9:2b:b7:2a:81:e7:40:46:52:81:1b:
         3d:24:d5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:15:32 2025 by rpki-client