Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/49oOQXu_lO4Io7QiKBITHtemLxU.roa
File:                     49oOQXu_lO4Io7QiKBITHtemLxU.roa (raw, json)
Hash identifier:          RFe99WP0iLF6bMnw3m9LOnhe1XNRTJGan28z+1I4oPE=
Subject key identifier:   E3:DA:0E:41:7B:BF:94:EE:08:A3:B4:22:28:12:13:1E:D7:A6:2F:15
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       56
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/49oOQXu_lO4Io7QiKBITHtemLxU.roa
Signing time:             Thu 01 May 2025 01:28:46 +0000
ROA not before:           Thu 01 May 2025 01:28:46 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     14618
IP address blocks:        27.131.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: May  1 01:28:46 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=E3DA0E417BBF94EE08A3B4222812131ED7A62F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a8:c5:b3:db:c5:7e:31:8e:3c:66:04:ac:ce:
                    ae:b5:25:c1:f4:f8:6f:3f:bc:8e:d0:7f:03:f7:09:
                    a0:c2:48:20:b0:bd:f6:f0:63:43:e5:c5:0c:2a:7f:
                    29:df:12:6c:79:05:06:4a:6b:48:0f:f7:91:10:4c:
                    3d:00:45:68:cd:d9:47:06:80:39:b4:ab:41:bd:06:
                    64:c5:b9:07:72:9e:dd:ab:3d:90:70:2e:7e:79:28:
                    8a:d7:dd:e5:67:5d:45:e2:43:b3:b2:32:28:8d:d3:
                    57:53:54:8d:1d:1f:70:0b:c8:98:90:0e:d4:f5:60:
                    33:e5:59:7f:70:d7:cb:f8:da:41:07:95:f3:72:28:
                    40:3e:dc:29:04:98:30:a1:df:bb:81:33:82:1c:a6:
                    d0:71:2d:28:51:74:c6:00:b2:7a:24:60:34:58:52:
                    bb:0b:11:d7:89:ff:1f:da:f7:90:a9:8c:82:df:08:
                    69:ac:6f:d4:02:35:90:40:a6:56:d2:f8:d2:18:30:
                    b0:97:8b:c7:26:83:65:c0:49:0f:a0:cb:a7:7e:7b:
                    2e:3b:0e:a9:db:36:cb:32:ac:55:cd:65:89:48:b2:
                    90:68:39:6f:75:74:e7:a3:60:0c:77:36:9f:e8:63:
                    57:76:6c:22:ea:6e:7b:e3:0a:a0:9a:50:8e:d9:b6:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:0E:41:7B:BF:94:EE:08:A3:B4:22:28:12:13:1E:D7:A6:2F:15
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/49oOQXu_lO4Io7QiKBITHtemLxU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d8:c9:69:0b:c9:42:dd:ae:93:e7:f6:57:b6:19:94:ce:d0:
         61:9d:1f:50:8d:9c:13:f5:3f:dc:da:94:8b:9f:0f:b7:8c:e6:
         2a:5c:1b:d2:78:83:57:52:e4:76:24:d4:14:d8:93:c4:d2:33:
         a3:fa:8f:f3:b8:06:b3:3b:dc:5d:dc:55:35:9f:72:aa:1a:b4:
         3a:6e:06:e4:ec:5c:da:c4:4f:f3:34:8b:62:59:3f:ec:a0:c6:
         71:e2:49:22:f8:2e:66:72:47:10:9c:79:a0:7b:22:cd:b8:dd:
         ce:87:44:eb:56:72:c7:92:45:8c:eb:30:95:99:f2:03:dd:f6:
         4a:1b:9f:e9:36:f5:8d:2e:37:43:50:53:7b:bc:eb:25:57:6f:
         a1:6d:62:86:64:8b:dd:e3:a4:fd:d8:2d:be:5d:e9:2d:1f:27:
         91:37:d7:ad:19:ef:a9:71:2f:bb:75:f4:a0:c9:29:cc:55:b1:
         65:5a:8f:28:9a:4c:4f:c4:83:56:51:e2:0c:ec:35:21:43:16:
         4b:e6:c1:ab:d9:9a:fd:ff:c8:3c:54:d2:eb:e4:f9:80:e4:79:
         12:d3:0c:20:44:eb:af:a4:6a:7a:b0:c1:d8:d7:9d:af:cd:13:
         91:bb:2c:62:89:25:7f:36:89:cd:bc:89:87:f0:1d:21:6a:b5:
         74:b1:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 17:22:07 2025 by rpki-client