Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ROcmlewmgTfY5NQ2NFtECTo9cJg.roa
File:                     ROcmlewmgTfY5NQ2NFtECTo9cJg.roa (raw, json)
Hash identifier:          UZcZC3T13dH+f/VuthvlaiD3jmtVWL+xufkzkWH7K54=
Subject key identifier:   44:E7:26:95:EC:26:81:37:D8:E4:D4:36:34:5B:44:09:3A:3D:70:98
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01AC
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ROcmlewmgTfY5NQ2NFtECTo9cJg.roa
Signing time:             Wed 07 May 2025 03:15:23 +0000
ROA not before:           Wed 07 May 2025 03:15:23 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2497
IP address blocks:        133.110.248.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 22:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: May  7 03:15:23 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=44E72695EC268137D8E4D436345B44093A3D7098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:f0:8e:50:6a:fb:b5:5b:c6:64:29:44:6b:
                    d7:7d:af:c6:3a:0a:4e:d2:22:ae:04:87:75:df:a6:
                    79:f6:d7:66:46:bb:f6:95:c1:d7:87:6b:5b:ea:65:
                    55:41:db:5f:cf:76:32:ba:db:09:6a:57:83:b0:49:
                    d7:de:9c:8d:19:ee:ce:3f:71:92:01:06:93:e1:00:
                    77:99:37:10:bf:34:ab:13:fd:7c:76:98:81:55:a3:
                    8f:75:f0:cc:78:e1:df:b0:51:15:65:52:78:28:7a:
                    b7:38:cf:a7:58:bb:d2:46:cc:ea:33:83:db:1d:0e:
                    e8:83:22:e0:06:aa:25:62:70:54:4d:35:97:8f:7c:
                    3e:60:f5:d0:cb:8d:bf:1a:15:eb:1f:56:40:df:8d:
                    6f:fc:a6:c6:39:d2:a1:95:78:58:71:2e:15:80:40:
                    9d:ea:3f:0d:6a:93:55:9e:01:b0:4d:36:47:27:f3:
                    e7:e2:ff:63:f8:65:6f:78:96:f5:3a:65:70:65:06:
                    ac:85:8d:2d:e8:57:97:e2:74:ed:43:38:91:aa:02:
                    f0:86:1e:46:be:8f:ca:d7:2b:b8:1a:a4:7e:2e:f2:
                    79:f7:2f:6c:82:39:d3:36:6d:69:0e:7a:dd:71:e7:
                    42:35:9c:6b:14:d1:75:53:44:48:10:a6:09:48:5a:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E7:26:95:EC:26:81:37:D8:E4:D4:36:34:5B:44:09:3A:3D:70:98
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ROcmlewmgTfY5NQ2NFtECTo9cJg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.110.248.0/25

    Signature Algorithm: sha256WithRSAEncryption
         85:88:13:38:63:e4:52:7f:ba:81:23:5e:2d:fd:2c:18:57:4c:
         b0:eb:a9:8a:95:23:6e:51:d2:4b:24:91:af:e9:5c:ea:cd:da:
         25:bc:1b:0a:2f:2c:6b:62:b4:cc:cb:56:16:b9:19:4b:5d:cd:
         2b:65:09:2a:b5:df:f2:45:67:45:a8:10:be:48:de:b9:6d:3c:
         72:a3:a9:56:4a:b5:9b:fd:12:d5:df:84:ea:89:57:8d:9d:d2:
         c9:de:76:1b:ea:90:13:03:9e:d1:ff:8e:2a:65:c5:5c:30:25:
         d6:93:db:f2:ec:95:81:d0:f8:ac:21:02:94:0d:43:f1:55:f6:
         d9:fc:c9:0e:39:98:5f:de:a6:f5:a8:65:93:13:a2:54:41:b1:
         7d:d4:7e:5b:e3:54:57:05:61:29:10:b4:ee:b1:5b:67:09:e7:
         01:45:f1:b8:8c:9c:7e:9b:21:a1:90:02:b1:7c:11:15:a5:2f:
         2b:7c:fc:54:d3:f4:61:c7:c2:36:fa:c2:a8:35:55:66:85:b4:
         60:e4:4c:5f:48:ad:4e:ea:fb:04:93:f7:2a:68:cc:21:1b:bd:
         d9:04:e4:ca:75:29:cf:b9:d5:4e:d0:0a:c5:71:b2:68:04:f8:
         2a:55:b9:cc:07:87:b4:7a:0e:f0:bb:bf:0b:8d:eb:1e:60:e6:
         a8:6c:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:47:49 2025 by rpki-client