Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/sPFlJ3n3LRabnYpTysqgp3U1nz4.roa
File:                     sPFlJ3n3LRabnYpTysqgp3U1nz4.roa (raw, json)
Hash identifier:          OrLCOvrzm7+Z3eqaDsHVr9d9eUBX1p6f3jPgj4p+pHM=
Subject key identifier:   B0:F1:65:27:79:F7:2D:16:9B:9D:8A:53:CA:CA:A0:A7:75:35:9F:3E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01FC
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/sPFlJ3n3LRabnYpTysqgp3U1nz4.roa
Signing time:             Sat 01 Mar 2025 01:31:01 +0000
ROA not before:           Sat 01 Mar 2025 01:31:01 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        58.88.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar  1 01:31:01 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=B0F1652779F72D169B9D8A53CACAA0A775359F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:36:06:b9:0e:06:94:db:ab:93:14:5e:69:
                    de:a6:5b:31:95:bb:d3:66:82:dd:3e:10:07:0e:08:
                    fd:af:b7:7e:a6:78:66:2c:f6:f9:32:ed:4c:52:47:
                    80:c4:2d:a6:bb:87:a7:1e:59:32:af:8d:94:22:e3:
                    00:21:9a:3f:bd:80:bf:b8:fe:fe:6f:dc:09:d2:73:
                    6b:35:ad:13:8a:43:72:16:ab:84:27:4d:6a:24:18:
                    fd:c4:76:ac:fc:71:19:26:95:47:91:a8:79:73:ea:
                    0e:a0:e8:dc:05:98:de:24:5b:40:93:ea:1f:a7:4a:
                    c3:91:36:da:2a:f3:93:b4:62:57:33:6c:0a:96:10:
                    f8:65:48:61:e4:eb:c1:8a:61:8e:03:d5:9a:eb:ed:
                    95:07:03:cc:f1:bc:75:e7:05:b2:42:af:cf:7d:e6:
                    6a:00:b1:e1:0f:76:94:83:59:c0:9d:95:88:bb:8e:
                    3a:49:4b:00:af:59:ed:86:76:37:bf:61:99:ed:6b:
                    49:2a:35:2f:fd:17:1d:8c:2d:ea:88:0a:7d:97:5e:
                    61:14:e6:d4:06:d5:d0:c9:15:f8:79:33:fb:d1:bb:
                    a7:8e:c3:e2:33:f7:54:34:20:cc:91:a3:f0:e5:68:
                    f6:ca:70:6d:dc:e2:7e:ad:b5:b7:60:66:25:45:fb:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F1:65:27:79:F7:2D:16:9B:9D:8A:53:CA:CA:A0:A7:75:35:9F:3E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/sPFlJ3n3LRabnYpTysqgp3U1nz4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.88.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         2e:61:7e:a0:81:29:e8:41:6a:8f:d5:ef:d3:de:c4:dc:5e:11:
         16:83:c1:05:7c:19:68:2c:26:db:bf:b0:8b:11:55:15:5f:22:
         de:88:d1:cc:1e:04:bc:c1:c5:33:ad:50:b3:fe:1f:b3:2c:4c:
         a7:72:b1:6e:ca:ce:09:97:70:25:09:56:d9:fd:9c:f6:9e:1e:
         36:05:0f:bf:6b:fd:07:46:f1:ba:d2:d1:12:aa:8a:f6:ae:3a:
         f2:b1:b1:3d:b7:6a:a0:18:e5:40:ba:f9:b7:a2:7c:61:88:bb:
         3b:44:9c:37:6d:63:ad:53:dd:69:d3:52:8f:b9:6c:d4:63:cc:
         f0:0e:b9:d9:db:4c:e8:a9:c1:6f:34:49:30:78:a8:8d:3b:32:
         61:e8:96:1c:1e:e0:8f:c9:1b:a1:aa:cd:d1:a3:0e:32:d2:29:
         da:7e:2a:1a:65:c6:ee:f2:dd:e8:61:64:3d:5b:3e:a9:5c:c8:
         8a:bc:ae:06:05:98:42:6e:20:19:29:97:df:a3:be:bc:fc:e5:
         91:c6:85:ae:aa:8f:2e:1c:f9:6d:8a:de:ab:8e:fa:3e:b5:96:
         35:f1:05:0e:61:d6:08:b1:dc:8b:19:3f:43:57:f5:6e:5e:e5:
         20:e3:20:a4:aa:8d:da:5d:f9:b3:68:9d:d3:18:67:dc:7e:d3:
         a0:e7:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:27 2025 by rpki-client