Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20060/WIAiNSfAIci_Z1eS3A1cOAxk-a4.roa
File:                     WIAiNSfAIci_Z1eS3A1cOAxk-a4.roa (raw, json)
Hash identifier:          oA1XC4c026EVBOgXSi4Vm9BoNN0R3xhS99QX/Jp95xE=
Subject key identifier:   58:80:22:35:27:C0:21:C8:BF:67:57:92:DC:0D:5C:38:0C:64:F9:AE
Certificate issuer:       /CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D
Certificate serial:       1A
Authority key identifier: C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/WIAiNSfAIci_Z1eS3A1cOAxk-a4.roa
Signing time:             Tue 01 Apr 2025 01:31:10 +0000
ROA not before:           Tue 01 Apr 2025 01:31:10 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     131928
IP address blocks:        219.100.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D
        Validity
            Not Before: Apr  1 01:31:10 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=5880223527C021C8BF675792DC0D5C380C64F9AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:12:72:a6:4f:1e:36:08:76:b2:18:02:6e:
                    7c:5d:e8:bc:d6:cb:78:14:f9:94:e4:48:3b:94:ef:
                    07:55:bf:96:5d:6c:ab:c2:8f:8c:4c:63:17:4b:ee:
                    4b:2d:c9:d3:9a:e3:ac:2c:0c:f0:6e:c7:12:04:4c:
                    54:6e:d8:b0:f5:54:36:5b:14:a6:ad:0d:41:92:5b:
                    ae:b0:b7:58:e6:3d:4a:cf:06:67:05:7f:13:c2:7b:
                    6d:38:be:43:00:ab:dd:1d:e7:26:4f:33:6f:0a:b1:
                    e6:66:6b:4e:9e:25:62:c7:47:86:65:45:94:8b:0c:
                    32:6e:b3:2d:a1:01:6f:03:bb:0b:79:b5:fe:a3:a9:
                    38:2e:a5:71:20:20:ad:65:5d:59:bb:a0:34:4b:dc:
                    8b:da:a3:cc:d8:f9:fb:41:3e:7b:f5:82:1e:9f:e3:
                    da:01:c5:92:df:fb:54:20:28:4c:91:34:38:d8:7e:
                    32:52:fd:49:7a:4b:73:6e:1d:75:4f:e2:a6:bd:6e:
                    24:54:40:1a:1d:12:34:d8:45:5f:af:33:20:52:5a:
                    b5:ff:6c:a9:b4:c1:35:75:d2:2e:ee:03:a4:38:1f:
                    b9:21:f9:79:88:ad:03:1a:89:bd:ee:6e:15:c9:56:
                    6a:2c:a9:66:7b:e0:eb:0f:3a:53:23:f9:f7:f4:62:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:80:22:35:27:C0:21:C8:BF:67:57:92:DC:0D:5C:38:0C:64:F9:AE
            X509v3 Authority Key Identifier:
                keyid:C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/WIAiNSfAIci_Z1eS3A1cOAxk-a4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:9f:c7:af:53:9c:2c:a2:fe:00:ea:73:f8:32:c4:16:e6:
         6f:86:a6:a4:c8:51:a6:cc:05:25:d1:f3:b8:3c:d6:a3:99:0f:
         aa:b9:cb:a1:1d:3f:5d:7e:54:ce:75:4f:84:9d:bc:a6:08:b4:
         e0:0d:81:59:38:6f:06:db:b6:3d:36:78:83:3e:66:53:4d:47:
         45:8c:6d:9a:e7:4e:a0:e9:f4:cc:89:58:a4:9d:92:37:5e:3a:
         8a:af:68:6c:0c:49:0f:6d:00:b0:30:ff:54:69:4c:0f:95:1a:
         d3:26:eb:a1:23:b7:e0:11:4a:b5:25:58:31:c0:d6:4c:cf:2a:
         81:10:ec:bb:a4:74:97:43:f4:cd:fd:9c:75:20:ae:37:99:26:
         62:5c:cc:18:70:cf:45:67:1f:d3:de:fb:72:dd:86:88:ce:52:
         d4:cd:ed:99:2f:b3:69:cb:06:e2:60:c5:40:a4:40:ec:65:4c:
         c2:4c:b4:5f:c4:d8:39:42:f8:a6:5c:4b:cb:f5:cb:39:fc:fa:
         53:c7:25:b2:cb:a9:26:e1:e5:6a:90:26:4f:ae:6f:92:c9:36:
         56:7f:3a:2e:1a:77:74:d9:5f:3b:06:a6:4a:04:80:a1:6e:85:
         37:90:b1:db:15:83:1a:bd:38:88:c5:4a:e0:b8:5c:c1:2a:4d:
         79:bd:ab:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:05:57 2025 by rpki-client