Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/l2CGRTbLdPTWavDqH25KFZmZaKU.roa
File:                     l2CGRTbLdPTWavDqH25KFZmZaKU.roa (raw, json)
Hash identifier:          aBVE3K+6xT5p2aVBalFxlIcdvjZlgo6zChDf4YyX5C0=
Subject key identifier:   97:60:86:45:36:CB:74:F4:D6:6A:F0:EA:1F:6E:4A:15:99:99:68:A5
Certificate issuer:       /CN=813105362E0334564C753A2CEEB0D85764FD2E68
Certificate serial:       53
Authority key identifier: 81:31:05:36:2E:03:34:56:4C:75:3A:2C:EE:B0:D8:57:64:FD:2E:68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gTEFNi4DNFZMdTos7rDYV2T9Lmg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/l2CGRTbLdPTWavDqH25KFZmZaKU.roa
Signing time:             Thu 01 May 2025 01:32:14 +0000
ROA not before:           Thu 01 May 2025 01:32:14 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        160.16.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/gTEFNi4DNFZMdTos7rDYV2T9Lmg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/gTEFNi4DNFZMdTos7rDYV2T9Lmg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gTEFNi4DNFZMdTos7rDYV2T9Lmg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813105362E0334564C753A2CEEB0D85764FD2E68
        Validity
            Not Before: May  1 01:32:14 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=9760864536CB74F4D66AF0EA1F6E4A15999968A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:d2:33:60:fb:b3:c8:87:9d:4e:f1:96:77:
                    b3:db:9a:15:86:c7:7c:c4:a5:af:79:07:ae:c1:10:
                    91:1a:a0:6e:75:48:a2:de:21:c8:98:13:32:30:d9:
                    c6:7b:a7:47:3a:41:ff:fd:0e:d5:06:36:0c:2c:00:
                    f3:d6:aa:65:a7:dd:ce:1d:92:d8:c6:b7:c1:9a:e7:
                    21:a3:e1:d0:23:e4:58:b1:5d:b5:9f:24:97:b4:fb:
                    9e:0e:7d:5f:df:75:20:cc:7a:e4:0d:3b:5d:6a:14:
                    dd:c9:07:55:e1:d4:75:08:28:3f:61:8a:a2:7b:4f:
                    93:52:b2:a2:00:80:05:69:8c:c7:71:f1:9b:f8:2e:
                    33:4d:1d:c1:07:bc:75:39:19:61:09:a2:1e:77:5f:
                    22:46:a5:54:f4:ef:f9:78:aa:46:82:23:8d:b2:fd:
                    99:fc:cd:0a:96:81:9e:5d:e4:29:89:82:de:f0:15:
                    a6:1d:b1:6d:84:eb:90:19:95:23:aa:7f:5a:ac:03:
                    17:3b:6e:f5:52:d1:5c:31:b2:5c:f0:1e:33:5f:ff:
                    2c:96:4c:72:65:f5:24:60:80:87:78:dd:a6:88:6e:
                    86:2e:31:50:66:b4:8d:0d:82:5f:87:97:2e:c3:79:
                    c6:ca:0c:f0:0b:8c:62:25:15:26:5e:8d:50:16:6e:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:86:45:36:CB:74:F4:D6:6A:F0:EA:1F:6E:4A:15:99:99:68:A5
            X509v3 Authority Key Identifier:
                keyid:81:31:05:36:2E:03:34:56:4C:75:3A:2C:EE:B0:D8:57:64:FD:2E:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/gTEFNi4DNFZMdTos7rDYV2T9Lmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gTEFNi4DNFZMdTos7rDYV2T9Lmg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/l2CGRTbLdPTWavDqH25KFZmZaKU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         dc:3a:b7:dd:87:af:eb:5b:f7:59:4a:cb:00:a1:e0:24:35:12:
         f7:11:d7:ae:bb:3b:ca:85:92:e1:7f:74:55:d5:30:5d:2f:5c:
         3f:44:41:d8:9d:47:9a:dd:b7:91:02:c8:b7:c3:27:38:6c:a0:
         41:45:81:fd:23:4e:98:27:47:66:71:40:2f:b8:22:8c:de:39:
         7a:2f:97:70:af:a0:9c:7d:09:13:47:05:2c:88:f2:2c:7f:7e:
         fe:aa:d9:e7:65:c0:6e:ec:a9:69:f8:5d:88:65:d7:68:31:99:
         c7:3f:8e:be:d1:78:eb:9f:3e:96:1e:29:09:22:c2:c9:f3:f1:
         dd:cf:1c:98:a0:37:8a:ba:ac:ce:2b:fc:7a:92:4c:80:a7:36:
         61:92:67:90:31:f6:5f:d3:c8:6d:71:bf:13:f0:32:33:ce:09:
         e6:6a:6c:85:89:af:e2:51:71:75:a4:a3:10:59:56:47:8d:63:
         f5:76:6c:9e:a9:44:5c:87:df:23:17:3c:1b:37:47:f1:3f:60:
         20:a5:06:10:33:d9:00:88:f2:29:ab:cb:33:17:7c:50:df:cd:
         6b:4a:8b:bd:e5:16:85:61:94:36:b2:fd:a2:51:21:45:82:89:
         d9:34:0e:6a:ae:c5:be:2d:d8:5d:be:97:27:81:7c:ec:ec:83:
         93:c6:be:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:22:51 2025 by rpki-client