Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/jPunJw3-EXwnD4HV8XvCVsJGLDs.roa
File:                     jPunJw3-EXwnD4HV8XvCVsJGLDs.roa (raw, json)
Hash identifier:          wRy0qJsUy2sPVetIywT0v4LFP3t24hyicVNpMv9CuBc=
Subject key identifier:   8C:FB:A7:27:0D:FE:11:7C:27:0F:81:D5:F1:7B:C2:56:C2:46:2C:3B
Certificate issuer:       /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Certificate serial:       03
Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/jPunJw3-EXwnD4HV8XvCVsJGLDs.roa
Signing time:             Wed 23 Apr 2025 00:30:42 +0000
ROA not before:           Wed 23 Apr 2025 00:30:42 +0000
ROA not after:            Tue 21 Apr 2026 06:15:57 +0000
asID:                     18070
IP address blocks:        210.158.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 16:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
        Validity
            Not Before: Apr 23 00:30:42 2025 GMT
            Not After : Apr 21 06:15:57 2026 GMT
        Subject: CN=8CFBA7270DFE117C270F81D5F17BC256C2462C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fa:23:c1:93:1e:e3:f8:47:df:10:3e:59:09:
                    32:89:68:13:db:a6:00:f4:45:0d:c3:70:a9:62:19:
                    2c:13:bd:8f:bc:71:e8:44:a0:0b:e2:fe:9d:5c:bc:
                    be:04:9e:ba:4c:8d:42:21:26:45:4b:a8:0d:9b:64:
                    0d:79:90:9b:a2:7a:53:35:a8:53:f0:f5:da:a5:7a:
                    3d:9e:a8:52:27:e1:7f:40:34:1d:3c:72:5b:67:4c:
                    99:a7:d0:3c:a5:12:12:97:6d:bb:44:fb:e9:ee:1d:
                    bf:df:d4:ad:ae:4c:d5:c9:5b:69:08:83:cc:6a:39:
                    6d:de:08:b1:3b:ea:ad:59:3c:33:43:6c:13:ce:05:
                    89:41:e9:67:e7:ba:ce:a0:d3:ea:5d:ad:ad:f7:9a:
                    cb:bc:55:87:51:52:aa:65:9f:17:ae:4c:93:49:bd:
                    db:75:57:6c:51:1a:f5:90:c6:85:87:ab:70:95:28:
                    36:6d:a0:7b:7b:8a:ac:f9:dd:9c:3c:b8:e0:d9:5d:
                    39:f0:d5:71:2d:b4:ad:b9:e5:e9:18:c2:fb:73:8f:
                    d4:7d:18:3f:ea:23:a5:a6:bf:35:1a:eb:d7:02:c0:
                    a6:eb:d2:95:9d:ae:a7:ef:4b:93:1a:02:0b:8e:62:
                    2a:b8:c8:43:09:66:80:16:8b:6a:52:a1:29:f5:d5:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FB:A7:27:0D:FE:11:7C:27:0F:81:D5:F1:7B:C2:56:C2:46:2C:3B
            X509v3 Authority Key Identifier:
                keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/jPunJw3-EXwnD4HV8XvCVsJGLDs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:6e:1e:58:5d:1a:be:10:1a:4e:22:b4:72:43:6c:82:d1:80:
         a5:65:67:55:d9:36:8e:0e:06:29:27:23:56:b3:e5:4f:4a:62:
         0d:5b:af:39:43:91:de:fe:5a:bc:3e:f0:87:1f:c7:b0:a0:41:
         4e:d5:7e:ff:ce:4b:5e:d9:28:04:a2:0b:50:09:7d:2f:7c:f1:
         8d:71:56:fe:58:5a:08:fa:ce:f1:09:88:b4:09:4b:ea:7c:f3:
         4b:b2:2c:e8:aa:95:0f:bf:97:1c:2a:07:c2:89:e3:25:e9:75:
         02:ac:ed:eb:56:c8:f0:5e:4c:16:e2:89:94:2c:48:66:2b:8f:
         4d:0f:e4:c4:4b:8e:ee:c0:d7:2a:00:be:c4:6a:93:99:9e:29:
         e8:f8:f3:34:33:d1:23:5c:ad:df:f3:14:9c:4f:bd:83:03:7a:
         ba:5b:71:1f:ab:e5:08:0b:e8:05:b8:f7:54:af:18:5a:8e:26:
         1c:38:38:18:c6:09:96:b2:a8:5e:db:86:7f:23:c9:ff:19:88:
         ff:41:0c:25:9e:9a:25:3a:a5:78:ac:13:d0:6c:d5:21:2d:44:
         95:61:75:3d:4f:c6:b7:8c:2b:a1:a1:43:7e:3b:04:1a:25:6f:
         09:80:d7:2a:cb:1f:12:a6:6d:76:b1:d1:e6:53:ae:b8:13:34:
         42:cf:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:38:24 2025 by rpki-client