Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/cjJd_4wYQ0MaVrUrd-0PvszY4T8.roa
File:                     cjJd_4wYQ0MaVrUrd-0PvszY4T8.roa (raw, json)
Hash identifier:          pvClE+InJNqyFl93QPNU8OQvYHBtZDXzpch3lPnrEd4=
Subject key identifier:   72:32:5D:FF:8C:18:43:43:1A:56:B5:2B:77:ED:0F:BE:CC:D8:E1:3F
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       1D
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/cjJd_4wYQ0MaVrUrd-0PvszY4T8.roa
Signing time:             Thu 24 Apr 2025 07:06:52 +0000
ROA not before:           Thu 24 Apr 2025 07:06:52 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     24279
IP address blocks:        219.100.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: Apr 24 07:06:52 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=72325DFF8C1843431A56B52B77ED0FBECCD8E13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:fb:84:ca:4a:63:80:0a:c4:c5:8c:97:15:
                    91:fd:ab:93:b5:b3:76:c1:09:0c:0d:50:d8:4d:25:
                    26:c1:74:17:ba:f5:14:e5:4e:c9:3a:4f:0d:94:2c:
                    b3:aa:70:da:20:96:49:d6:53:de:8a:d8:9b:12:c1:
                    c6:36:5a:ec:39:2a:6e:b2:53:e1:61:a5:4e:21:c7:
                    9f:63:fd:44:7c:8b:da:41:2f:78:b2:47:5c:1b:f6:
                    4a:8d:49:37:0b:20:be:b5:16:73:8f:59:84:07:96:
                    71:6c:82:22:1d:cc:e5:cf:c9:63:5c:1c:9d:ef:6a:
                    4c:82:9a:92:2e:dd:e7:1f:f6:6f:e9:d3:27:32:c8:
                    69:b7:0f:50:55:ee:47:22:8b:f7:92:4a:b9:a2:f6:
                    82:11:bd:45:fc:c9:59:c0:1a:da:c9:86:3b:e1:ff:
                    8f:fb:9c:98:33:57:2b:11:e7:e1:f3:08:1e:79:37:
                    47:0b:cb:7c:23:a7:5a:47:f5:31:dc:46:67:fe:d2:
                    4a:72:1e:14:98:11:f4:2a:cc:23:fc:35:92:f0:40:
                    4a:2a:02:5b:b0:24:6c:9d:b1:95:7b:b4:70:16:65:
                    f7:dd:52:69:ac:b3:71:76:17:6e:a4:ac:2a:f4:0d:
                    16:0d:00:4f:67:6b:2c:ce:3c:ac:a8:a0:30:7c:7a:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:32:5D:FF:8C:18:43:43:1A:56:B5:2B:77:ED:0F:BE:CC:D8:E1:3F
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/cjJd_4wYQ0MaVrUrd-0PvszY4T8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:84:33:6f:a5:23:8a:68:46:fa:b6:39:db:6d:03:32:d6:
         84:9e:40:0c:09:04:5b:52:69:79:60:86:5a:9f:8a:b2:02:7a:
         b6:02:91:4e:8e:a6:0d:5c:cd:c1:53:bc:5c:4b:b5:03:bc:9f:
         49:13:b7:79:33:e8:b7:a3:56:4f:e0:dc:b8:56:6a:da:49:c7:
         56:ec:80:bb:88:7b:40:56:29:bc:0d:22:51:9e:10:e9:7b:ef:
         78:16:98:b1:75:ac:38:4e:95:72:cc:2a:46:15:ca:e0:1a:3b:
         0a:0b:17:43:ee:48:13:32:6a:89:2b:e6:25:c8:4e:c4:0a:55:
         fe:df:2b:f1:f2:e3:de:66:47:83:c4:8b:ef:a5:cb:27:32:e4:
         dd:a8:b1:25:ac:32:55:73:23:79:5a:18:12:77:73:ce:90:fc:
         50:44:c2:56:8d:b3:33:d1:c6:fc:04:08:a6:3a:f4:2c:e3:fb:
         03:39:0b:60:7b:6f:ab:c9:f6:ae:f0:40:ef:5b:e1:ad:7d:49:
         ad:e5:59:6d:5b:50:4e:c4:a2:36:93:18:10:5a:f7:31:c5:fe:
         11:10:41:4b:d9:6e:b0:d4:10:e4:47:ae:10:7b:6e:e7:78:69:
         62:50:f4:f1:13:c2:85:78:90:d5:34:83:ea:77:77:f0:04:0a:
         54:21:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:33:11 2025 by rpki-client