Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/om9T6dlp6ZOCi-2TZrzaeCrYYfQ.roa
File:                     om9T6dlp6ZOCi-2TZrzaeCrYYfQ.roa (raw, json)
Hash identifier:          h2uSOdRaFo6sN6jzO0sUdVpYL1HOT5tEvmWdtukmka4=
Subject key identifier:   A2:6F:53:E9:D9:69:E9:93:82:8B:ED:93:66:BC:DA:78:2A:D8:61:F4
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       1B
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/om9T6dlp6ZOCi-2TZrzaeCrYYfQ.roa
Signing time:             Thu 24 Apr 2025 07:06:51 +0000
ROA not before:           Thu 24 Apr 2025 07:06:51 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     24279
IP address blocks:        114.31.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: Apr 24 07:06:51 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=A26F53E9D969E993828BED9366BCDA782AD861F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:ed:39:96:1a:51:fc:d8:3b:88:21:c8:30:
                    e4:dc:de:47:42:f5:dd:37:63:67:42:8f:e5:2a:cd:
                    55:23:72:ff:23:1b:80:3b:96:4e:6d:6e:dd:9d:3e:
                    53:38:bc:06:90:17:b4:43:c3:85:ae:83:20:f0:df:
                    bf:6c:a8:9f:62:9f:3d:7e:05:a7:2f:99:10:fe:f4:
                    b6:af:a2:4e:c3:19:9a:34:37:2c:d0:da:f2:13:99:
                    78:7d:e6:39:8c:91:a4:07:1f:d4:52:b4:c7:11:7f:
                    b6:5a:45:3a:f0:7d:54:14:bf:9f:2f:29:a4:88:1d:
                    ed:88:a8:e0:11:f1:19:66:77:9c:95:ae:79:65:4c:
                    cc:e9:47:bf:fe:30:66:5f:7a:94:c5:56:62:53:8c:
                    3c:12:1e:ef:75:de:f7:51:bb:ea:7d:f0:bd:4d:58:
                    83:5c:0e:89:9c:6c:a7:f7:00:35:12:8b:65:c7:a8:
                    41:02:e4:52:08:1e:f3:91:43:f2:03:c7:e3:92:c6:
                    c9:7f:36:24:a7:80:02:f8:7e:eb:cf:2d:29:73:e3:
                    3e:8a:72:00:c3:d4:ce:2a:57:09:9f:86:16:58:7f:
                    53:0e:cb:e8:41:f8:cf:19:11:91:1c:67:4f:62:6b:
                    dc:2a:f4:a5:5a:10:3f:f1:ea:4c:76:32:a0:4c:10:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6F:53:E9:D9:69:E9:93:82:8B:ED:93:66:BC:DA:78:2A:D8:61:F4
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/om9T6dlp6ZOCi-2TZrzaeCrYYfQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:32:69:64:84:65:b0:56:0e:e8:3c:e0:40:e0:67:82:11:
         6e:64:c9:d1:17:5d:a3:24:54:62:f8:e8:89:93:e6:61:a0:13:
         22:8c:39:bc:ed:f4:63:19:df:d5:62:05:8c:5f:c1:9c:c1:fc:
         a3:80:07:69:eb:a6:26:cb:48:8c:ec:8f:e6:a1:bf:62:fa:da:
         a8:cf:9a:7b:9f:93:cb:2b:6f:21:fc:e2:b0:b2:e4:1c:f6:c8:
         8a:36:3c:b9:9e:c6:71:0d:8e:f6:84:08:b0:32:32:c8:c1:c9:
         a7:ce:9d:de:10:4b:34:c4:7c:0f:25:0a:8a:dc:7f:05:c4:20:
         07:5c:f8:cb:1b:35:49:03:d9:59:b9:ce:38:56:dd:ef:40:1f:
         31:77:25:c1:89:ee:36:9f:b9:31:d4:7e:67:4f:eb:6d:c6:30:
         c9:fc:7a:8d:b0:c6:b0:89:a9:93:20:4d:5b:18:32:a4:be:b4:
         3a:85:09:bd:1f:f6:1a:87:8a:67:7a:88:b8:57:47:31:b7:a7:
         ff:28:12:bf:94:5d:72:52:59:9d:b8:a9:f8:01:9b:69:f2:b4:
         22:1a:84:1d:55:1d:0d:d4:7d:c2:5d:ee:63:cf:6a:80:8c:6d:
         56:bd:5a:86:af:9c:ff:a1:81:16:a9:d3:82:e4:a2:af:16:7d:
         b8:b0:6f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:33:21 2025 by rpki-client