Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ejepuuX05ocqf7QojKaE6BZSo4E.roa
File:                     ejepuuX05ocqf7QojKaE6BZSo4E.roa (raw, json)
Hash identifier:          ZjBtaYme9CkUfO36e1vkov97SQPPiHn9Sk07cyxd2WU=
Subject key identifier:   7A:37:A9:BA:E5:F4:E6:87:2A:7F:B4:28:8C:A6:84:E8:16:52:A3:81
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       67
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ejepuuX05ocqf7QojKaE6BZSo4E.roa
Signing time:             Tue 01 Apr 2025 01:32:36 +0000
ROA not before:           Tue 01 Apr 2025 01:32:36 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        157.17.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Apr  1 01:32:36 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=7A37A9BAE5F4E6872A7FB4288CA684E81652A381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6a:fa:23:83:9d:ca:f6:05:6f:68:c4:3c:72:
                    73:7d:42:99:be:d7:f5:97:58:fb:ec:94:60:cb:29:
                    bf:0b:a4:91:d9:bb:96:12:0d:8d:36:f3:bf:24:d3:
                    44:f8:23:cd:7a:2c:dc:3b:d5:03:f7:59:bb:06:dc:
                    b6:e3:ec:12:69:40:ed:5b:14:f1:be:9d:4d:cc:50:
                    67:ec:3c:9b:43:da:22:2c:a8:4d:b3:25:b5:1d:30:
                    bd:70:9b:01:c3:92:7a:f4:8b:2a:c6:89:8a:f4:cf:
                    60:3a:66:78:2f:ed:b5:e8:ff:32:7c:3b:41:a2:f3:
                    8c:cd:62:bb:88:e1:d4:73:cd:61:9d:cb:9c:49:f8:
                    aa:33:a9:f6:d4:0a:b8:3d:97:d7:49:03:86:f9:f7:
                    ed:a7:45:bc:d4:25:15:0b:28:ae:52:97:2c:d3:d7:
                    0c:08:a8:57:28:38:20:cd:c9:f5:a4:40:a0:86:12:
                    0d:b2:02:f0:3a:ea:16:56:ce:96:7b:e3:c1:39:95:
                    63:8f:52:70:bf:b6:84:3d:5c:bd:cb:90:bf:c4:5c:
                    e3:56:2b:c5:12:3e:77:c0:b1:f4:70:bd:f7:a1:12:
                    9d:0a:90:7c:7b:e0:44:21:ab:1f:a1:56:35:68:46:
                    6e:00:77:84:03:57:07:e9:1e:49:1e:82:95:7b:11:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:37:A9:BA:E5:F4:E6:87:2A:7F:B4:28:8C:A6:84:E8:16:52:A3:81
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ejepuuX05ocqf7QojKaE6BZSo4E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:77:62:2f:2a:1b:22:9f:51:14:c2:19:53:b2:a6:52:20:98:
         ae:02:2f:55:ea:04:8c:63:15:96:75:21:3d:7c:63:50:70:80:
         ec:f8:eb:75:b1:1f:63:eb:e2:9c:8e:38:87:18:da:1c:9b:e2:
         10:ee:c3:71:cc:88:61:33:93:5e:f0:fb:e5:0e:7d:4a:45:a1:
         96:51:84:20:2d:1c:4b:55:49:c9:0d:24:56:86:40:67:28:ef:
         ec:06:15:14:48:d3:01:35:43:2f:1b:cb:5f:83:e5:bc:5c:04:
         59:ac:b9:e2:a9:c4:80:37:21:aa:2e:9c:75:d2:c6:a9:d7:e8:
         2a:82:9c:99:46:60:60:0e:92:06:13:1f:c2:5d:79:37:a1:dc:
         a0:9e:ed:f7:6b:b3:f2:9d:4f:7c:92:54:de:8c:15:c4:09:e2:
         10:ea:8b:ce:ec:72:1e:59:a0:77:0d:10:e3:b0:27:d0:6b:17:
         b2:e6:b8:5f:d4:3f:ce:d9:19:f5:b8:c1:fa:74:70:f7:3b:b8:
         bf:97:5c:b5:ed:83:d3:34:f9:8a:91:44:18:01:1a:1b:b2:30:
         db:9c:aa:95:e5:4b:f5:37:8a:b6:87:82:34:1d:b0:07:27:ad:
         50:52:da:85:71:28:61:06:ba:b1:e2:c8:52:e5:86:81:46:12:
         71:f3:28:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:55 2025 by rpki-client on console.sobornost.net