Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/Kdx_Ep26ixcGvg6v9RMdKgeyzK0.roa
File:                     Kdx_Ep26ixcGvg6v9RMdKgeyzK0.roa (raw, json)
Hash identifier:          zPbhV86hEQmVkWFb/RzxmOY49wQ1+0urcIRMLtnnV2E=
Subject key identifier:   29:DC:7F:12:9D:BA:8B:17:06:BE:0E:AF:F5:13:1D:2A:07:B2:CC:AD
Certificate issuer:       /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial:       1E
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/Kdx_Ep26ixcGvg6v9RMdKgeyzK0.roa
Signing time:             Wed 02 Apr 2025 04:53:31 +0000
ROA not before:           Wed 02 Apr 2025 04:53:31 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     17931
IP address blocks:        219.100.160.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
        Validity
            Not Before: Apr  2 04:53:31 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=29DC7F129DBA8B1706BE0EAFF5131D2A07B2CCAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:d0:bd:b3:38:2d:fd:09:63:17:4e:c0:1e:
                    34:49:c7:56:5f:3f:11:3c:5d:99:b3:15:ac:00:f3:
                    a5:b0:d1:ab:3a:a5:c4:96:79:19:2d:4c:78:eb:c4:
                    83:8d:15:b4:f3:26:33:4b:ab:78:bf:9b:de:e1:0f:
                    e8:f2:08:13:56:4c:bf:45:fe:65:e9:dc:d4:e1:a1:
                    2c:eb:20:a2:9e:4c:ce:a4:19:8c:15:f2:49:7b:9e:
                    b7:35:9f:26:23:22:36:19:dc:d6:4b:3f:4e:22:fe:
                    67:3b:db:98:f0:1b:38:9c:cc:c3:96:94:20:e5:44:
                    b1:99:97:52:a7:bc:08:cf:26:32:e9:af:98:8a:b2:
                    1c:c4:e2:9a:87:fe:c3:46:cd:c6:a4:bf:32:ff:35:
                    dc:c1:cd:8b:08:43:34:50:0c:de:dc:1e:88:ed:0d:
                    f0:86:b3:18:39:21:1e:28:6b:09:2b:13:ac:44:9b:
                    65:c5:a8:2d:dd:85:be:90:39:5d:ec:61:0f:a2:0c:
                    13:25:b6:47:cd:56:51:8e:99:53:5b:89:b2:ce:a6:
                    54:cc:4c:9f:c7:2d:32:50:18:5b:95:41:c5:0d:21:
                    16:3a:dc:b8:44:7f:74:7c:6a:09:50:f4:b8:a8:c5:
                    56:91:be:84:67:62:b1:bc:1d:6e:53:21:ed:95:00:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DC:7F:12:9D:BA:8B:17:06:BE:0E:AF:F5:13:1D:2A:07:B2:CC:AD
            X509v3 Authority Key Identifier:
                keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/Kdx_Ep26ixcGvg6v9RMdKgeyzK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dc:22:47:9f:06:af:59:f6:3a:c9:7b:0b:02:43:ce:e5:f9:28:
         99:d8:89:02:c0:f2:e5:5b:71:c7:59:59:36:7f:33:30:94:13:
         45:99:51:ec:e3:f8:c8:f3:6e:a5:ec:a6:ea:30:6e:5f:49:85:
         26:5c:4e:d8:0a:1d:ba:7b:d8:5f:ed:b6:cf:45:7c:a1:24:2d:
         ac:fa:bc:13:81:e0:00:b8:31:47:14:01:16:ee:f3:47:2f:b7:
         54:a3:77:0f:ff:0e:1a:ce:08:e7:c4:7b:02:98:db:84:6a:62:
         65:be:1c:15:3e:dc:33:31:de:82:c2:67:97:a2:91:64:17:f2:
         df:b8:84:1a:53:9c:ea:6e:64:a8:22:ff:dd:a0:27:6c:df:fe:
         f8:8c:50:e3:97:f1:44:8e:43:73:21:07:99:88:71:89:f9:8c:
         ff:e0:15:71:2c:c4:f8:4b:e1:0f:ff:23:aa:67:aa:d9:7a:9b:
         23:49:ae:9d:de:38:92:fd:e2:e5:26:17:ee:71:bb:a8:9d:18:
         a1:1b:15:a8:bd:a3:06:69:57:f0:40:b5:5f:47:b0:1f:b9:d9:
         85:7f:1e:2b:8d:b6:dc:ca:7a:5f:ca:8b:df:c3:f9:d5:85:b2:
         78:ea:dc:6b:ac:92:4c:f6:e3:19:9a:ba:f5:9d:3c:d8:b7:74:
         97:97:eb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:49 2025 by rpki-client on console.sobornost.net