Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/952/8DU5-cjzJjA-36jBkNxTX-P62Q8.roa
File:                     8DU5-cjzJjA-36jBkNxTX-P62Q8.roa (raw, json)
Hash identifier:          DE5xMAle+NwQawZqvvEGF9LIE8lVHRrTFQuBvNU4RWk=
Subject key identifier:   F0:35:39:F9:C8:F3:26:30:3E:DF:A8:C1:90:DC:53:5F:E3:FA:D9:0F
Certificate issuer:       /CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D
Certificate serial:       15
Authority key identifier: 9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/8DU5-cjzJjA-36jBkNxTX-P62Q8.roa
Signing time:             Thu 17 Apr 2025 02:35:51 +0000
ROA not before:           Thu 17 Apr 2025 02:35:51 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     37922
IP address blocks:        118.91.192.0/19 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D
        Validity
            Not Before: Apr 17 02:35:51 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=F03539F9C8F326303EDFA8C190DC535FE3FAD90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:b1:60:ac:dd:77:cb:c8:49:b0:55:f1:f4:
                    f3:0d:85:8c:61:63:98:7d:9b:c6:db:3b:65:b3:9b:
                    e4:3d:6f:69:bb:cd:23:28:0f:29:88:65:5f:e2:e1:
                    39:35:ae:a4:d8:4a:d6:70:9f:3a:aa:40:d9:5f:83:
                    0d:04:e6:47:9a:95:92:d4:9e:56:19:74:8b:2e:47:
                    1c:89:f1:13:41:03:e1:1b:0c:88:8c:2c:93:3a:90:
                    fe:fe:6e:0f:9b:61:b7:4d:bd:38:df:cf:0a:d3:22:
                    36:78:c7:3e:ac:a9:b8:1f:50:27:59:16:5a:3e:7f:
                    59:d0:b3:08:ed:2a:ff:54:ad:1a:ba:76:f2:77:9a:
                    3f:eb:aa:dc:c4:22:c1:97:4b:6d:16:57:26:45:d8:
                    e8:db:32:f5:af:4b:a4:d7:06:b1:b3:ca:b9:e5:f7:
                    d6:55:23:ed:21:4a:8f:1d:49:96:5c:39:ea:a1:af:
                    c4:63:fc:5e:59:cd:0c:89:67:31:dc:8c:74:54:bf:
                    ad:e6:3c:e1:ac:07:a5:9b:14:c1:26:19:69:5e:da:
                    99:18:a9:5f:82:45:42:aa:f9:b2:d6:2a:38:05:7c:
                    db:c8:5a:17:b1:f8:b9:a9:dd:96:7e:14:9c:3e:3d:
                    ce:9c:fa:f3:db:e1:bc:ab:78:59:6e:dc:f8:28:81:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:35:39:F9:C8:F3:26:30:3E:DF:A8:C1:90:DC:53:5F:E3:FA:D9:0F
            X509v3 Authority Key Identifier:
                keyid:9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/8DU5-cjzJjA-36jBkNxTX-P62Q8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.91.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:5b:4e:ab:9a:55:02:1d:d1:d6:7d:e7:cb:27:02:92:2b:
         1f:7e:95:b3:37:49:7d:5d:3a:c2:c7:be:9f:cb:e2:df:8a:a5:
         c4:e1:40:e6:d5:1f:20:c4:35:7c:e4:76:09:4a:94:51:33:cf:
         ca:ce:68:20:59:f1:0d:d8:86:2c:f2:84:e8:8f:12:66:cc:dc:
         28:ca:f5:ba:04:94:95:6f:6b:30:23:f3:25:2e:ae:d2:70:8f:
         e4:a5:dc:69:e0:f3:af:4f:01:d7:32:ab:81:9a:99:84:18:2e:
         c2:d2:29:04:0f:68:11:3b:0e:83:80:f3:83:c9:b2:52:db:be:
         f9:0f:aa:19:5e:52:fe:df:14:b4:ad:82:ea:b6:73:29:00:4d:
         ec:fa:45:e0:11:01:99:e1:37:0f:60:ae:20:d8:43:b5:94:92:
         4f:2f:30:39:1f:29:48:8e:9c:65:e3:4f:6a:81:e7:a0:a6:21:
         36:9d:e7:74:8e:87:47:a7:1b:d9:3e:b4:09:bb:d9:b8:01:e5:
         a6:61:14:68:82:f6:1f:b7:5d:a7:27:d5:b8:78:de:61:38:2a:
         dd:cb:59:cc:bc:c1:86:59:80:ed:78:3b:b7:12:4d:7a:eb:ad:
         88:0d:51:56:40:80:16:0f:b2:1d:7f:76:a4:7f:17:09:57:72:
         a8:83:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:00 2025 by rpki-client on console.sobornost.net