Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/P56LeAdgdUqDPYc2YLWszt8KN_o.roa
File:                     P56LeAdgdUqDPYc2YLWszt8KN_o.roa (raw, json)
Hash identifier:          UtxSkQrNli3NcT90X7IECUC5UPChbWo5RVZ+NFUahx4=
Subject key identifier:   3F:9E:8B:78:07:60:75:4A:83:3D:87:36:60:B5:AC:CE:DF:0A:37:FA
Certificate issuer:       /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial:       18
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/P56LeAdgdUqDPYc2YLWszt8KN_o.roa
Signing time:             Wed 09 Apr 2025 07:14:23 +0000
ROA not before:           Wed 09 Apr 2025 07:14:23 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     45687
IP address blocks:        27.54.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
        Validity
            Not Before: Apr  9 07:14:23 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3F9E8B780760754A833D873660B5ACCEDF0A37FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:fc:06:75:fa:f0:42:57:9f:ae:75:2c:ac:
                    3a:bc:2a:12:ac:a8:c0:cd:40:40:12:39:ea:a6:c0:
                    d3:f2:2b:92:15:bc:85:b9:f9:b0:96:17:7b:56:94:
                    a6:ed:50:3d:4f:b5:dc:8c:43:51:9c:6e:1f:a3:8a:
                    9b:4b:39:42:4f:99:f8:f1:0d:2f:c0:67:ad:0b:2b:
                    ea:71:ab:73:c5:39:37:3e:4d:fe:3a:70:aa:cc:93:
                    af:f9:28:91:2c:a4:1f:fc:de:e1:c5:9a:92:47:5e:
                    c8:1e:ed:f2:20:99:9d:a5:3e:8b:a3:a2:e6:a3:a5:
                    e4:7c:b0:2d:c3:60:11:22:87:b3:bc:5a:1f:9e:5e:
                    a0:6e:3d:f9:89:4b:2a:05:ae:d3:8d:ea:ea:42:81:
                    a6:63:db:5a:2c:61:10:44:25:c3:b4:83:08:29:46:
                    5e:5f:9e:54:92:9c:7a:b0:0e:48:e8:f3:3a:ba:74:
                    59:35:29:53:c1:5e:25:77:3f:a1:43:02:25:c6:3c:
                    00:09:e7:d0:31:f1:db:14:0b:09:83:e6:44:ed:07:
                    35:45:15:5d:de:41:d9:9f:34:54:99:49:2f:8f:78:
                    c5:e2:db:e8:38:d9:60:54:e7:23:85:a9:05:ff:b2:
                    2c:20:8a:52:df:1d:d7:aa:70:4b:bb:98:09:03:48:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9E:8B:78:07:60:75:4A:83:3D:87:36:60:B5:AC:CE:DF:0A:37:FA
            X509v3 Authority Key Identifier:
                keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/P56LeAdgdUqDPYc2YLWszt8KN_o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:07:63:eb:a6:e4:17:87:da:85:34:9a:88:c2:d2:b9:5d:39:
         a9:c6:73:61:5a:58:1c:f3:45:f3:32:ef:bb:ca:f6:93:a7:c2:
         86:d1:95:cf:e3:6a:54:75:0b:46:31:b6:d5:d7:e8:2c:6e:84:
         1a:ca:cd:2f:40:40:e6:02:f8:87:bc:fa:cc:33:7d:87:12:9d:
         84:5e:a6:f7:83:f6:2d:c5:77:ef:94:03:39:bf:e9:c9:93:5c:
         14:93:8e:ad:95:d8:56:bc:ad:6a:41:24:84:ea:4b:a6:bf:2f:
         c4:ae:52:6a:ef:aa:e0:b6:09:9f:37:26:30:3b:ff:27:b2:41:
         74:86:d3:99:8c:e9:b2:0e:6d:19:90:3b:35:a6:fb:b3:b3:b8:
         48:a0:f1:5f:69:e7:97:29:f1:eb:5c:9b:a7:93:87:c3:5c:94:
         38:f3:35:9a:1f:2e:ca:6e:62:c1:e5:32:df:33:a7:48:2b:f9:
         34:3b:e8:86:dc:9f:37:f9:94:9a:75:20:f4:c1:52:49:a9:3f:
         8d:01:5c:48:8d:9d:87:6a:f8:c3:16:0c:31:27:33:c5:7b:22:
         e8:6a:32:0b:dc:24:65:66:0d:3c:44:84:a4:69:66:b7:a0:d5:
         73:4a:e8:88:a1:9d:02:ad:80:b4:0d:3a:26:7c:67:bb:5d:87:
         d6:cd:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:01 2025 by rpki-client on console.sobornost.net