Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/1i0SyD7c_aqG2oEuncju0MZzvx4.roa
File:                     1i0SyD7c_aqG2oEuncju0MZzvx4.roa (raw, json)
Hash identifier:          yco8LME3BPdlBvS2xfS5G2t3Jd+WsIcgys0RpMD+l18=
Subject key identifier:   D6:2D:12:C8:3E:DC:FD:AA:86:DA:81:2E:9D:C8:EE:D0:C6:73:BF:1E
Certificate issuer:       /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Certificate serial:       4B
Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/1i0SyD7c_aqG2oEuncju0MZzvx4.roa
Signing time:             Thu 10 Jul 2025 03:53:48 +0000
ROA not before:           Thu 10 Jul 2025 03:53:48 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     131921
IP address blocks:        133.117.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 19:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
        Validity
            Not Before: Jul 10 03:53:48 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=D62D12C83EDCFDAA86DA812E9DC8EED0C673BF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b0:86:f2:75:c3:61:49:5c:91:6a:3b:2c:8c:
                    42:04:8d:5e:76:89:6b:32:6c:36:c4:81:89:6a:e8:
                    f3:09:a0:26:08:c2:2e:b0:c1:db:78:55:4d:1c:b0:
                    8a:af:92:36:c0:09:10:af:e3:28:dd:92:50:7b:43:
                    96:b6:f3:44:34:62:5a:5b:13:d2:a0:68:28:67:75:
                    25:44:31:9e:85:c6:9e:64:a0:6d:47:ab:23:30:76:
                    43:97:62:4d:4b:03:c3:ff:ff:b1:6a:73:7e:5a:d0:
                    5e:c9:89:91:80:d2:68:39:36:ac:35:d6:49:b7:2a:
                    b7:e4:cd:99:d5:15:56:4b:60:55:66:5a:74:a9:fe:
                    4a:ea:a9:0a:ee:f0:e1:0c:b3:ef:8b:7d:4a:56:fe:
                    90:35:b1:6c:77:69:1a:86:3a:23:d1:53:55:17:17:
                    54:68:22:8f:a3:ec:29:7a:0a:c3:d0:16:18:48:72:
                    3f:2d:cb:70:8e:4e:2f:22:1a:a0:5a:4a:64:1c:56:
                    64:b9:cc:20:1a:27:b4:b8:24:db:a3:56:fb:0a:90:
                    95:42:c3:81:13:0d:fc:f6:16:dc:f4:af:7f:62:e6:
                    d4:15:de:11:96:f6:10:e9:e8:77:6b:2e:01:69:ca:
                    ff:7f:f8:ad:12:f6:2f:ad:ba:cd:2f:af:2a:39:7f:
                    5c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2D:12:C8:3E:DC:FD:AA:86:DA:81:2E:9D:C8:EE:D0:C6:73:BF:1E
            X509v3 Authority Key Identifier:
                keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/1i0SyD7c_aqG2oEuncju0MZzvx4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.117.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b1:42:6b:71:0f:53:ef:c0:58:e4:8e:73:29:c7:a4:81:4c:45:
         a4:26:1d:44:67:98:6e:29:89:49:69:3b:ff:3b:c9:54:4b:e2:
         cb:72:0a:7e:7d:f1:1e:21:86:16:43:ff:c9:16:16:22:f9:25:
         14:22:76:4c:5c:69:e8:07:bd:3c:c6:3a:24:c3:89:55:10:43:
         29:a1:99:96:8c:9f:cf:24:00:35:a6:ad:75:45:51:93:99:bf:
         99:80:3f:8e:e5:10:28:95:02:75:c2:df:c5:01:79:b8:ba:8d:
         7a:8f:5a:2d:d4:21:d3:54:84:b9:0a:cf:c9:52:60:68:54:4f:
         ab:97:b8:da:68:13:68:c1:5b:72:93:80:4a:64:89:57:45:2e:
         43:a7:86:31:6c:17:b1:77:ae:23:bd:94:24:ca:1a:61:8a:aa:
         4f:29:64:a9:4c:1e:64:6c:99:40:04:50:fc:45:82:89:90:29:
         4e:f1:c7:24:f9:16:53:0b:dc:f0:d6:c8:6b:f6:53:b3:d7:ce:
         2e:b1:ce:5f:63:a7:e0:c5:49:b7:7c:a7:63:7d:e8:c9:39:b1:
         ab:fc:f2:89:89:43:a5:0e:bc:6e:09:74:92:ac:c4:e8:46:5e:
         d2:5a:b3:03:0f:df:c6:c9:b3:58:52:56:61:73:65:7e:77:19:
         54:4f:4b:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 20 23:47:03 2025 by rpki-client