Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/-9i3Mf45a625EMRvHwLqq_urhSM.roa
File:                     -9i3Mf45a625EMRvHwLqq_urhSM.roa (raw, json)
Hash identifier:          TyKKibl926Bu3KqXyiC1+s9IyXqzgaPzFmyDGZO74XE=
Subject key identifier:   FB:D8:B7:31:FE:39:6B:AD:B9:10:C4:6F:1F:02:EA:AB:FB:AB:85:23
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0111
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/-9i3Mf45a625EMRvHwLqq_urhSM.roa
Signing time:             Thu 24 Jul 2025 02:13:05 +0000
ROA not before:           Thu 24 Jul 2025 02:13:05 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        61.195.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:13:05 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=FBD8B731FE396BADB910C46F1F02EAABFBAB8523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e1:ed:3e:da:7c:90:04:12:7a:ad:fa:1e:47:
                    b8:eb:3e:8f:ff:d1:47:35:12:6a:25:d4:58:f5:6b:
                    d1:eb:9f:69:0b:35:9a:e7:15:dd:08:e4:d9:45:06:
                    a7:81:c7:c5:bf:87:19:fa:72:d1:30:8f:b2:bb:e9:
                    c7:a2:00:b6:66:48:93:75:41:0c:12:d9:93:34:dd:
                    05:6a:31:f2:a5:b3:bd:a0:b1:f2:6b:db:45:ab:51:
                    4d:1b:f9:d7:ac:e2:d1:e2:41:05:be:6b:97:f1:07:
                    fc:e2:62:fe:4f:33:25:1a:47:a0:cd:f8:c2:89:cc:
                    90:1f:b4:f3:cd:69:b0:03:22:e7:3b:76:ef:26:7f:
                    5e:9f:38:0f:82:9b:3e:26:6b:68:71:19:6b:c2:d4:
                    6f:bf:5c:9a:76:2f:a8:83:80:17:42:db:12:e7:33:
                    0e:7c:59:50:2b:a5:4b:e2:61:74:75:4b:f6:7f:3b:
                    35:52:29:60:89:0b:98:b6:a5:a8:a9:31:74:62:aa:
                    f0:68:09:63:9c:a0:79:f5:f0:06:93:b1:29:fb:33:
                    07:bf:ec:43:8c:c5:9a:ee:3e:b9:53:b5:78:de:eb:
                    7d:b5:fe:5c:48:15:a9:fa:8d:ed:2d:e5:36:03:12:
                    11:1f:21:45:69:b6:05:be:69:69:ca:eb:7c:78:14:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:B7:31:FE:39:6B:AD:B9:10:C4:6F:1F:02:EA:AB:FB:AB:85:23
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/-9i3Mf45a625EMRvHwLqq_urhSM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:2d:b6:f9:99:e9:ce:05:fd:28:6a:11:1a:19:33:79:66:9d:
         6a:11:8b:34:96:6d:5f:fa:aa:aa:75:c6:e2:db:b4:a4:77:2e:
         44:4c:2c:aa:11:f1:c7:ec:75:ec:f3:d7:4d:e9:9c:8b:32:f8:
         f8:2b:85:b6:35:f8:65:5b:b8:c1:06:08:39:bf:4f:a7:2d:9e:
         e2:f9:54:e4:6e:96:ee:fc:d2:db:e6:3e:73:93:6e:e4:8c:e1:
         60:c5:bf:d5:40:21:a4:1f:5a:2c:8d:3a:99:f2:1c:69:57:93:
         cd:47:f0:c4:1c:fa:a5:ce:94:be:8a:81:35:51:e3:81:07:d0:
         01:fd:36:e2:35:24:c3:93:94:d0:ac:28:d9:b4:85:17:2e:38:
         30:94:9c:3e:0e:6d:9b:c4:31:9b:a8:a8:7f:2b:f7:37:d0:6d:
         25:7e:e4:01:cd:1e:c7:70:3d:db:a2:22:cd:54:22:33:37:16:
         12:2b:f6:cb:5b:74:4e:0f:ac:7e:c1:0b:96:0b:13:11:0d:24:
         55:f5:1f:0f:c1:49:06:05:8f:54:ec:e9:ad:41:a5:e4:49:65:
         d9:7d:99:42:d8:19:39:ec:fe:93:38:a8:6f:43:f9:2f:be:d8:
         68:72:32:91:7a:0d:fb:14:75:ad:f5:d0:b0:b5:09:87:b7:38:
         5f:e6:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:02:00 2025 by rpki-client