Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/rJn2W25_8AD6JbiGyP_1NXfH8Z8.roa
File:                     rJn2W25_8AD6JbiGyP_1NXfH8Z8.roa (raw, json)
Hash identifier:          wSaPZs3gbtGcu1mU2RNo4pq8WKjZgebSnLQwxLRvVuc=
Subject key identifier:   AC:99:F6:5B:6E:7F:F0:00:FA:25:B8:86:C8:FF:F5:35:77:C7:F1:9F
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       3E
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/rJn2W25_8AD6JbiGyP_1NXfH8Z8.roa
Signing time:             Tue 20 May 2025 01:59:01 +0000
ROA not before:           Tue 20 May 2025 01:59:00 +0000
ROA not after:            Fri 15 May 2026 01:30:03 +0000
asID:                     138384
IP address blocks:        219.105.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 21:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: May 20 01:59:00 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=AC99F65B6E7FF000FA25B886C8FFF53577C7F19F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:98:1a:20:cb:1d:14:bd:12:36:65:bb:bb:
                    61:73:10:5d:f2:b3:de:eb:84:8a:a4:75:e9:98:e6:
                    96:27:38:d3:2f:77:a7:88:e1:2f:ba:c2:6c:5b:9a:
                    1d:0d:60:24:06:4a:df:50:fa:67:64:e3:8b:a5:bd:
                    6e:14:fa:86:95:37:b7:aa:39:5b:c6:53:e1:80:2b:
                    81:b9:cd:1b:59:97:77:24:68:59:20:70:6a:8b:71:
                    3d:63:1d:99:94:0d:c5:cc:d6:2a:95:62:4d:49:7d:
                    b4:46:ce:f3:e5:9a:93:54:d6:ad:12:2c:fd:3c:f9:
                    43:38:85:30:9e:6a:02:fb:bd:1a:0a:fd:a4:fb:72:
                    00:29:1f:41:99:11:16:ab:eb:5e:ae:f5:ca:8c:1e:
                    41:02:b5:90:bc:6a:30:fa:64:ee:34:3f:d3:75:c1:
                    37:23:11:3d:00:86:a3:55:53:a7:fb:6d:7d:ea:ae:
                    b6:8b:b6:d6:76:fc:90:76:6d:94:46:11:01:72:6c:
                    0d:74:f8:a0:e0:00:9c:d0:06:cb:84:1c:b1:79:1d:
                    09:be:a1:ad:fa:65:4d:f0:46:e5:cc:3e:9e:47:ff:
                    72:78:ad:ef:5c:af:a7:34:36:50:04:33:38:fa:98:
                    22:a1:4f:ec:34:c0:66:0b:58:da:a9:74:cf:e2:84:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:99:F6:5B:6E:7F:F0:00:FA:25:B8:86:C8:FF:F5:35:77:C7:F1:9F
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/rJn2W25_8AD6JbiGyP_1NXfH8Z8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:c2:e2:2b:df:64:a7:15:e6:de:f6:18:9e:95:68:ec:da:a1:
         dc:dd:f6:f4:01:e8:b9:31:5b:e0:70:80:81:26:e8:5c:fc:ce:
         da:28:25:67:b8:5f:a0:d5:fd:98:b1:6c:52:72:8b:02:36:f2:
         92:5e:c5:7c:41:d5:ef:03:9d:79:25:1b:c2:67:60:79:e7:b5:
         7b:ca:b8:c2:b3:0a:36:a4:4b:d2:28:8f:28:2e:24:ab:9a:3b:
         1d:68:e1:a1:9d:4c:87:ac:3d:73:b7:d0:a2:ff:4b:77:66:49:
         09:01:91:eb:ae:6d:de:28:e0:78:a5:d6:cf:9a:17:37:39:c1:
         c0:99:ce:27:b6:4e:9a:59:29:1f:18:ab:96:b2:87:7c:bf:83:
         99:4f:86:14:d6:40:b2:8b:dd:be:c4:b2:e8:28:51:41:f3:09:
         91:bf:95:58:70:98:92:07:a2:75:e1:56:bf:ff:bb:eb:b2:f1:
         77:df:57:db:d1:87:2a:b8:32:94:4d:e3:6c:88:ef:63:0b:a2:
         fb:aa:ee:41:3e:ce:e1:05:4e:de:0d:a9:98:3b:51:6d:c2:c8:
         5b:a8:65:67:9b:f5:e5:8e:48:0f:8a:6f:79:da:c4:f4:c1:45:
         53:cd:34:2a:3c:cc:34:f2:c2:47:4f:54:bc:1a:9d:29:66:b1:
         a5:cd:29:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:57:15 2025 by rpki-client