Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20269/9jjoZ8LnzLvFBvYcDh3j1wXTNUE.roa
File:                     9jjoZ8LnzLvFBvYcDh3j1wXTNUE.roa (raw, json)
Hash identifier:          orrK+F+1VvrOGX/4Y4EiT3fexZKhc+G+8auvBzCcKPo=
Subject key identifier:   F6:38:E8:67:C2:E7:CC:BB:C5:06:F6:1C:0E:1D:E3:D7:05:D3:35:41
Certificate issuer:       /CN=9F16C4C36A2E44B616F9A49EE6EE810D68EAE3C6
Certificate serial:       02
Authority key identifier: 9F:16:C4:C3:6A:2E:44:B6:16:F9:A4:9E:E6:EE:81:0D:68:EA:E3:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nxbEw2ouRLYW-aSe5u6BDWjq48Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/9jjoZ8LnzLvFBvYcDh3j1wXTNUE.roa
Signing time:             Mon 09 Jun 2025 13:14:15 +0000
ROA not before:           Mon 09 Jun 2025 13:14:15 +0000
ROA not after:            Tue 09 Jun 2026 13:02:26 +0000
asID:                     152868
IP address blocks:        160.187.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nxbEw2ouRLYW-aSe5u6BDWjq48Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F16C4C36A2E44B616F9A49EE6EE810D68EAE3C6
        Validity
            Not Before: Jun  9 13:14:15 2025 GMT
            Not After : Jun  9 13:02:26 2026 GMT
        Subject: CN=F638E867C2E7CCBBC506F61C0E1DE3D705D33541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:15:46:b8:07:b5:93:9a:bd:4e:fa:58:43:
                    e4:d3:bd:a6:99:60:d6:c8:75:4e:89:27:78:4b:22:
                    c1:4f:7a:d8:d6:3b:af:d2:ee:1b:5b:9b:8e:90:22:
                    a8:30:e2:fc:87:92:7b:5c:c6:44:54:ff:56:e7:f6:
                    67:cc:c6:68:79:22:65:85:c9:bd:1e:45:87:ee:e0:
                    7e:c1:6c:b9:37:74:8c:31:cb:6b:a4:26:42:81:7f:
                    2e:92:7a:ea:94:fa:33:64:ea:80:1e:05:5e:ee:85:
                    d3:ce:1e:6f:48:08:5b:f8:fe:7f:69:02:a4:7a:63:
                    46:ed:0d:d2:51:75:eb:54:ab:89:35:4f:9f:58:bd:
                    4c:da:9e:40:24:31:7d:40:ea:a1:34:74:09:45:76:
                    35:59:2a:e8:c7:90:2e:bf:68:d4:7d:5b:1f:33:56:
                    f9:3f:40:6c:8b:58:fc:3d:c3:57:98:56:07:8b:e7:
                    7a:21:99:f1:12:df:18:a5:bc:79:87:a6:09:e2:d9:
                    92:60:05:4c:c2:85:86:c3:af:a6:42:a0:70:9e:0f:
                    f8:87:68:dc:92:e8:07:4b:d1:ae:4c:65:0d:b5:e6:
                    26:65:06:3c:db:68:1c:80:9d:c9:ca:a5:ea:16:85:
                    d8:7a:64:bf:e0:45:f3:18:9e:09:75:d7:89:cc:75:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:38:E8:67:C2:E7:CC:BB:C5:06:F6:1C:0E:1D:E3:D7:05:D3:35:41
            X509v3 Authority Key Identifier:
                keyid:9F:16:C4:C3:6A:2E:44:B6:16:F9:A4:9E:E6:EE:81:0D:68:EA:E3:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nxbEw2ouRLYW-aSe5u6BDWjq48Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/9jjoZ8LnzLvFBvYcDh3j1wXTNUE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:da:9f:9b:7b:c6:68:db:c7:0f:05:9e:ee:6b:7d:1d:69:
         1b:f9:26:7a:6a:49:0c:e2:78:99:83:3c:6d:9e:8d:73:8b:8b:
         40:a5:71:85:ae:55:0b:26:24:f8:6f:08:c9:4f:a3:cd:96:6e:
         29:d9:f4:5a:00:eb:42:a6:43:38:b3:11:37:d5:64:a0:46:be:
         79:88:a2:2f:a8:43:52:82:91:55:a9:97:cb:cf:fd:3e:ce:67:
         a2:70:70:1a:5f:5d:6f:e4:c8:93:a7:8c:14:ee:25:6d:68:a1:
         11:79:52:76:27:53:18:4e:ed:a5:b3:5c:7f:31:37:8c:d6:81:
         79:77:21:65:9f:90:a6:bb:91:bc:92:e0:6f:d0:17:85:0d:a8:
         93:e7:67:33:26:d3:21:d0:c6:da:b8:f8:3a:06:fc:3a:f6:22:
         5d:da:4a:51:8a:8f:9a:d5:13:83:f3:ba:f7:ed:fc:d2:3c:e0:
         4e:5f:d1:29:a5:f4:34:c4:3d:e8:a5:c2:5c:81:63:70:de:64:
         60:6c:84:4b:15:25:30:a9:bb:22:55:1d:d9:8d:80:25:2f:03:
         fd:95:72:79:e1:d3:03:84:a0:fb:d9:e7:fe:98:b8:8d:eb:db:
         a1:b7:30:52:02:f8:40:e8:21:4f:68:6f:5a:6f:6c:52:80:1e:
         7f:b3:9b:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:01:06 2025 by rpki-client