Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/224/5z_-51uYyoMEIkDHSQc2wEowqYg.roa
File:                     5z_-51uYyoMEIkDHSQc2wEowqYg.roa (raw, json)
Hash identifier:          o4Sa2jSKMeDj62XvdDfDoQP7x/2M3UU+pO4A/r8tl0Y=
Subject key identifier:   E7:3F:FE:E7:5B:98:CA:83:04:22:40:C7:49:07:36:C0:4A:30:A9:88
Certificate issuer:       /CN=D623C38C2A127007F93E7C840DF875022E51C547
Certificate serial:       1C
Authority key identifier: D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/5z_-51uYyoMEIkDHSQc2wEowqYg.roa
Signing time:             Tue 27 May 2025 01:59:00 +0000
ROA not before:           Tue 27 May 2025 01:59:00 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     7668
IP address blocks:        202.245.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D623C38C2A127007F93E7C840DF875022E51C547
        Validity
            Not Before: May 27 01:59:00 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=E73FFEE75B98CA83042240C7490736C04A30A988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:7d:8f:6f:ed:b9:a5:80:63:3e:cd:28:4c:
                    7b:8e:92:64:fc:75:1e:32:53:4e:13:ea:f6:4f:81:
                    b9:e8:1f:e6:e7:94:f0:62:85:e0:61:c1:f0:a2:47:
                    76:fa:ae:42:7a:7c:cf:c4:74:3e:f8:5f:c8:e1:d9:
                    54:1b:58:57:89:ee:90:c1:d9:64:a3:d1:b8:9f:0f:
                    58:a6:e0:6a:ce:3f:8e:2e:94:8f:66:5a:8f:b8:d8:
                    e0:d0:12:b2:99:65:b4:4e:b5:0e:2e:52:4a:6d:e5:
                    34:9f:54:4e:22:a3:85:b2:20:10:4f:d6:01:5d:9a:
                    17:b2:f8:01:ec:79:1e:c1:4b:0d:54:1b:6b:18:b1:
                    14:e9:50:21:b6:91:4a:a2:7a:31:d3:57:c7:98:3f:
                    11:08:c4:72:86:94:be:8b:8d:b8:90:20:f3:cf:63:
                    97:e6:45:f1:84:85:5d:02:a4:5a:a0:af:4c:84:1f:
                    d4:c1:2e:fd:da:fa:95:45:8a:83:b7:ee:53:e2:a5:
                    33:ec:43:44:d2:b5:80:12:64:f7:a7:f1:47:2f:8b:
                    c6:8f:f7:70:ef:b7:dc:7c:17:42:ef:2b:79:c2:d1:
                    ac:6e:02:88:3f:9c:ab:1b:08:3f:8d:cb:41:e2:d3:
                    78:c1:50:92:0a:a4:73:0a:52:99:ea:c4:41:71:d5:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3F:FE:E7:5B:98:CA:83:04:22:40:C7:49:07:36:C0:4A:30:A9:88
            X509v3 Authority Key Identifier:
                keyid:D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/5z_-51uYyoMEIkDHSQc2wEowqYg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.245.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:4b:3c:e6:db:2d:91:ff:e4:ee:66:65:d7:ff:6c:02:34:0a:
         bf:e0:45:04:08:24:1e:87:12:d0:ba:bf:7f:69:6b:b0:32:eb:
         0a:02:f3:a9:be:8e:19:c8:7e:fc:b5:67:23:aa:d6:04:bc:98:
         a6:c4:2f:0e:f7:f8:78:9e:24:2c:3b:48:dc:5f:2d:bb:21:59:
         99:1d:90:02:89:64:02:b0:f1:67:b7:da:52:a6:d5:85:ed:02:
         cc:48:b6:b6:52:ce:53:ae:64:68:c3:22:25:01:b6:04:e9:68:
         f4:4c:b7:1a:5b:c2:f4:4f:cd:c6:56:4e:f0:c8:e6:f1:e1:14:
         05:c4:ed:75:4b:60:17:82:bf:bb:7b:e3:98:f2:52:c0:d1:b0:
         a3:2a:50:82:6a:ef:74:f3:ce:6e:35:89:a4:1f:62:82:52:f1:
         fb:52:24:79:96:9f:25:66:88:a8:de:54:ed:d2:38:c2:18:7b:
         e1:27:3f:08:82:86:1a:55:b5:5d:a2:16:1d:fa:71:59:22:cb:
         51:7e:29:9e:a0:00:e8:b6:07:5b:4d:46:3c:08:8c:96:3d:c4:
         f7:fe:a2:08:21:e2:bd:77:61:db:69:dd:b8:1e:3d:96:7d:59:
         bc:87:ee:eb:2f:93:2c:a1:ca:6b:2d:7d:7c:4e:ff:5d:ad:cb:
         c4:5f:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:09:57 2025 by rpki-client