Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/0LXFkzNdyRJXFploJgygAwjI1hw.roa
File:                     0LXFkzNdyRJXFploJgygAwjI1hw.roa (raw, json)
Hash identifier:          pC0OBV1AaZAM4hNYH42+Qom21fZS7B/W8Lg5q/zPQLE=
Subject key identifier:   D0:B5:C5:93:33:5D:C9:12:57:16:99:68:26:0C:A0:03:08:C8:D6:1C
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       1D
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/0LXFkzNdyRJXFploJgygAwjI1hw.roa
Signing time:             Mon 01 Sep 2025 01:31:51 +0000
ROA not before:           Mon 01 Sep 2025 01:31:51 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        133.149.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 05:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Sep  1 01:31:51 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=D0B5C593335DC91257169968260CA00308C8D61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e4:6a:f8:c0:66:d1:b4:98:50:54:3a:19:bf:
                    b9:7c:f0:f6:4c:ff:56:ea:1a:b3:df:ab:0c:fc:ce:
                    f8:26:c3:e0:10:f2:09:b7:67:fc:90:1b:97:23:72:
                    6f:37:70:51:5e:3b:80:09:9e:b6:b9:24:a0:d1:c4:
                    33:8d:4e:8d:76:45:2b:dc:c7:2c:a1:e9:29:f3:e1:
                    e0:2f:f2:3c:c1:e7:75:9d:d7:16:b5:9e:1a:1b:bc:
                    86:52:b1:a8:77:6e:a5:7e:e6:bc:17:ba:ab:1a:78:
                    70:32:59:92:25:a3:61:c6:54:0e:3b:e6:4e:16:76:
                    a3:79:1b:e8:b7:26:c0:db:2e:98:8a:c3:9e:6c:ae:
                    dd:76:ba:7b:a7:ad:37:cd:9d:e5:0d:62:f6:58:e5:
                    83:5b:00:c7:0b:ac:9b:84:90:56:42:0d:db:0d:55:
                    fa:e3:72:aa:ee:5e:5d:6f:ba:e8:f3:10:0a:51:f1:
                    f4:a4:b1:d8:85:9d:1f:e1:32:3a:40:c3:e5:29:bc:
                    f3:ca:dc:f5:e6:a4:1d:10:59:bf:55:7f:2f:f8:73:
                    6c:87:2f:bc:5c:04:65:f1:f7:18:44:df:6b:e5:7e:
                    09:25:3a:47:e7:01:6e:50:db:8d:d4:09:dc:9f:e0:
                    92:12:dc:65:51:e5:c8:12:cf:bb:b8:c0:09:23:4e:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B5:C5:93:33:5D:C9:12:57:16:99:68:26:0C:A0:03:08:C8:D6:1C
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/0LXFkzNdyRJXFploJgygAwjI1hw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.149.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:79:47:4e:eb:f9:69:d8:60:a6:4a:40:3c:42:08:a2:e2:ce:
         fc:d5:7b:30:82:4d:bc:1a:8f:f3:1c:e9:23:f8:55:de:8f:e9:
         d5:42:a2:1e:e2:ad:7f:0b:73:d1:2c:27:fa:5c:70:8e:f4:52:
         62:a0:2c:d0:5d:ec:e1:49:87:94:23:08:48:91:1a:3f:f0:84:
         69:a4:8a:28:95:06:8b:b5:af:2e:03:f3:52:1f:6d:15:6c:74:
         e3:38:10:7c:30:ea:ed:ee:0e:a8:aa:91:21:92:87:d0:83:42:
         4c:3b:99:60:12:4c:26:f7:44:de:97:00:b2:43:48:37:4e:88:
         59:5a:43:8f:92:82:cc:c3:f4:a0:61:4a:a0:d8:d0:43:03:71:
         d1:5d:c7:e2:e7:1a:19:e3:eb:14:c2:4d:0c:57:49:f9:9f:d3:
         b8:25:98:9a:1e:55:d4:aa:ac:93:84:92:1a:46:ee:63:40:17:
         c3:47:8c:b7:0c:66:65:1d:d7:f4:12:9d:79:fb:dc:80:ea:58:
         49:e6:48:c0:f7:a0:41:b7:73:fb:19:85:63:83:2a:24:43:4d:
         22:65:cc:f1:66:f7:a2:2f:4c:83:97:90:cc:92:de:46:42:83:
         18:33:f9:ce:c8:5e:52:5a:58:52:ea:9a:99:81:2f:e1:d9:1b:
         8e:e4:2c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:28:14 2025 by rpki-client