Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/-X0jJu_8YcrgmbwcLJfL0rPbn2s.roa
File:                     -X0jJu_8YcrgmbwcLJfL0rPbn2s.roa (raw, json)
Hash identifier:          jtzsHUMra6xFH5FqrWEWPZJ6jLip/jyJJO//rUxrluo=
Subject key identifier:   F9:7D:23:26:EF:FC:61:CA:E0:99:BC:1C:2C:97:CB:D2:B3:DB:9F:6B
Certificate issuer:       /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial:       4B
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/-X0jJu_8YcrgmbwcLJfL0rPbn2s.roa
Signing time:             Tue 01 Jul 2025 08:42:08 +0000
ROA not before:           Tue 01 Jul 2025 08:42:08 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     4675
IP address blocks:        202.233.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
        Validity
            Not Before: Jul  1 08:42:08 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=F97D2326EFFC61CAE099BC1C2C97CBD2B3DB9F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:e3:5c:90:95:39:bd:34:39:a6:8a:09:1d:
                    e3:1a:45:7e:0b:a9:3e:20:04:94:84:34:96:8a:10:
                    c6:59:82:02:ab:e2:84:ee:b7:49:24:3f:86:f4:b9:
                    74:5a:dc:6c:4a:04:78:6f:41:a7:57:01:15:42:be:
                    53:39:b3:69:16:61:00:75:09:b8:74:88:0d:9d:91:
                    22:97:17:4c:cd:26:f6:56:b7:27:ff:7d:ea:e2:52:
                    c7:1f:c4:ca:2e:fc:86:9f:b4:f7:b5:b1:38:c3:61:
                    f8:b6:ea:f1:f1:93:e1:c6:75:38:86:a2:15:7a:d0:
                    5f:d4:b6:9c:82:e2:6f:f5:29:31:91:62:1d:3f:7a:
                    2e:7e:bf:18:fa:66:94:3a:a5:85:20:19:03:de:0d:
                    02:4d:3b:ce:d8:08:e4:1d:56:e7:08:fd:37:96:17:
                    d9:6c:9b:bd:5f:9b:bb:81:be:4e:c9:e8:b2:94:e6:
                    4b:47:28:05:88:7f:5a:d0:ac:d9:dc:a1:c6:52:74:
                    c0:77:13:90:a9:79:ff:ba:7a:bd:23:89:3f:c6:16:
                    33:7b:ac:76:3e:0f:04:2a:8f:61:a6:63:cc:73:7a:
                    8b:4d:92:4e:af:a1:7f:80:81:12:de:f7:cd:7d:c1:
                    3f:de:cc:5e:31:35:81:a5:29:e6:24:88:b1:67:9b:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7D:23:26:EF:FC:61:CA:E0:99:BC:1C:2C:97:CB:D2:B3:DB:9F:6B
            X509v3 Authority Key Identifier:
                keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/-X0jJu_8YcrgmbwcLJfL0rPbn2s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.233.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         12:0a:03:b4:6d:07:78:7a:64:26:63:4b:b2:0d:55:3d:30:04:
         af:4a:f1:98:3b:06:03:ee:dc:a5:cc:6d:90:a3:44:cc:84:2f:
         5b:30:a3:68:ce:aa:5c:51:80:24:ec:0e:a8:df:15:77:c4:e3:
         c3:b6:0d:1f:a9:83:d8:32:dd:72:17:ad:9d:d9:2e:30:b3:00:
         21:84:11:d7:dc:5f:9b:27:92:2c:c6:3f:6c:23:70:83:3d:84:
         2b:02:56:bd:a6:04:00:40:96:e8:4a:d7:5e:42:b6:19:3e:f8:
         80:5a:f7:ec:01:96:03:9a:05:1b:75:08:75:fe:b9:aa:5a:b6:
         9e:ba:d5:03:58:69:7b:88:85:ac:79:33:d9:da:dd:97:cb:4f:
         a0:a4:99:0c:4f:0e:d7:61:c8:d5:62:58:52:ec:9b:b2:b1:85:
         6d:f5:ba:2d:53:ec:f2:a5:83:b5:a8:e4:2d:bf:41:d4:89:15:
         31:e3:0a:26:54:e7:bc:19:ff:f8:cc:dd:bd:14:55:d3:d1:08:
         68:6b:c5:6e:e9:45:26:56:89:f6:17:19:b9:ec:2a:3f:4e:d2:
         59:fb:3a:1e:86:21:e6:e3:c5:10:9d:b5:fc:c4:dd:31:35:9d:
         1c:c4:c4:ae:b3:44:b1:36:81:14:05:95:0c:2c:ba:b7:d6:be:
         6b:b6:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:56:26 2025 by rpki-client