Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/wetWsS71e4bD8zmQBMdgcFVW08E.roa
File:                     wetWsS71e4bD8zmQBMdgcFVW08E.roa (raw, json)
Hash identifier:          bDCimgflnAflvk1y5+nhQsQIpKcf3W+NmIkkmjbjFTU=
Subject key identifier:   C1:EB:56:B1:2E:F5:7B:86:C3:F3:39:90:04:C7:60:70:55:56:D3:C1
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       51
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/wetWsS71e4bD8zmQBMdgcFVW08E.roa
Signing time:             Tue 27 May 2025 02:31:46 +0000
ROA not before:           Tue 27 May 2025 02:31:46 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9354
IP address blocks:        219.100.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 17:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: May 27 02:31:46 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=C1EB56B12EF57B86C3F3399004C760705556D3C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:b9:d9:2a:d3:1c:28:06:a3:82:c3:a4:91:
                    b1:a4:94:62:69:80:fc:cd:4b:97:e7:8d:e7:0e:2e:
                    ce:f1:c3:8d:c6:cd:98:42:a1:1a:9c:d4:6d:3d:9a:
                    9b:1d:6a:b6:e7:30:65:7e:3b:84:26:3d:0d:ab:5e:
                    b0:51:db:b5:09:c5:cf:39:4d:90:c0:95:ed:8f:86:
                    03:79:db:1b:c7:c8:ba:e5:fa:8a:fb:67:e9:13:9f:
                    cc:7b:ab:6a:c4:ee:17:a1:8e:7d:2c:a0:d7:b7:e0:
                    a0:c5:fd:cd:04:2a:62:5c:b9:53:cb:91:5c:89:cd:
                    91:b1:f0:e7:2e:ec:7f:cc:cf:9f:aa:3e:8a:12:9b:
                    dc:27:d7:f7:86:b4:bc:66:09:45:22:a1:c4:5a:79:
                    f0:c4:5b:00:85:de:6d:1c:4f:ee:d7:f3:6f:25:8f:
                    e5:73:52:ae:1d:72:e8:b8:38:fa:e3:a5:55:47:6a:
                    46:aa:e6:59:ad:77:ee:2d:60:de:43:e4:dd:3b:75:
                    3a:12:54:8c:46:f5:67:76:d5:ae:7b:d3:54:11:0b:
                    8e:b2:62:99:2c:58:f2:1f:64:e0:3b:95:6c:f3:07:
                    36:e4:ca:1f:d9:64:9d:df:de:f1:ec:2e:58:65:9f:
                    1e:0f:45:cf:c8:7f:ed:72:5d:1a:d6:c5:98:af:91:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EB:56:B1:2E:F5:7B:86:C3:F3:39:90:04:C7:60:70:55:56:D3:C1
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/wetWsS71e4bD8zmQBMdgcFVW08E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:5f:01:56:1f:24:6b:8b:b5:a4:e7:eb:2d:ef:21:69:03:
         c8:7e:b8:41:31:3f:db:60:44:d2:4c:8e:70:93:84:63:75:d4:
         8d:76:4a:84:f7:60:fd:d4:b2:da:19:37:1a:d6:7f:d2:6b:3e:
         cd:d2:87:db:80:7f:eb:fc:22:ef:11:bd:da:52:ba:78:de:d0:
         9c:0f:9a:00:a4:59:60:2c:9f:e5:77:5b:0e:53:7c:fa:7d:06:
         75:57:88:3a:0f:38:eb:f6:19:d4:c9:ad:32:9d:bf:1d:ae:8a:
         98:30:4e:ee:d8:68:e2:72:13:6b:c6:54:c7:52:de:00:68:be:
         95:bc:e0:0d:65:4e:e9:53:6e:bc:9b:16:8b:e6:33:bc:f7:15:
         88:aa:79:f2:44:7b:02:04:e1:bd:50:7c:e4:61:cd:28:2a:14:
         a9:09:00:fc:7c:05:f5:ce:d8:78:09:e4:d3:0d:51:43:d9:cb:
         97:0d:54:8a:b8:a0:9a:4a:bc:26:a0:dc:19:25:6e:a8:d9:7b:
         bd:c0:a3:3d:d2:da:0e:ea:2f:62:d5:2f:d4:d4:dc:74:6f:4a:
         e0:c7:0f:2f:25:40:32:8d:5e:c3:4b:b5:09:60:12:30:a5:e2:
         5e:bd:d3:fc:c6:e2:f5:72:00:ed:82:f3:eb:84:e7:91:1c:42:
         db:8b:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:22:30 2025 by rpki-client