Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/MOwXkb00sff3wceK-yp9WqLWjLE.roa
File:                     MOwXkb00sff3wceK-yp9WqLWjLE.roa (raw, json)
Hash identifier:          4b7mKsNvzXSxCTBIKsH46KDoIS53c2/ar58FQBrcPKU=
Subject key identifier:   30:EC:17:91:BD:34:B1:F7:F7:C1:C7:8A:FB:2A:7D:5A:A2:D6:8C:B1
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       41
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/MOwXkb00sff3wceK-yp9WqLWjLE.roa
Signing time:             Tue 01 Jul 2025 01:32:44 +0000
ROA not before:           Tue 01 Jul 2025 01:32:44 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jul  1 01:32:44 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=30EC1791BD34B1F7F7C1C78AFB2A7D5AA2D68CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:76:93:5e:6f:36:23:5d:ef:d5:cc:e6:99:
                    86:1d:63:a8:07:7f:0b:65:f9:e9:f4:29:04:07:c0:
                    63:94:36:ae:e6:e2:19:23:18:12:b1:81:c8:d7:6e:
                    c1:6a:9c:e0:e6:3a:92:05:28:c5:ac:2a:23:87:ee:
                    ef:6f:0f:e0:72:b7:bb:a2:21:ae:7a:2b:14:84:87:
                    6e:b3:29:36:57:ee:5b:ab:e3:35:fb:6b:5f:e2:d9:
                    ea:bd:44:a1:97:72:cc:0b:b9:75:8a:90:5d:fe:35:
                    5c:d3:70:ce:e0:95:23:4f:03:40:d5:ba:98:e6:5a:
                    bb:7d:dc:72:a9:b6:11:75:dc:b8:23:69:7b:48:98:
                    72:34:87:b8:4e:a9:1d:e1:27:cb:67:5d:a1:fd:bd:
                    fc:95:0a:01:d9:f9:4b:d5:0c:0c:7f:dc:18:61:5d:
                    0a:9d:73:d2:f1:5a:e1:08:04:71:5e:59:6a:c8:da:
                    aa:a0:05:42:c2:f8:29:6f:eb:ef:4c:28:c5:78:be:
                    c0:d1:40:b7:43:7b:74:c5:df:10:04:a3:9b:6b:65:
                    3d:77:0c:b1:e2:b6:f1:ea:74:8d:b1:93:c1:19:ad:
                    e1:90:2c:cd:c6:b9:24:bf:f9:ad:c5:8d:92:80:61:
                    11:b0:09:ad:fc:8c:4e:76:65:79:9b:cf:e3:dd:bc:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EC:17:91:BD:34:B1:F7:F7:C1:C7:8A:FB:2A:7D:5A:A2:D6:8C:B1
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/MOwXkb00sff3wceK-yp9WqLWjLE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:70:11:ed:aa:86:f7:2e:b0:07:6d:5a:4a:e7:86:71:f0:81:
         a1:45:7d:52:f3:7f:0b:d1:cc:1a:15:47:f8:a0:a8:5e:e9:eb:
         a6:62:16:c5:53:c1:1d:69:f5:d6:4d:de:d0:07:da:43:c0:f8:
         db:49:4f:59:0d:b6:81:e4:fb:f1:53:40:de:ee:4c:cd:d4:9d:
         44:f6:82:de:26:d2:13:87:41:0f:57:f1:0b:17:da:60:04:3f:
         7d:60:4a:f0:cf:4c:8c:6c:7c:86:af:8c:b0:51:ab:a7:81:dd:
         07:be:70:f7:8f:f4:81:68:66:58:15:3b:c2:e4:62:43:6b:46:
         0b:18:f8:69:92:5b:ff:11:af:62:74:3a:d8:10:15:62:01:a2:
         f5:5e:37:be:3a:19:1d:83:59:4c:c9:5d:6e:20:48:ed:93:aa:
         c0:ed:63:8c:da:56:f6:23:30:21:9b:49:2a:f0:d3:33:a2:1a:
         ac:d2:67:6a:18:67:ef:4b:cd:3f:3b:8c:e1:1c:79:fe:df:42:
         26:50:16:e0:c6:9d:04:51:23:93:f3:ff:44:4e:69:a2:6f:0b:
         49:53:38:f5:77:ab:84:ff:6b:dc:e8:7d:a4:e1:ca:54:46:05:
         64:82:5f:ad:5e:97:3a:b7:c3:07:28:fd:25:1e:ca:56:c5:54:
         4e:67:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:16:09 2025 by rpki-client