Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/asDjR2gQmjjFgTfNVE90baAXHvA.roa
File:                     asDjR2gQmjjFgTfNVE90baAXHvA.roa (raw, json)
Hash identifier:          YXgfBBpZlbX7z9XGgL6aItyGEKINexCjdcHpydQ5RG8=
Subject key identifier:   6A:C0:E3:47:68:10:9A:38:C5:81:37:CD:54:4F:74:6D:A0:17:1E:F0
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       3E
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/asDjR2gQmjjFgTfNVE90baAXHvA.roa
Signing time:             Tue 01 Jul 2025 01:32:43 +0000
ROA not before:           Tue 01 Jul 2025 01:32:43 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jul  1 01:32:43 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=6AC0E34768109A38C58137CD544F746DA0171EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:91:36:ff:a1:51:24:99:dc:e9:96:e8:15:
                    a3:c8:b6:11:db:c3:ba:74:a2:5a:d0:a7:80:e3:9b:
                    bf:70:09:22:60:e6:75:04:ed:17:2f:04:db:00:97:
                    31:2e:98:b1:f6:c0:f1:10:75:bd:be:e7:81:43:cb:
                    b9:27:38:7b:8b:22:57:c9:f3:81:e1:fc:fb:39:f7:
                    0a:6a:7b:0a:2c:ab:39:2d:e6:ef:3a:ae:18:ee:db:
                    52:c4:26:0b:24:a0:fc:9f:33:96:fb:42:e4:ac:e2:
                    db:7a:d0:58:c1:6b:6f:db:ce:3d:f6:a7:00:b6:43:
                    e3:3d:22:4a:7c:54:f1:65:29:7b:60:36:6c:ab:df:
                    e0:3d:32:bf:a7:18:b1:3d:1a:30:a7:f7:f5:04:d0:
                    80:fe:73:4d:0f:56:a1:45:99:bb:a2:42:9e:46:54:
                    6a:a0:07:ba:fb:23:67:d1:8f:a1:c9:b6:6f:ff:72:
                    da:d9:e8:32:af:17:10:d7:4c:0e:4f:8a:69:17:ed:
                    0a:5c:48:76:20:b4:a5:23:ce:9b:42:36:e2:65:98:
                    56:59:fd:a6:4f:de:97:e8:4e:85:90:85:30:ca:56:
                    8a:13:be:7d:74:f2:c8:df:16:64:c9:ea:47:c8:f0:
                    47:65:84:6b:57:68:b0:09:e6:d3:02:f0:e4:30:4e:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C0:E3:47:68:10:9A:38:C5:81:37:CD:54:4F:74:6D:A0:17:1E:F0
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/asDjR2gQmjjFgTfNVE90baAXHvA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:08:44:57:4d:4d:0c:ac:da:03:af:91:16:e6:4e:38:b6:79:
         ee:8c:81:7f:14:c8:6a:6f:71:35:07:fb:f2:73:bc:37:11:67:
         23:6e:3c:45:45:8e:7f:70:26:9e:cd:6a:bc:d3:41:01:31:18:
         12:d9:52:d9:4d:11:ce:83:2f:be:17:fc:d7:a5:8b:31:90:2e:
         db:a7:12:83:38:38:d8:d0:09:46:d7:43:a1:fb:8b:71:f2:aa:
         88:9b:f6:df:ba:e8:59:f2:39:d4:24:1e:52:6a:22:1f:39:06:
         34:d2:a7:e0:9f:89:32:11:d1:0b:fd:76:b8:ab:ba:f0:1a:0f:
         02:c6:6a:6b:cc:d5:4e:44:88:c7:99:f3:66:d3:bb:93:a4:23:
         4c:59:91:de:e2:1b:a2:29:10:fe:91:71:cc:e0:da:ac:87:e1:
         5e:e8:1d:1f:69:04:6e:1c:36:36:2d:26:a6:75:87:fa:0d:d7:
         e6:c9:75:70:10:04:f1:b8:b2:99:8c:74:5f:c7:9f:8c:bd:4a:
         93:89:f1:e9:7d:be:fa:43:9d:c4:c7:2b:cc:90:ce:74:c1:9c:
         d8:71:4c:3f:68:32:08:55:c8:b3:96:8b:00:3e:51:0f:09:66:
         aa:e3:13:8b:5d:37:ba:b7:7b:ec:52:84:c9:e4:30:39:8e:aa:
         a2:5b:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:05:03 2025 by rpki-client