Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/ti65xKKOqlf9XKb9RzFSCTCDyYE.roa
File:                     ti65xKKOqlf9XKb9RzFSCTCDyYE.roa (raw, json)
Hash identifier:          Z2dbAGqclGuohNu4G74OGaPRLx3Z8TB9lSW68Dy62p4=
Subject key identifier:   B6:2E:B9:C4:A2:8E:AA:57:FD:5C:A6:FD:47:31:52:09:30:83:C9:81
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       45
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/ti65xKKOqlf9XKb9RzFSCTCDyYE.roa
Signing time:             Mon 30 Jun 2025 01:47:06 +0000
ROA not before:           Mon 30 Jun 2025 01:47:06 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     138384
IP address blocks:        211.133.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Jun 30 01:47:06 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=B62EB9C4A28EAA57FD5CA6FD473152093083C981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:f1:40:33:a1:9f:f0:62:af:ca:6c:0f:cf:
                    46:f0:f3:88:19:0e:bd:4c:74:da:af:64:38:d1:60:
                    f4:02:fa:5a:aa:c0:6e:bc:16:5e:e2:15:51:e7:5b:
                    c6:3f:87:9d:2c:79:75:82:53:44:af:c8:e2:a9:11:
                    54:09:ee:8c:01:54:d4:a0:b5:b9:88:59:f2:a5:93:
                    c2:c8:fc:7c:8f:40:d4:e6:89:e3:cd:6f:13:37:58:
                    79:5f:8e:00:33:2b:c1:71:22:c9:a8:5b:29:09:3a:
                    21:c9:3a:c0:62:41:f8:fa:44:55:b9:ee:89:53:37:
                    89:2c:25:19:b9:29:e9:24:f8:3d:31:a7:95:e2:d7:
                    5e:a1:ae:3b:5b:6b:cb:65:25:21:1e:d6:20:8b:18:
                    f6:c1:70:c7:5f:a2:13:c8:e9:48:df:9a:58:bc:fa:
                    f2:72:12:1f:52:ab:c7:83:3b:b4:d8:66:59:fd:b0:
                    dd:59:02:a0:f8:20:ec:7c:fa:7e:a5:84:84:49:9c:
                    9c:b7:0f:c0:09:14:16:36:58:88:cb:3f:57:45:d5:
                    a4:bc:02:36:c2:75:f0:ad:68:56:1c:bd:bd:0c:36:
                    38:7f:75:50:1c:b4:ad:5c:bf:48:ca:0c:51:58:1c:
                    5a:27:73:3a:05:a7:05:d2:fa:af:fa:89:ef:47:d0:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2E:B9:C4:A2:8E:AA:57:FD:5C:A6:FD:47:31:52:09:30:83:C9:81
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/ti65xKKOqlf9XKb9RzFSCTCDyYE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:05:c6:dc:6b:78:7c:8f:39:af:64:d5:4a:7a:06:0b:58:a9:
         98:a5:4c:61:53:08:15:82:21:9a:17:66:01:7f:4d:1d:c6:f0:
         52:18:0e:a4:67:8f:dc:f2:e5:48:b9:7e:79:61:bd:95:a5:5a:
         ac:cb:01:fc:35:8b:a0:d4:66:94:d2:51:20:d6:c2:be:3c:64:
         35:f4:10:cb:ac:1d:ba:f4:12:3d:25:2d:27:13:02:d4:e9:1c:
         53:cb:c9:d7:81:f9:f2:d9:44:18:83:f9:dd:1a:8d:23:f8:3b:
         76:41:68:8c:8f:5f:d9:e5:24:b0:d2:31:f7:f7:7c:bd:ba:cd:
         63:3e:d2:ed:62:7c:18:67:13:f2:7f:5d:97:9a:3a:f1:58:88:
         0b:e9:61:77:55:7f:a9:d6:6e:3b:eb:47:7e:09:15:5b:30:44:
         47:87:28:34:af:fa:52:bf:c3:74:d3:aa:55:8d:24:df:61:ae:
         83:40:ad:3e:cc:86:0b:ca:7b:aa:1a:5f:c7:93:2e:c0:a0:3e:
         03:74:dc:d9:c3:24:27:15:2a:7a:ae:e3:98:be:d6:a8:07:65:
         03:20:6b:bf:f9:30:cf:74:0b:81:e7:4c:f5:28:ca:68:d3:f4:
         fa:06:a2:86:b9:db:92:4e:a6:11:2c:bc:26:93:52:92:64:e6:
         c5:d3:3b:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 23:24:42 2025 by rpki-client