Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/SFCLuwiugIt0JnL46p0mA7A_gv4.roa
File:                     SFCLuwiugIt0JnL46p0mA7A_gv4.roa (raw, json)
Hash identifier:          2eSdFTRsrlc/RA+Kobv3vbg9Do7s58hjGvmM7M6FwNA=
Subject key identifier:   48:50:8B:BB:08:AE:80:8B:74:26:72:F8:EA:9D:26:03:B0:3F:82:FE
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       92
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/SFCLuwiugIt0JnL46p0mA7A_gv4.roa
Signing time:             Tue 01 Jul 2025 01:35:41 +0000
ROA not before:           Tue 01 Jul 2025 01:35:41 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     23816
IP address blocks:        211.14.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jul  1 01:35:41 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=48508BBB08AE808B742672F8EA9D2603B03F82FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:e7:d4:7a:49:28:55:38:42:ee:02:50:5c:
                    75:a3:c5:c7:5b:45:0f:c8:80:78:f6:55:13:27:f7:
                    06:a8:77:9e:a5:0f:a9:94:a3:9f:2a:c4:97:12:cc:
                    77:d2:28:a2:12:c0:a9:18:eb:3a:8e:5f:af:e4:4f:
                    90:15:6f:90:50:d3:aa:58:9a:d1:3a:7f:79:03:e1:
                    10:d0:b3:08:b0:b0:c5:97:0e:fa:00:6d:11:75:1d:
                    53:cb:0a:40:16:22:22:75:1e:92:c2:b5:04:96:65:
                    22:75:ba:5c:e1:66:be:6f:d0:c2:6b:30:1c:e2:d3:
                    4c:fe:a6:c3:82:e9:ac:f5:55:ea:ac:a7:ad:6c:89:
                    29:e1:e5:f7:d5:b3:1b:13:9f:8e:f7:ae:8d:01:99:
                    11:49:ad:81:38:d7:c1:72:ec:5d:05:f3:4b:22:79:
                    6e:df:d0:28:c8:1f:ee:dd:23:26:f4:5d:c2:66:46:
                    47:e7:43:67:f0:99:31:20:78:6f:cc:43:59:25:ab:
                    42:b1:7d:fe:70:b6:a0:78:ed:06:8a:5c:c4:75:ae:
                    36:bd:0a:ea:4a:c2:77:6b:b3:93:a0:79:9b:ef:20:
                    7c:7c:3d:c4:98:cc:39:98:0e:96:cc:e0:2a:6c:49:
                    66:c0:72:76:86:43:22:4f:c2:76:7d:50:03:c9:e0:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:50:8B:BB:08:AE:80:8B:74:26:72:F8:EA:9D:26:03:B0:3F:82:FE
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/SFCLuwiugIt0JnL46p0mA7A_gv4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:da:16:f5:6e:1e:9e:34:33:1f:41:9b:a2:ba:88:32:3d:cf:
         9b:c8:34:6e:6d:81:16:38:3e:9a:33:fc:9a:9c:5b:75:8e:bb:
         90:db:0c:39:d2:04:c5:bb:0d:54:43:c5:fc:5d:8f:9b:8b:c3:
         d9:24:55:3b:6c:d6:7e:4e:7e:67:e1:e9:ad:5a:81:81:34:e0:
         bb:d1:ca:bb:a1:c8:f1:f0:3e:d2:4a:28:6b:8c:a7:e1:14:b0:
         aa:c2:8f:d7:3d:13:e5:6d:d6:8f:b0:8d:f6:61:36:cd:8f:13:
         0f:9b:fe:0f:95:cc:4e:9b:86:3f:34:87:42:ca:18:5e:4c:91:
         25:9a:fd:d2:ea:ee:08:d7:e9:84:80:25:e8:87:04:5e:cd:d3:
         3b:a3:87:6d:b7:35:ac:0a:b0:c3:04:ac:3e:7b:64:70:44:19:
         6e:a5:45:1f:43:cc:27:96:9f:29:72:fd:b7:6a:99:6e:09:16:
         39:00:2d:14:9a:0a:24:79:35:d2:89:29:c4:56:8b:82:98:53:
         31:4a:f8:cf:0a:7e:90:08:e9:d4:b1:e4:2a:9d:52:94:93:d1:
         62:f3:3a:81:68:32:83:e7:a3:8b:6d:11:63:99:81:cd:fe:34:
         3f:63:a6:21:06:67:5d:a7:a8:f2:f5:d1:05:33:39:7d:8b:79:
         02:e9:2f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:14:45 2025 by rpki-client