Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/kRM4JcufR7wlryWekdPHDSYJ5yM.roa
File:                     kRM4JcufR7wlryWekdPHDSYJ5yM.roa (raw, json)
Hash identifier:          gvcDxiZZj6NufZyTi1mVJT4Llu5kT15sLvGeC0qTkEo=
Subject key identifier:   91:13:38:25:CB:9F:47:BC:25:AF:25:9E:91:D3:C7:0D:26:09:E7:23
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       91
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/kRM4JcufR7wlryWekdPHDSYJ5yM.roa
Signing time:             Tue 01 Jul 2025 01:35:41 +0000
ROA not before:           Tue 01 Jul 2025 01:35:41 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     23816
IP address blocks:        203.216.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jul  1 01:35:41 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=91133825CB9F47BC25AF259E91D3C70D2609E723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:41:ee:17:56:2f:27:3f:2b:27:5d:44:44:
                    7d:51:97:03:b8:0d:e1:10:4d:79:5d:df:c0:00:41:
                    13:39:42:e9:f4:74:93:e5:3c:16:eb:37:86:f9:d7:
                    d5:e6:b6:3b:79:a3:a5:25:5d:1f:0e:ad:5a:0c:4d:
                    96:29:aa:be:c5:6d:f2:34:2e:fe:71:ab:6f:8e:52:
                    de:d6:b8:29:55:4b:f2:15:52:c6:4d:b1:b7:c5:e8:
                    e9:73:01:26:de:14:f8:1a:30:76:6c:22:64:92:cd:
                    b6:80:87:72:3e:8a:fe:eb:cc:0a:31:d3:29:8d:68:
                    3e:1c:a6:84:35:f2:40:23:0b:9e:6b:b8:0e:21:6b:
                    00:ba:8f:1a:79:d4:41:be:fc:3a:a8:72:32:ca:06:
                    ee:d9:53:f7:6c:4d:f2:bf:87:db:29:8f:53:6e:04:
                    5a:70:f6:e1:b9:1e:8a:eb:bf:8d:b2:5d:1a:c4:e0:
                    95:c0:bc:c9:b6:b6:e8:b4:0e:23:d3:ea:1f:7e:d7:
                    b4:b4:82:63:e0:87:44:8e:fa:cb:76:7f:a3:36:00:
                    9b:5f:60:d3:86:62:4a:fd:b6:d2:d9:86:af:c2:1a:
                    15:cd:78:3b:80:6b:27:0a:41:7b:21:92:03:6a:c2:
                    cd:3b:57:99:eb:70:94:09:25:6f:8b:cf:f5:bd:24:
                    98:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:13:38:25:CB:9F:47:BC:25:AF:25:9E:91:D3:C7:0D:26:09:E7:23
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/kRM4JcufR7wlryWekdPHDSYJ5yM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.216.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:fb:1f:8f:1d:99:ea:97:5b:d3:a5:ab:c3:76:c9:b7:1c:67:
         32:22:20:5a:84:2c:40:91:23:1c:0b:7b:f7:19:ad:2d:c7:7e:
         d9:a7:fe:6b:18:de:fb:d6:50:2e:0a:7f:0c:7f:83:5a:3d:e6:
         75:12:96:25:50:39:c7:4c:95:4e:b7:7a:c2:60:8c:64:cd:be:
         4f:23:11:25:c4:b4:07:c3:32:c5:e8:b8:de:cb:8f:21:6f:43:
         e2:d5:62:2b:43:d9:48:8b:11:95:c2:6a:30:f2:c4:14:f7:ba:
         b9:85:10:b4:5f:40:e6:4a:cf:56:c7:f6:1b:c2:d1:b6:1a:bc:
         aa:82:e0:d6:d8:3a:6a:84:a8:b8:29:ea:20:37:00:9f:4f:87:
         9c:88:52:0d:fc:ec:f6:d7:c6:62:35:b9:3d:50:5c:d0:a5:d8:
         82:a8:dc:b1:c9:a1:4b:29:b6:34:91:f9:ef:bc:d7:d4:3a:89:
         10:f7:df:b8:d2:74:44:7f:03:07:d2:fc:c1:5a:86:f7:36:7e:
         6f:b0:ae:2b:23:41:51:3b:c7:2d:a8:be:01:f1:14:a7:04:02:
         43:73:58:e1:4b:a4:16:7c:b2:f1:d8:41:62:10:ed:a0:06:29:
         c3:41:8f:cc:2a:02:1f:72:b8:10:ef:89:34:bc:b5:64:e8:8f:
         4d:79:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 14:18:10 2025 by rpki-client