Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/m1YdCtBzF8ayBOTc9cOJCUMU0ss.roa
File:                     m1YdCtBzF8ayBOTc9cOJCUMU0ss.roa (raw, json)
Hash identifier:          yI/jM0ZH3q6Ibt21B8WxsML4BsfgVX+odxEk4JIoa1Q=
Subject key identifier:   9B:56:1D:0A:D0:73:17:C6:B2:04:E4:DC:F5:C3:89:09:43:14:D2:CB
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       81
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/m1YdCtBzF8ayBOTc9cOJCUMU0ss.roa
Signing time:             Tue 10 Jun 2025 10:50:45 +0000
ROA not before:           Tue 10 Jun 2025 10:50:45 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     23816
IP address blocks:        118.151.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jun 10 10:50:45 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=9B561D0AD07317C6B204E4DCF5C389094314D2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:e6:61:24:34:0e:83:7e:41:8b:b3:a5:82:
                    d3:f2:a4:de:72:0e:03:1b:d2:38:21:99:9b:ed:a7:
                    f7:11:d4:b9:57:b6:f1:a2:77:5b:34:95:61:7a:4e:
                    f5:d8:cf:40:4e:42:5e:d2:8f:2c:b0:40:e8:2d:d0:
                    70:54:68:d7:05:af:ff:28:4f:c5:8a:bd:e6:99:e3:
                    0b:46:ed:b9:c7:69:e8:63:2d:39:24:d8:98:bf:e1:
                    16:76:f0:9a:49:e6:7b:5d:1a:57:31:47:28:6d:e2:
                    d1:9a:e7:2b:29:8f:5b:04:70:47:78:70:ab:c5:fd:
                    41:4e:58:18:fb:53:8b:69:89:18:54:42:03:5a:fe:
                    15:b9:a9:fe:09:c0:66:29:61:53:5b:fc:3d:1c:ef:
                    4d:0e:28:a1:df:28:b3:23:b7:1b:ef:19:2b:82:fd:
                    3e:03:fc:03:a9:5a:3b:b6:91:42:4e:96:6c:08:e3:
                    3b:4b:64:0d:8e:37:c0:f2:29:69:6a:8b:27:b4:a2:
                    b1:09:30:be:86:ac:7a:bf:72:05:b0:50:26:82:de:
                    d2:ca:dd:5d:d9:80:5b:4d:2c:da:2b:85:39:33:82:
                    11:ce:08:cc:37:98:3c:4b:70:21:cb:c9:1c:23:8c:
                    94:f3:f7:1e:01:2e:16:20:f0:9a:f9:9c:9c:22:59:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:56:1D:0A:D0:73:17:C6:B2:04:E4:DC:F5:C3:89:09:43:14:D2:CB
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/m1YdCtBzF8ayBOTc9cOJCUMU0ss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:e8:e9:ac:e8:77:9c:48:d0:7b:2a:b0:2b:e1:9a:42:18:25:
         e9:c2:e5:74:3e:1a:5e:7b:d7:4f:23:4f:f3:56:4a:a4:aa:1c:
         99:c2:2e:97:26:90:0b:59:77:86:a1:83:f7:68:9b:81:80:20:
         18:74:83:c3:79:c9:eb:73:03:10:e8:4f:d7:b8:af:f2:69:15:
         2c:34:9e:88:fd:b8:12:3c:91:91:e0:64:b5:40:2a:9e:d6:3c:
         5b:21:b3:1f:e2:31:4c:bc:63:65:39:23:8c:db:7a:85:5c:af:
         7d:e3:f9:2f:59:fd:7c:ac:f3:fc:29:b4:6b:4e:1d:a2:91:f4:
         12:50:de:35:76:a3:c3:a9:61:02:e4:6d:a6:0f:4f:34:96:8e:
         69:1d:c4:c2:8f:fb:1a:bc:08:97:52:c2:3d:91:a6:36:0e:01:
         19:19:18:36:cb:b5:ab:d7:53:45:31:5c:68:19:af:ca:29:a8:
         cf:10:49:8c:e9:97:6f:93:be:90:a8:8c:4d:24:e1:db:66:a9:
         0e:07:5b:55:04:12:09:5b:10:4f:12:e0:48:c9:0b:c3:bf:2b:
         9b:c2:91:2b:f8:a1:a6:f5:77:e8:3e:c0:1f:2e:11:99:8d:1d:
         5b:d7:4e:de:61:2b:40:68:d1:2d:2c:03:22:fd:21:51:dc:c4:
         a4:1e:a4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:07:08 2025 by rpki-client