Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/cMo9xPTbRcTse4hgPeIhdRIQqfA.roa
File:                     cMo9xPTbRcTse4hgPeIhdRIQqfA.roa (raw, json)
Hash identifier:          QGathvtCLZFnXr9fqSIMLYei1F8iEt+TJm5krGdp11c=
Subject key identifier:   70:CA:3D:C4:F4:DB:45:C4:EC:7B:88:60:3D:E2:21:75:12:10:A9:F0
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       1E
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/cMo9xPTbRcTse4hgPeIhdRIQqfA.roa
Signing time:             Thu 19 Jun 2025 05:03:05 +0000
ROA not before:           Thu 19 Jun 2025 05:03:05 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18282
IP address blocks:        180.94.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jun 19 05:03:05 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=70CA3DC4F4DB45C4EC7B88603DE221751210A9F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:28:1f:d0:2c:15:8c:dc:dc:f2:9e:5e:5c:
                    62:be:4b:ad:b9:bd:49:ff:96:f5:93:c0:eb:db:3b:
                    11:cc:24:ac:f8:37:be:31:de:78:6a:66:da:97:3e:
                    e5:a2:2c:d0:80:54:2e:da:3d:75:59:0e:fa:88:35:
                    d6:49:4e:23:c7:41:66:8d:5d:4b:4b:a7:8f:af:35:
                    21:b4:e9:98:05:15:6b:7d:38:ed:02:45:14:c1:2c:
                    22:98:94:79:56:7b:e3:cb:fe:3c:50:84:6f:5b:03:
                    f9:be:46:ee:eb:5a:4e:73:66:fb:28:39:a0:6b:9c:
                    06:7a:39:b4:2f:73:ee:4b:46:cc:ee:f8:86:7c:6e:
                    b7:8f:85:2a:84:12:5d:ca:dd:66:45:93:2a:e2:74:
                    da:27:b4:79:1f:c1:d8:4d:f3:35:10:76:88:c1:21:
                    ac:b1:78:6b:ed:dd:af:74:e1:ac:0e:1e:fe:9b:57:
                    d5:f1:ef:83:82:44:9a:06:5d:68:61:f9:f3:a3:f6:
                    f8:d9:4b:2e:f0:59:21:a7:28:e9:2c:44:88:ad:5c:
                    30:a5:39:86:e5:cb:37:f6:0a:f7:14:49:05:3e:60:
                    2e:b8:0a:63:c4:4f:24:b0:dd:6f:2f:48:03:6a:52:
                    68:30:52:6d:db:8b:ad:a9:f0:82:4a:87:76:b7:a5:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CA:3D:C4:F4:DB:45:C4:EC:7B:88:60:3D:E2:21:75:12:10:A9:F0
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/cMo9xPTbRcTse4hgPeIhdRIQqfA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:16:e1:86:24:b6:f4:05:d1:81:b5:61:bb:3c:5e:b5:54:52:
         58:ae:7c:98:90:98:9a:b6:7c:9c:9b:93:52:e7:28:29:90:73:
         6c:2c:a1:7d:d6:8d:0b:9f:21:f1:92:01:90:68:f0:de:42:62:
         55:af:96:12:32:9c:ad:3d:91:38:28:30:be:8e:ec:45:7d:af:
         89:e2:14:89:1b:eb:55:dd:78:10:4f:1d:d9:62:4b:09:3c:e8:
         e1:c5:1c:02:07:8e:8f:b2:e6:ce:19:67:16:73:9c:27:b3:a7:
         78:e2:d3:74:90:aa:c9:d1:7c:ce:12:a6:d4:6b:92:3f:64:5f:
         e9:3c:a3:1f:6d:7d:4f:01:7a:7d:17:e0:75:2a:94:5b:91:3f:
         5d:fc:f1:11:7c:7d:82:f5:ec:1d:7d:cf:ca:90:c8:4f:3e:c1:
         ff:6a:fc:cb:2c:b2:cb:ab:25:bd:d5:bd:b9:3e:67:e6:d5:5e:
         87:69:6f:56:0e:1f:ea:67:b7:0c:ad:62:07:68:13:3d:1f:4a:
         84:a8:3e:43:9a:c1:e0:ae:3b:73:94:c6:95:e0:53:26:d4:ca:
         e5:a0:cf:70:c3:26:95:b6:02:c8:c8:8f:b4:05:b2:22:97:74:
         fe:58:fb:59:f4:84:f1:e1:59:51:10:7f:cf:4c:37:96:e7:68:
         93:9d:6d:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 12:03:17 2025 by rpki-client