Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/LVw45JjfaXiBD7_JB2Q8PVZftr0.roa
File:                     LVw45JjfaXiBD7_JB2Q8PVZftr0.roa (raw, json)
Hash identifier:          52OrjvHgWlWaLCl9u1+2vJ50T5dMrEemJPOjxaXrh/8=
Subject key identifier:   2D:5C:38:E4:98:DF:69:78:81:0F:BF:C9:07:64:3C:3D:56:5F:B6:BD
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       AA
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/LVw45JjfaXiBD7_JB2Q8PVZftr0.roa
Signing time:             Tue 10 Jun 2025 10:50:22 +0000
ROA not before:           Tue 10 Jun 2025 10:50:22 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     7521
IP address blocks:        210.173.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Jun 10 10:50:22 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=2D5C38E498DF6978810FBFC907643C3D565FB6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:65:74:8d:d7:ce:8e:1c:cd:f3:18:ae:49:
                    52:6f:b9:5d:1f:4c:d0:6b:02:9c:3b:57:ab:e7:5d:
                    7b:c2:5c:9e:f7:94:e2:dc:ee:4a:7f:0d:13:99:16:
                    23:7c:34:e7:ba:3d:29:6a:31:e3:53:41:51:ff:01:
                    a8:9c:dd:a9:aa:6f:41:53:8e:25:95:45:b1:c1:4e:
                    4b:ef:a1:13:64:d7:3b:ed:c2:ad:c9:a2:00:6f:5e:
                    c4:46:5f:86:ef:6a:9d:1b:41:d9:94:fc:74:7c:51:
                    97:85:87:4a:32:85:0e:f8:23:fa:73:5b:f6:28:6e:
                    3a:5a:3b:f8:a0:34:24:fc:f3:a7:b1:33:91:20:51:
                    90:df:ce:6f:4f:72:77:cc:b7:97:4b:5e:c6:47:90:
                    0a:7d:ab:ac:44:f5:0d:7f:04:43:a5:4c:4e:58:44:
                    40:83:b5:08:ef:5a:c5:13:76:87:0c:be:1d:b6:91:
                    23:3d:07:73:a4:84:b7:9e:d9:4f:1d:53:b2:90:2b:
                    e7:e1:af:e7:81:e6:e3:7b:79:70:a9:10:a3:65:6c:
                    be:6e:d1:4e:2b:ff:d7:cb:82:6f:d7:65:ad:41:f7:
                    2e:ca:c6:09:47:b3:50:5a:a8:65:d6:a9:0d:c1:8c:
                    de:85:b3:30:fb:f1:d9:0d:43:e6:44:92:48:d2:70:
                    ec:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5C:38:E4:98:DF:69:78:81:0F:BF:C9:07:64:3C:3D:56:5F:B6:BD
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/LVw45JjfaXiBD7_JB2Q8PVZftr0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:dc:29:e1:86:d2:a0:70:c4:a1:8f:49:0f:83:2d:63:0f:29:
         3b:18:69:76:9b:83:dc:3d:a3:8f:7f:ce:a9:c1:41:ea:94:a4:
         c5:1c:8d:43:6f:86:e8:96:8e:00:23:c7:e1:09:2f:72:57:f4:
         98:cb:1c:71:39:05:df:aa:b9:be:07:aa:ea:e8:51:c6:60:2b:
         9a:26:df:c1:00:26:78:da:a8:a1:37:6e:e7:2d:61:3f:14:7b:
         b8:77:92:97:6e:4e:af:65:4c:59:35:0f:17:b8:56:a0:63:d0:
         ef:0e:57:e2:6d:55:98:a9:70:33:a5:3d:e1:80:b8:0d:5a:95:
         ad:1d:28:1f:12:6e:50:1b:4a:64:29:1c:da:43:02:24:90:9c:
         f7:c0:c5:1a:30:db:c7:c0:9e:60:7b:63:c5:53:71:91:38:42:
         eb:ac:b0:31:42:26:08:84:cc:a5:a4:3d:2e:0c:82:f6:33:d7:
         64:d4:5c:7b:2e:2b:1c:27:ac:9a:c9:0c:b8:80:e8:fe:6a:0b:
         98:e2:72:5f:50:94:d6:f5:dc:28:14:7a:d6:26:31:68:28:bb:
         70:6e:ac:17:1b:c5:b3:38:16:55:42:7b:8a:d8:96:a5:0c:d9:
         bc:8f:e2:6e:ac:65:d2:c8:3d:05:33:de:a0:6f:fc:08:19:13:
         90:b2:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:53:10 2025 by rpki-client