Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/kidGSvK_SaXV1LElNFcIvSkbuiE.roa
File:                     kidGSvK_SaXV1LElNFcIvSkbuiE.roa (raw, json)
Hash identifier:          z9k8sRe/r1sqZaRjtki36ITTHoBAVq3WBtDnMCvTUyc=
Subject key identifier:   92:27:46:4A:F2:BF:49:A5:D5:D4:B1:25:34:57:08:BD:29:1B:BA:21
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       AE
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/kidGSvK_SaXV1LElNFcIvSkbuiE.roa
Signing time:             Tue 01 Jul 2025 01:34:13 +0000
ROA not before:           Tue 01 Jul 2025 01:34:13 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     131079
IP address blocks:        210.173.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Jul  1 01:34:13 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=9227464AF2BF49A5D5D4B125345708BD291BBA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:3e:94:d9:9b:5b:b6:8d:d3:2d:d6:69:15:
                    e2:df:d6:b3:62:84:a9:5b:4c:72:f5:1e:5e:ab:89:
                    28:70:88:af:85:44:49:c6:51:ca:93:59:a4:f6:96:
                    00:cb:c1:4f:13:df:0c:db:86:a9:0d:3a:39:31:6a:
                    46:fb:be:a6:3e:f4:1e:36:02:52:71:87:3c:89:45:
                    63:f8:d2:5c:e8:bd:61:4d:80:d9:49:b7:b5:ba:3a:
                    d0:60:6d:d4:16:3d:7c:71:1a:80:11:38:ee:16:2d:
                    aa:4c:05:b0:db:71:7f:dc:e2:f1:bc:0b:31:39:ed:
                    da:41:e1:7c:d5:be:8b:b2:01:80:c7:8a:b6:06:6c:
                    01:65:a2:4c:6e:e2:14:10:eb:fc:c5:f3:ce:49:28:
                    bc:47:c5:db:fd:bb:8c:17:b3:25:d8:6c:47:df:9e:
                    ca:d4:d9:4d:a7:bf:4f:91:8b:9e:8d:02:76:13:ac:
                    24:70:1b:b4:a8:e2:99:d7:87:8f:51:70:b2:85:f2:
                    c9:5c:8c:c1:85:c6:49:29:f1:d6:73:51:32:ff:58:
                    05:36:0a:8b:3a:7c:3b:3a:0c:5d:c1:e3:d8:af:7e:
                    73:24:1c:43:07:27:4d:18:7f:7e:8f:93:44:a3:29:
                    d3:9c:09:08:4b:41:80:8f:ab:cf:e1:4a:dd:c5:74:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:27:46:4A:F2:BF:49:A5:D5:D4:B1:25:34:57:08:BD:29:1B:BA:21
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/kidGSvK_SaXV1LElNFcIvSkbuiE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:0b:8d:56:9c:7d:39:62:cc:96:9e:ae:58:c9:a8:23:72:
         96:32:1e:30:1f:38:0a:cc:e0:4d:05:16:6e:02:4a:76:d9:4e:
         db:75:75:3f:a1:aa:bd:9a:4a:bd:48:cb:b0:f3:b8:88:92:36:
         74:d6:65:ca:b5:6d:62:42:35:07:40:8a:64:03:4a:aa:cb:6d:
         4e:45:9d:13:c0:1b:f8:92:65:dd:2c:12:f8:99:7f:a0:a7:8a:
         b8:40:2d:c0:df:9a:03:1a:dc:2b:ef:e1:41:f2:12:70:43:af:
         8f:36:c6:80:39:99:32:08:1b:0b:86:24:f6:97:3b:a3:d4:dd:
         8a:5b:7a:5e:65:9a:13:53:0f:42:10:0b:d6:e5:af:6f:60:af:
         d6:98:39:ad:3e:76:c5:e9:d3:84:77:2a:b8:5d:0c:c4:9e:43:
         01:d0:75:7e:48:0a:de:b2:5f:ea:21:b7:b5:11:39:18:e4:06:
         4d:7c:04:75:58:7b:5f:61:fe:31:b7:23:4c:c1:7d:7e:fc:eb:
         60:a9:ac:f4:c7:f1:d4:1d:7a:e0:02:12:44:46:e0:42:a5:91:
         60:72:ed:b1:99:a3:91:be:8e:a2:4c:65:63:36:3e:a0:ff:35:
         4c:3c:f1:81:e6:9d:87:db:28:d6:27:5e:1f:c8:4c:86:27:46:
         55:2c:af:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:27:46 2025 by rpki-client