Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/208/Ll7RySlQboNVJIUtx8fBzpdWKK8.roa
File:                     Ll7RySlQboNVJIUtx8fBzpdWKK8.roa (raw, json)
Hash identifier:          9fn04YPLZJ7v5geANyGbrmi2YUVyLJu3E4st3Dbtgkc=
Subject key identifier:   2E:5E:D1:C9:29:50:6E:83:55:24:85:2D:C7:C7:C1:CE:97:56:28:AF
Certificate issuer:       /CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Certificate serial:       2E
Authority key identifier: 7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/Ll7RySlQboNVJIUtx8fBzpdWKK8.roa
Signing time:             Tue 10 Jun 2025 10:45:38 +0000
ROA not before:           Tue 10 Jun 2025 10:45:38 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     7682
IP address blocks:        211.128.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
        Validity
            Not Before: Jun 10 10:45:38 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=2E5ED1C929506E835524852DC7C7C1CE975628AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:b7:01:15:52:5e:7d:80:ea:6c:35:1d:be:
                    ef:fe:c9:a9:4e:16:f1:c7:59:8a:90:3b:b6:bc:13:
                    85:fa:48:47:f5:6d:fe:80:85:8c:e9:ea:65:68:c4:
                    e0:5d:9d:ba:0f:7f:e1:2f:55:a3:c5:a0:20:80:e3:
                    6a:c1:30:d6:ba:03:c2:9c:c9:00:0f:e7:39:d9:3b:
                    d2:f3:6e:c6:56:47:77:ac:94:26:1b:6c:de:98:cd:
                    2b:dc:6f:85:a3:56:88:01:4f:dd:98:b1:7d:2a:96:
                    56:ac:aa:53:4a:32:cd:9c:fa:df:e8:3e:a4:af:ec:
                    52:c6:06:30:4d:58:c6:e4:c0:36:3e:e6:c0:3c:9d:
                    5f:7d:cd:7c:81:16:5b:a9:ef:34:a9:f8:24:c7:42:
                    2c:8c:8d:3d:ef:05:aa:51:6e:95:3d:9c:03:9e:72:
                    71:74:86:22:d5:c2:f1:be:1b:a5:47:eb:16:1a:d3:
                    dd:ae:b0:64:e7:fe:e3:e1:3e:14:27:1f:1b:03:b6:
                    34:5f:bf:84:e3:08:ca:cf:c4:e9:57:82:56:b9:08:
                    ed:e7:3c:b1:e7:c2:ab:bc:61:ed:8f:af:c5:68:4e:
                    f3:40:ff:62:5a:2d:4d:46:15:0b:e8:ff:a8:f6:6a:
                    32:ca:e0:6e:98:76:c2:15:e6:42:16:52:62:aa:47:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5E:D1:C9:29:50:6E:83:55:24:85:2D:C7:C7:C1:CE:97:56:28:AF
            X509v3 Authority Key Identifier:
                keyid:7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/Ll7RySlQboNVJIUtx8fBzpdWKK8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.128.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:5e:11:48:06:f3:1d:6a:de:1f:a8:f8:98:44:58:00:be:d9:
         c8:15:80:50:ca:d8:80:f6:22:05:c0:b7:6a:6a:31:68:6e:ca:
         28:1d:3c:00:33:b0:02:be:4f:f0:69:81:dd:29:66:22:25:fe:
         65:c9:14:d7:c6:90:18:74:54:ff:0b:fd:6d:e5:b6:a9:5c:fa:
         80:54:f9:fc:79:a1:c5:e8:0d:88:6a:e8:9d:1b:cd:53:8e:29:
         52:ea:57:9a:4d:95:98:4a:d5:52:92:e3:ba:d8:84:f7:06:90:
         1e:68:5e:fb:9a:99:d9:8f:43:d2:f3:6e:c1:81:12:12:06:d4:
         b2:c4:01:37:69:08:e4:51:a0:54:9f:b5:fb:65:87:79:99:f2:
         dc:76:aa:ca:11:82:ef:eb:6d:1b:96:1f:a9:66:2f:19:2a:b8:
         9b:ca:3a:e1:ae:9e:6a:35:4b:eb:46:27:4c:55:e3:57:5a:c0:
         22:a4:d8:00:fd:31:ab:ae:a5:8a:a4:7f:f5:c4:0a:70:dd:dd:
         45:0d:36:7c:41:b0:dc:73:77:1e:a9:dd:4a:bc:e4:c7:1e:84:
         68:cb:8d:9d:47:3d:db:4f:b1:2a:c1:8e:fd:62:37:d9:96:cd:
         88:11:16:08:1d:d8:39:9a:1c:20:e7:5d:41:2f:e7:22:82:ce:
         65:e5:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:45:04 2025 by rpki-client