Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/LsUodR-It4qtotFYuiYTadxU3OU.roa
File:                     LsUodR-It4qtotFYuiYTadxU3OU.roa (raw, json)
Hash identifier:          g4Em9PkXFVwC2z9satg0rZ2JoxKzUX+XkU7YJN0qm44=
Subject key identifier:   2E:C5:28:75:1F:88:B7:8A:AD:A2:D1:58:BA:26:13:69:DC:54:DC:E5
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       6C
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/LsUodR-It4qtotFYuiYTadxU3OU.roa
Signing time:             Tue 10 Jun 2025 10:51:04 +0000
ROA not before:           Tue 10 Jun 2025 10:51:04 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     24296
IP address blocks:        210.229.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Jun 10 10:51:04 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=2EC528751F88B78AADA2D158BA261369DC54DCE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:78:45:6c:34:c1:31:db:4a:ac:69:95:8b:da:
                    0e:fa:01:af:0b:8e:15:c9:e0:a0:ab:8d:5b:79:02:
                    19:f6:ba:8a:35:0b:45:21:ba:71:cf:d5:8d:ce:6c:
                    40:4b:02:7c:fd:97:3c:b8:10:02:91:7c:b5:75:45:
                    ee:38:75:51:c6:33:66:e7:2d:e9:6a:85:13:36:39:
                    a6:64:e3:a8:49:d2:09:39:ca:22:ed:16:e8:7a:3a:
                    33:d6:2d:10:cb:39:8e:50:05:b7:8b:90:7e:15:56:
                    64:47:a0:e4:09:86:47:fc:98:f8:de:d2:3f:d6:78:
                    61:65:fe:fa:5a:8f:62:d1:97:2f:33:66:59:85:3c:
                    55:42:63:ae:db:32:c4:9e:66:33:c5:5b:20:c6:42:
                    5f:a4:ba:69:62:07:e2:e4:ce:44:1c:56:8c:85:2c:
                    a0:19:c9:ee:db:0f:bf:55:e3:67:8f:c2:09:35:3a:
                    dd:80:74:f4:d6:a9:77:8e:3f:83:e4:61:3d:68:f8:
                    77:53:c7:a3:d0:a8:fd:2b:f5:68:f2:f9:19:5a:1c:
                    59:99:9a:85:4a:c6:19:43:b4:ca:ee:8a:4b:31:f6:
                    23:9f:7d:75:cb:a8:f8:f0:aa:3d:e6:63:f5:6e:b0:
                    19:61:c5:84:e9:49:7d:c6:cc:91:8e:92:6b:6d:a7:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C5:28:75:1F:88:B7:8A:AD:A2:D1:58:BA:26:13:69:DC:54:DC:E5
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/LsUodR-It4qtotFYuiYTadxU3OU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:46:08:f4:af:0b:55:c9:d9:6e:c3:b4:95:2f:75:d9:c5:f2:
         6e:9d:96:09:81:2a:18:4d:e7:7b:89:00:d0:c6:54:df:c4:b1:
         08:69:ec:88:0c:70:ef:f3:d3:b9:7c:de:d7:fe:94:da:42:3f:
         10:f7:3f:01:e1:4b:b6:8f:5a:15:b3:ce:35:c9:5d:e5:ea:aa:
         01:69:fd:34:1b:0c:2b:45:9e:43:0f:f6:54:9c:44:15:cb:49:
         23:06:5b:62:06:f4:df:0e:31:8d:d3:6f:d0:45:00:46:15:be:
         e2:8f:67:b3:a0:bb:fe:ed:e4:1a:97:60:71:21:11:5a:68:72:
         bc:b9:05:8a:06:f7:d5:d0:90:14:28:50:c2:7e:62:2d:d4:2c:
         88:2f:50:fb:de:12:4a:bf:92:23:2b:ad:aa:0d:33:85:b0:44:
         83:e2:ae:d8:17:4b:6b:65:3e:33:e2:4e:d4:d9:96:6f:d3:1f:
         2b:41:4c:07:1b:02:35:bd:e8:23:73:f7:d5:86:5e:4e:cc:b3:
         a7:77:8a:59:de:86:68:0a:0e:25:f5:b1:59:d8:4f:41:cd:5e:
         5f:f1:88:71:65:ba:53:a2:c0:dd:6a:5c:b1:00:f2:22:47:c0:
         c2:db:6d:f0:bf:0f:bf:d7:65:fb:f2:10:55:05:94:41:a3:6b:
         b7:06:e0:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 23:18:44 2025 by rpki-client