Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/zykx2lXLiBr3-DbbEWyOfnDfMao.roa
File:                     zykx2lXLiBr3-DbbEWyOfnDfMao.roa (raw, json)
Hash identifier:          vVjACRpMjwrjEcnvhLwjGzvKNugIljPdAvtXQpiN1Bc=
Subject key identifier:   CF:29:31:DA:55:CB:88:1A:F7:F8:36:DB:11:6C:8E:7E:70:DF:31:AA
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       6B
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/zykx2lXLiBr3-DbbEWyOfnDfMao.roa
Signing time:             Tue 10 Jun 2025 10:51:04 +0000
ROA not before:           Tue 10 Jun 2025 10:51:04 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     24296
IP address blocks:        210.252.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Jun 10 10:51:04 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=CF2931DA55CB881AF7F836DB116C8E7E70DF31AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:97:36:1f:ba:04:92:44:a5:4b:92:42:16:
                    dd:25:29:04:77:c6:6b:e1:a9:a5:e9:0c:4d:4d:e7:
                    59:a3:3f:b0:17:83:b3:7b:e3:dc:84:9d:2f:bc:ea:
                    75:f5:76:48:f9:ad:e2:e3:55:d0:ab:b4:d4:9d:e3:
                    4a:58:f6:47:71:bf:a1:80:68:a8:63:fe:dc:04:17:
                    42:5d:e2:f4:79:1d:8a:a9:46:6b:8f:cd:83:5e:41:
                    d2:98:3b:e4:35:86:25:96:1e:ea:b6:b9:f2:09:66:
                    f5:9b:f7:7e:42:0e:a9:3f:5b:68:83:67:2b:bd:2d:
                    0d:08:34:cf:17:97:15:83:a4:75:f5:11:b4:2a:42:
                    27:d7:f1:6e:e7:60:2a:cd:c8:0d:9f:0a:e2:8d:88:
                    25:47:a9:27:4a:00:38:17:f7:d2:4d:5d:6f:5e:f9:
                    06:82:4a:9b:65:6a:fc:d4:2c:59:1c:ec:0f:14:43:
                    73:1c:7d:47:75:1c:31:f6:59:ed:27:63:57:38:34:
                    44:68:1d:f5:5b:9a:c9:24:65:df:d4:53:5b:29:97:
                    79:b3:af:03:56:95:47:12:c4:8a:c1:b0:ea:ed:99:
                    34:70:99:13:e8:4f:0e:1e:02:02:20:05:50:09:6d:
                    e8:fc:fd:2e:80:a0:d8:ba:8e:ce:1f:0b:37:5c:a5:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:29:31:DA:55:CB:88:1A:F7:F8:36:DB:11:6C:8E:7E:70:DF:31:AA
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/zykx2lXLiBr3-DbbEWyOfnDfMao.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.252.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:07:66:4a:a6:19:24:cf:21:f4:ec:11:bb:c5:3a:01:6f:b6:
         d0:24:fe:3c:39:e9:31:e2:95:72:35:de:09:2c:86:7b:8f:ab:
         23:80:3f:5b:2a:78:98:33:6e:16:c2:3b:08:07:23:0d:bb:0a:
         f2:f1:6f:c6:94:77:f1:41:b6:db:a1:dd:03:03:92:16:91:00:
         1f:ce:85:ee:ed:3a:66:06:42:3b:72:f1:72:f2:53:91:c8:da:
         e7:c5:6b:5f:4c:09:27:0a:f0:cc:f8:1c:c6:4d:ab:77:10:2e:
         3b:38:0d:3d:9f:39:26:8d:07:75:fd:c9:57:77:e5:2d:71:f2:
         7d:c6:25:d3:25:89:18:ce:c8:fa:f1:64:49:e0:fa:d8:4d:fb:
         ec:49:a0:98:58:24:d2:ac:59:fa:e1:17:50:24:e3:e2:58:f5:
         50:d6:d7:d1:a3:f7:62:7f:5b:77:ea:21:32:64:52:27:c3:e2:
         39:45:22:1c:3d:d8:a0:fe:a4:4b:08:6b:ff:80:73:4c:36:05:
         d1:2b:82:29:29:31:54:1f:f9:74:e7:3d:9a:64:ba:90:36:4c:
         fc:67:f5:ed:73:61:96:53:c1:b4:5e:86:3b:90:99:bb:72:b4:
         dc:a5:37:1a:aa:83:b1:52:c1:64:1e:79:66:f5:74:a7:7b:44:
         d0:62:a5:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 23:27:18 2025 by rpki-client