Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/sQk_Iu9Yf9t4xv2PMUJZqlFlUfE.roa
File:                     sQk_Iu9Yf9t4xv2PMUJZqlFlUfE.roa (raw, json)
Hash identifier:          tEIBOn6KnuEXyEeSGzs37DDDhPIDuwDGlfz58ILg7rg=
Subject key identifier:   B1:09:3F:22:EF:58:7F:DB:78:C6:FD:8F:31:42:59:AA:51:65:51:F1
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       48
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/sQk_Iu9Yf9t4xv2PMUJZqlFlUfE.roa
Signing time:             Thu 01 May 2025 01:33:06 +0000
ROA not before:           Thu 01 May 2025 01:33:06 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7672
IP address blocks:        210.166.0.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 22:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: May  1 01:33:06 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B1093F22EF587FDB78C6FD8F314259AA516551F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:f6:73:4f:81:15:f7:d6:98:3d:1a:bd:0f:
                    ee:c7:6a:49:40:0a:2c:88:8f:cd:c8:7d:79:de:dc:
                    f5:e6:78:21:3c:d4:12:60:e9:a7:84:9d:5c:2f:10:
                    bf:8d:30:4e:12:8d:8a:c3:07:ce:49:c7:aa:51:2b:
                    ea:7b:3a:a2:47:e2:e5:8c:cf:87:ce:f9:8e:dc:32:
                    fb:cd:f3:95:c9:d3:3d:f3:74:20:34:14:9e:ff:c6:
                    88:3a:8a:b7:c1:16:bb:91:54:f2:2b:56:35:e7:32:
                    49:0d:26:94:50:ce:c2:95:ed:a1:74:75:3e:ba:e5:
                    9b:80:0a:27:c1:a5:1c:69:df:7d:c9:7b:4e:07:98:
                    c7:72:aa:13:37:41:e1:ea:f9:cd:64:b7:06:d8:5a:
                    ad:79:6b:0a:ba:ba:d6:2f:e6:5b:4a:a9:63:9b:95:
                    dd:58:81:cf:b3:a4:15:e1:2a:ed:af:3d:71:01:d7:
                    14:f0:e3:15:ee:6f:80:12:70:e6:d1:1a:88:94:fd:
                    37:37:1b:ec:84:30:8d:95:6c:7f:75:40:db:e3:48:
                    d9:1a:f4:54:20:b0:18:18:d1:30:f0:f3:37:44:c4:
                    49:10:73:03:1d:68:d0:db:d7:42:bc:d0:f4:9a:72:
                    41:a4:b9:f6:4a:8a:56:91:c7:f9:75:2c:df:fe:c3:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:09:3F:22:EF:58:7F:DB:78:C6:FD:8F:31:42:59:AA:51:65:51:F1
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/sQk_Iu9Yf9t4xv2PMUJZqlFlUfE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.166.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:8b:af:94:7b:d2:c6:eb:46:57:6a:47:d2:fe:f9:4f:8d:
         3b:36:26:53:42:4e:79:55:46:1f:f1:b3:27:e4:6b:90:52:c3:
         21:0b:8b:df:cf:82:d2:31:45:5a:b7:94:d8:f4:29:a1:90:97:
         a7:80:15:f0:b4:93:5f:63:7a:a1:b2:02:12:e1:0e:de:fe:9d:
         44:d1:41:4a:1d:75:fd:ab:a0:94:cc:9f:90:74:ff:94:c4:2b:
         32:c8:06:1e:2c:e4:9e:97:dd:ea:46:78:4f:9a:05:a5:6a:77:
         55:47:da:34:4d:b6:86:d2:db:08:37:c4:83:25:10:3b:ab:25:
         73:42:21:92:90:22:92:b8:2f:77:6f:6e:ab:8a:1b:7c:0c:c8:
         2b:7a:12:d6:58:ce:11:b6:be:e9:a9:0d:a3:f9:18:0f:23:ec:
         6a:bb:3d:13:ff:2e:08:af:7e:15:da:68:62:54:99:ed:3f:b2:
         f5:66:c4:05:f1:cd:df:42:47:c4:9e:cc:d2:66:c0:53:16:ae:
         45:ee:f6:42:21:2b:62:3f:ae:bf:46:d1:7f:22:fd:41:f7:d9:
         96:21:30:a9:ba:b0:4e:aa:8b:88:74:ab:47:c8:37:10:e0:58:
         5f:3d:5f:fa:11:4b:e4:df:8f:19:8c:cb:f6:4e:f9:8a:38:33:
         c4:e4:a4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 00:47:00 2025 by rpki-client