Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/Bs37PpXiWogb_09FFCXNcDIUSpg.roa
File:                     Bs37PpXiWogb_09FFCXNcDIUSpg.roa (raw, json)
Hash identifier:          5hHLNQyX8CcMJ/dMZ1mxAYcn2Rde2c6q0nf4zk5yjq4=
Subject key identifier:   06:CD:FB:3E:95:E2:5A:88:1B:FF:4F:45:14:25:CD:70:32:14:4A:98
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       4E
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/Bs37PpXiWogb_09FFCXNcDIUSpg.roa
Signing time:             Tue 01 Jul 2025 01:32:09 +0000
ROA not before:           Tue 01 Jul 2025 01:32:09 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9597
IP address blocks:        202.164.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Jul  1 01:32:09 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=06CDFB3E95E25A881BFF4F451425CD7032144A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:c0:d3:fb:f0:72:b4:08:eb:44:9b:96:ae:
                    09:34:85:47:50:39:ea:37:2f:14:da:cc:59:d0:05:
                    63:4a:00:71:6d:ac:81:b8:14:d9:29:51:fb:62:b4:
                    ac:30:aa:7d:37:fe:8a:e8:38:5d:b9:06:4a:1a:7a:
                    21:34:12:9f:df:bc:2a:90:81:c1:d7:f3:50:8e:4f:
                    8b:f4:49:91:e0:f2:fa:e8:e2:ba:20:c3:7b:af:8a:
                    25:03:79:09:9a:60:cf:2b:cd:df:31:f4:b3:35:8f:
                    ad:84:93:ec:ee:c9:5d:7d:d9:b4:42:f6:15:41:ce:
                    e2:29:8e:86:ae:1a:62:1e:70:27:ae:9c:d6:e0:16:
                    17:82:d5:d0:ac:31:b8:d8:c9:87:c5:da:70:2a:83:
                    9d:61:1d:bd:ef:89:4e:fb:0c:f3:fe:5c:79:6f:25:
                    4d:90:4a:48:1e:d4:9b:6a:80:78:ad:37:87:a3:1f:
                    df:3b:82:83:21:d9:df:1b:28:c2:c1:bb:6e:0d:78:
                    f5:60:37:16:a7:07:1f:9c:a5:62:56:9e:ca:7d:98:
                    ad:b1:f0:af:d6:0b:86:e3:9e:eb:2e:3d:35:07:48:
                    01:fa:c6:2f:72:36:55:5d:a2:50:e3:25:53:58:c9:
                    8b:4a:ed:4b:49:2f:e9:02:8b:ad:e6:30:c6:0d:14:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:FB:3E:95:E2:5A:88:1B:FF:4F:45:14:25:CD:70:32:14:4A:98
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/Bs37PpXiWogb_09FFCXNcDIUSpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.164.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c0:25:0e:49:2c:a8:2e:71:8c:bb:6b:96:3b:a8:d0:a3:a4:c4:
         52:4e:23:1a:90:00:2a:d0:3e:76:4f:62:50:5c:2e:1c:74:b2:
         d4:7e:54:5a:ab:b3:26:6d:95:17:e0:b4:e1:56:3f:e8:68:97:
         5a:1a:d8:c2:95:b0:60:c6:91:d7:a0:f2:da:95:87:d2:71:92:
         68:c2:37:db:65:4d:21:20:be:41:87:22:d0:a8:0e:5f:11:44:
         2c:7c:1e:d6:e5:5c:ba:dc:81:7e:8b:80:fe:a7:29:eb:5e:5b:
         3e:7b:4b:1f:29:85:6a:5d:74:d8:dd:b9:76:73:df:c6:62:73:
         ed:c4:0e:6d:4a:5b:52:fc:c5:61:ad:c5:05:71:0b:0e:32:d7:
         cb:51:f6:39:2f:34:bd:15:32:77:ab:05:93:ce:80:81:b7:71:
         73:f0:c3:54:d4:9f:90:c2:15:1d:a1:1a:2d:c1:93:1b:ce:b7:
         ef:a9:b7:bc:3d:fe:92:cb:d0:b4:87:b0:a9:64:5d:3c:40:bb:
         ff:10:d6:48:ec:c0:64:ec:84:52:62:85:7d:1f:95:1f:4c:57:
         8e:1d:82:f4:79:72:13:62:9b:20:dc:02:38:0a:8f:fc:ce:87:
         24:06:bd:a0:59:e6:5c:7e:d1:08:b5:29:e0:a8:3d:99:d9:0d:
         cd:79:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:11:17 2025 by rpki-client