Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/SIVLuxXUfBQwPaFr_o5Ug_3lotI.roa
File:                     SIVLuxXUfBQwPaFr_o5Ug_3lotI.roa (raw, json)
Hash identifier:          fLBB097lF2c6stQIxx6+uM7nVyp9VNA3lyuUTrX2N9Q=
Subject key identifier:   48:85:4B:BB:15:D4:7C:14:30:3D:A1:6B:FE:8E:54:83:FD:E5:A2:D2
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       49
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/SIVLuxXUfBQwPaFr_o5Ug_3lotI.roa
Signing time:             Tue 01 Jul 2025 01:32:04 +0000
ROA not before:           Tue 01 Jul 2025 01:32:04 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9597
IP address blocks:        150.60.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Jul  1 01:32:04 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=48854BBB15D47C14303DA16BFE8E5483FDE5A2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:14:31:7a:8b:4f:b5:f6:39:a7:ce:47:fa:
                    e8:1d:e4:ac:74:fb:c8:33:3e:df:05:aa:22:97:9c:
                    52:d0:c7:d7:9c:57:de:64:e4:13:1b:fb:04:63:5c:
                    ff:c2:23:62:a1:55:ab:e8:a3:6b:90:e0:cf:d6:ad:
                    d9:ca:68:03:89:d9:8b:d9:f3:63:36:1d:3d:59:11:
                    7c:5a:e4:21:3c:df:10:78:e8:e8:86:8b:6e:e5:f9:
                    36:75:69:c0:4e:9c:fd:17:c8:e4:7a:6e:ab:56:29:
                    05:8d:8a:86:62:33:26:8c:09:bd:40:d3:73:c1:11:
                    7f:a2:96:8b:32:4f:c0:03:37:fa:b6:49:94:c6:e6:
                    cf:67:7e:e6:95:c2:0f:f7:f5:1c:fd:d4:49:39:a9:
                    f0:b3:12:d5:b8:30:e0:9d:c7:73:df:7e:19:28:33:
                    ca:60:7f:7b:0e:f9:2e:4c:32:fc:51:98:14:af:6c:
                    74:e1:c0:cd:18:39:8b:c5:f5:d0:78:b2:58:c1:91:
                    16:74:56:9b:1f:f0:c3:4f:c4:94:d7:15:77:aa:61:
                    04:e2:db:db:3e:53:33:e7:c2:cb:53:2b:46:b6:71:
                    e3:5b:34:78:eb:55:02:7b:14:0a:ee:5c:48:57:0a:
                    49:e2:ac:48:c1:b1:92:40:78:dc:d9:01:c3:90:69:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:85:4B:BB:15:D4:7C:14:30:3D:A1:6B:FE:8E:54:83:FD:E5:A2:D2
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/SIVLuxXUfBQwPaFr_o5Ug_3lotI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:f2:65:fa:16:c4:c1:7a:9b:36:be:de:98:6a:7f:72:5a:64:
         36:e7:ea:77:6a:46:82:79:83:ff:68:88:0e:2b:bb:ca:3f:4a:
         19:f0:70:a5:a9:4b:d0:4b:be:2f:06:19:98:88:f5:32:74:a6:
         a6:4b:ca:12:ee:3c:67:14:f3:af:8b:8a:7b:8e:de:4b:04:9f:
         18:2c:fc:48:fc:f0:44:c5:59:3d:dd:91:19:c7:1b:bb:87:66:
         8d:3a:e1:4a:75:c7:6c:cf:97:a0:66:94:a7:c8:b5:af:63:2a:
         fc:07:ff:0d:87:0f:32:04:8b:d1:40:22:4d:e4:eb:f0:ce:bc:
         cf:a5:71:05:4f:38:81:9c:e6:0c:f3:36:ec:27:eb:b1:ae:f5:
         fd:15:5a:1e:25:25:b4:ce:c9:d4:b8:7c:43:11:c3:ff:15:50:
         a4:2d:6b:8d:77:09:ca:22:c9:a6:47:93:17:d6:5a:32:e9:05:
         7b:c0:d2:e5:03:5d:ca:cf:a1:7d:13:cc:88:31:93:9d:89:93:
         34:e4:58:68:9e:be:58:b5:77:a8:24:c4:e2:4c:8d:bb:f0:d6:
         21:11:f9:eb:67:0e:51:55:1f:3d:54:32:00:d9:72:d8:8c:86:
         a3:e1:21:f9:3c:ee:d7:d1:fe:6d:2a:b3:12:ae:65:ee:cf:f0:
         4f:06:35:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:21:17 2025 by rpki-client