Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/6dIWAR5MP34P4panz--ZPCLBY4A.roa
File:                     6dIWAR5MP34P4panz--ZPCLBY4A.roa (raw, json)
Hash identifier:          sdYFD+5qpj329/oZSxvmAcxeyjNnU6h9bJApTMTCu2Y=
Subject key identifier:   E9:D2:16:01:1E:4C:3F:7E:0F:E2:96:A7:CF:EF:99:3C:22:C1:63:80
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       A9
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/6dIWAR5MP34P4panz--ZPCLBY4A.roa
Signing time:             Tue 01 Jul 2025 01:28:17 +0000
ROA not before:           Tue 01 Jul 2025 01:28:17 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.160.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jul  1 01:28:17 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E9D216011E4C3F7E0FE296A7CFEF993C22C16380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:d1:d5:20:08:8f:14:51:9a:29:0e:13:0f:
                    bc:e8:dd:bf:0f:1b:5c:51:46:db:ce:a5:40:9c:94:
                    31:e9:2f:47:36:62:83:e3:dc:38:28:f5:38:6f:86:
                    0d:d9:c5:49:03:1f:67:6e:34:0e:52:3d:1b:53:9d:
                    3c:3f:2d:f1:6a:d7:e1:0f:dc:ed:ef:3c:b2:63:4c:
                    81:60:b6:20:39:ac:46:c0:18:dd:c8:72:ea:ee:81:
                    34:3b:15:52:99:4b:c4:69:30:90:45:9a:e9:d1:36:
                    f4:4b:3d:1a:5d:39:e7:c9:ee:db:05:62:63:d0:1d:
                    b7:8d:10:7a:53:22:28:80:ff:3d:a8:53:9c:5b:4a:
                    c4:df:b9:95:81:df:69:bc:08:df:d7:e6:59:64:f2:
                    82:3a:6e:4f:10:35:09:11:f7:eb:91:44:54:7a:ee:
                    05:3f:92:17:4b:38:d7:b8:43:70:ed:2c:ad:02:2b:
                    8d:35:03:90:6e:96:f3:58:94:1e:b1:40:12:b2:ea:
                    97:db:d8:33:e4:24:3a:8f:68:e8:13:20:98:75:77:
                    14:b5:a4:e5:18:0c:20:d9:0f:6c:a8:50:4f:75:ad:
                    87:85:ae:f0:3a:6c:4c:96:c1:98:c7:bc:29:63:b2:
                    c5:9e:b8:bf:f2:0a:b2:a5:a6:37:c2:59:3d:b5:0a:
                    b6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D2:16:01:1E:4C:3F:7E:0F:E2:96:A7:CF:EF:99:3C:22:C1:63:80
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/6dIWAR5MP34P4panz--ZPCLBY4A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:6f:bf:e1:3c:33:f0:8d:1a:3b:24:83:fd:74:78:a0:b6:
         8c:6b:d2:b2:be:d1:f6:3b:53:02:c9:c1:b0:17:ad:dc:c6:0d:
         a3:88:69:09:88:b5:5b:43:a7:c4:51:17:09:58:02:8a:b1:58:
         55:25:71:cf:17:d2:ba:d8:2a:40:98:31:4c:b3:23:40:07:7a:
         83:a7:04:ce:cf:71:7e:84:48:4a:4d:e9:2e:81:c8:42:d8:86:
         10:bb:08:95:76:6c:5f:88:9e:a9:49:e8:63:37:75:4e:b6:12:
         9f:ad:76:d6:ee:85:25:47:9b:0e:51:61:53:2e:dd:04:0c:42:
         7c:15:ab:f1:6b:78:bd:17:5f:bc:1e:ea:8a:b9:16:05:ce:b3:
         94:67:18:6c:63:4b:5d:23:c0:06:71:de:2e:5b:f8:52:aa:a4:
         4e:35:74:de:d6:c7:30:72:01:83:fb:ad:81:82:25:21:71:b6:
         5b:48:46:cf:64:4f:d8:51:30:c6:1f:9b:cf:0e:88:b8:c5:0a:
         0e:36:c0:46:a3:ac:ed:01:e7:50:21:43:f9:1a:33:e2:f4:9c:
         df:51:b8:72:f0:63:c5:ea:5f:91:a2:c1:1f:64:68:3a:b7:55:
         35:b1:c8:dc:68:b1:d3:9e:06:fc:e5:cd:d7:0b:54:1a:2d:a9:
         96:88:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:41:50 2025 by rpki-client