Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/sS9hy6qjcZEAFY9aCLjThJxMY6s.roa
File:                     sS9hy6qjcZEAFY9aCLjThJxMY6s.roa (raw, json)
Hash identifier:          D0RBbRw6uFcPklE7D+TZkF947ptoskjvooruV1Y6Qy4=
Subject key identifier:   B1:2F:61:CB:AA:A3:71:91:00:15:8F:5A:08:B8:D3:84:9C:4C:63:AB
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       80
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/sS9hy6qjcZEAFY9aCLjThJxMY6s.roa
Signing time:             Tue 01 Jul 2025 01:37:21 +0000
ROA not before:           Tue 01 Jul 2025 01:37:21 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        219.102.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul  1 01:37:21 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=B12F61CBAAA3719100158F5A08B8D3849C4C63AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:18:b8:1b:06:7d:13:96:2e:c2:94:ab:e8:
                    cd:7c:41:d6:ba:99:45:7e:06:1c:aa:c8:77:ad:bd:
                    ff:7d:53:93:c1:35:0e:b7:5b:fd:04:7e:0f:9f:a2:
                    f1:53:b3:cd:24:b5:f7:1e:53:81:8a:df:54:ca:b6:
                    f5:1b:c9:45:cf:91:d2:7b:85:a2:c2:79:d7:d5:76:
                    00:fa:70:39:08:ee:3b:ce:c8:15:86:e7:12:be:57:
                    ef:2d:c3:e6:de:45:d3:7c:ba:9a:1c:84:0e:3d:bf:
                    94:03:9b:13:45:41:9e:a9:e2:26:97:67:e3:a4:0e:
                    74:43:3e:17:10:7b:78:9f:92:6f:50:e8:c4:1b:db:
                    b7:34:ab:51:ea:31:ab:8a:ef:22:64:3a:2c:18:f4:
                    83:31:8d:3e:c5:e3:bb:06:5c:0c:dd:a3:51:58:df:
                    ed:f3:5a:69:34:93:30:ed:56:bd:d1:42:63:ed:35:
                    cd:af:5a:02:49:46:e5:37:e3:61:16:1f:18:87:54:
                    92:00:e0:c9:70:03:6c:9b:10:43:fa:4d:14:52:74:
                    58:e5:97:f7:eb:b0:79:69:9d:11:73:86:7f:b0:4a:
                    40:3e:80:22:5e:3f:82:87:3d:3b:b7:7b:dd:6f:4a:
                    59:fb:9c:2a:87:58:e5:88:d4:98:8f:12:d8:0d:a9:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2F:61:CB:AA:A3:71:91:00:15:8F:5A:08:B8:D3:84:9C:4C:63:AB
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/sS9hy6qjcZEAFY9aCLjThJxMY6s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ba:32:88:81:6e:2a:8b:fd:51:f7:8c:8f:f6:e9:4a:95:55:0b:
         0f:ee:d2:92:b7:0b:ad:ca:a1:9e:2e:c2:77:93:8a:be:a2:c9:
         d8:35:93:7a:66:df:96:3f:a8:3d:a7:42:ac:2e:79:13:04:b8:
         46:ff:97:aa:33:92:aa:58:a9:c9:fd:48:d2:2d:cb:43:ec:23:
         6f:b2:38:ec:33:3c:73:48:7d:03:81:48:d4:72:d7:68:6e:35:
         9c:0b:92:d5:3f:16:ea:73:ef:76:25:89:76:52:07:00:e7:16:
         44:ac:18:13:ac:cd:5f:20:aa:a8:29:5e:cd:44:51:20:ea:3e:
         86:bb:fd:45:53:bd:15:d4:5d:e2:7a:6b:5a:4a:1f:3d:ef:1d:
         ff:d7:50:b1:12:e2:70:33:1c:3b:2d:39:71:d4:1c:fc:f2:87:
         17:f9:15:11:13:1a:20:ec:fc:be:8d:bd:10:1b:4f:97:ef:28:
         07:1b:05:3a:aa:e1:3d:9c:a3:77:86:c8:51:51:fc:d3:f2:bb:
         c4:a4:0e:42:a4:0d:84:55:f8:3f:84:7c:7b:ff:fc:33:7b:67:
         40:f1:31:5e:a4:78:97:cf:6f:64:92:0d:8f:89:36:71:a2:3a:
         92:e1:bc:ac:36:77:fd:88:4e:4f:02:6c:59:7b:2d:74:ac:ea:
         01:a9:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:52:56 2025 by rpki-client