Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/yKssWdl7mYbOlQnN_QwZjWh-wl4.roa
File:                     yKssWdl7mYbOlQnN_QwZjWh-wl4.roa (raw, json)
Hash identifier:          +tRT95gpbAENmlito3XwdwIe7cmpT7OwoJD5ij6pEZg=
Subject key identifier:   C8:AB:2C:59:D9:7B:99:86:CE:95:09:CD:FD:0C:19:8D:68:7E:C2:5E
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       7F
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/yKssWdl7mYbOlQnN_QwZjWh-wl4.roa
Signing time:             Tue 01 Jul 2025 01:37:21 +0000
ROA not before:           Tue 01 Jul 2025 01:37:21 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        210.165.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul  1 01:37:21 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=C8AB2C59D97B9986CE9509CDFD0C198D687EC25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:35:0c:16:f6:57:f1:f1:97:03:ce:c7:aa:
                    72:dd:1f:46:0c:a0:30:49:83:ac:2e:06:92:57:cb:
                    85:04:df:7b:1d:11:b3:9d:f7:b2:7b:89:4c:e6:9d:
                    e8:2a:52:39:1e:89:2f:cc:53:7b:f6:f0:de:69:62:
                    9e:da:b4:4a:1e:0c:b8:c9:2a:c9:70:fb:91:9d:a0:
                    ee:2a:69:be:9c:c5:dc:93:c5:3e:54:c6:5b:f1:01:
                    13:c6:e4:2a:1a:04:2e:0b:c6:3e:a7:62:1a:1a:9f:
                    18:9a:12:88:00:86:ac:9e:c3:c3:d3:c1:42:d0:ad:
                    b8:b6:8a:5a:6a:0f:43:d0:1d:99:1b:58:08:16:3d:
                    c2:b6:d7:46:db:f0:35:41:e3:40:b4:dc:bb:19:89:
                    e4:ae:7f:8a:93:a2:c1:a6:9c:0a:b1:44:e7:08:d0:
                    55:61:ca:8a:48:bb:18:f6:7a:07:51:c8:ef:22:81:
                    23:70:cc:a9:ba:b0:5b:d3:61:ac:18:b3:af:e1:ef:
                    7e:b9:cc:e4:06:b6:52:9a:49:97:77:48:fa:a7:0f:
                    8b:be:74:b9:ec:aa:28:15:e8:10:14:6b:be:65:c7:
                    ef:ad:1b:80:5b:ab:dd:07:2f:21:c0:ee:3c:b5:2f:
                    e7:34:28:b4:60:77:0f:27:b1:b5:84:a7:9e:d6:bf:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AB:2C:59:D9:7B:99:86:CE:95:09:CD:FD:0C:19:8D:68:7E:C2:5E
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/yKssWdl7mYbOlQnN_QwZjWh-wl4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:ee:f2:76:a3:c6:e7:36:7b:22:f3:2b:d4:d7:44:f0:b9:ab:
         61:e8:1f:70:90:67:20:c5:d5:6f:15:62:19:08:ed:4a:31:98:
         ca:86:ff:5a:0f:09:fd:c4:e8:64:dd:7f:20:2c:c0:a8:b9:a4:
         77:62:44:64:55:a8:51:c4:9b:3b:6b:74:ff:2a:6f:86:1c:88:
         35:88:07:1c:da:06:a1:61:f0:24:cb:fe:09:bc:bf:4b:16:4c:
         b0:f4:d7:c0:01:22:f0:13:64:38:e4:af:7f:06:a3:6d:cf:55:
         b9:71:ff:40:77:f3:d8:fe:31:2f:4d:00:63:f5:bb:e8:4e:1c:
         03:28:8c:6e:d2:40:a2:12:8a:98:bb:eb:9c:5b:a2:fe:f1:60:
         02:9a:b3:5e:e8:d0:54:9a:8b:6d:82:9f:0d:ba:08:74:76:c4:
         57:49:18:e5:c7:b3:ca:bd:fd:b2:8b:80:2d:6b:e3:57:9d:36:
         d2:d1:dd:ea:56:f9:d1:86:8c:65:7d:8f:43:ff:cc:cb:55:12:
         a0:89:7d:5e:12:b0:1f:2a:93:2b:1f:6d:53:ad:9d:1e:45:7e:
         4b:ef:c8:6b:54:63:4c:2f:61:93:31:44:8e:26:f2:ac:3b:7e:
         4b:fd:1f:f4:07:15:2b:d0:5b:cb:ea:72:e4:1f:3d:60:48:77:
         85:80:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:47:01 2025 by rpki-client