Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5y_ADObuh8FFVxZFDpKchp3Gba8.roa
File:                     5y_ADObuh8FFVxZFDpKchp3Gba8.roa (raw, json)
Hash identifier:          GifurEk8GLv/ylpLtCfollqznK+Kd42U4iGWSeyOjmo=
Subject key identifier:   E7:2F:C0:0C:E6:EE:87:C1:45:57:16:45:0E:92:9C:86:9D:C6:6D:AF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F1E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5y_ADObuh8FFVxZFDpKchp3Gba8.roa
Signing time:             Tue 10 Jun 2025 11:20:22 +0000
ROA not before:           Tue 10 Jun 2025 11:20:22 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        220.210.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3870 (0xf1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:20:22 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=E72FC00CE6EE87C1455716450E929C869DC66DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:e3:19:10:5a:51:c5:3c:bb:d9:37:f5:49:
                    b2:52:69:2d:10:8a:97:8a:e2:9a:8f:0d:d6:4e:3c:
                    07:40:2a:4b:bf:c0:58:5b:4b:b4:19:cd:a0:35:a2:
                    81:fb:76:7a:d5:46:f3:1b:ca:9f:c1:26:74:33:1e:
                    fb:a8:27:6a:22:70:8a:21:03:6b:0a:64:bf:c6:55:
                    82:92:eb:f2:df:e8:3b:f6:af:d5:25:11:b8:01:bc:
                    43:b0:5a:84:f5:6c:e6:2f:53:c5:b0:05:f7:07:c9:
                    4b:6f:ac:26:0c:47:00:34:1d:59:26:ca:7f:b7:f3:
                    a6:1b:e2:7c:23:54:0c:02:2d:42:8f:6a:74:24:01:
                    15:32:5e:88:ee:c9:b5:a6:d4:d3:a1:d1:68:9b:0f:
                    83:6b:86:a7:4d:5d:8b:2e:fd:f5:f3:74:44:08:85:
                    97:9d:88:b3:12:86:42:53:1a:c7:fa:cf:cd:33:dd:
                    22:10:5f:b0:4e:f0:8c:08:5f:78:be:1f:9d:41:39:
                    27:c5:a9:4a:47:d0:95:6d:55:c2:4e:43:ff:92:68:
                    8b:47:0c:27:f3:91:57:07:00:9e:67:3e:19:80:b2:
                    a9:a2:a1:d6:a7:0b:d4:53:2b:b2:22:65:a4:58:51:
                    39:71:3f:ef:5e:fd:4e:5e:01:25:14:51:2c:05:49:
                    3f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2F:C0:0C:E6:EE:87:C1:45:57:16:45:0E:92:9C:86:9D:C6:6D:AF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5y_ADObuh8FFVxZFDpKchp3Gba8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:15:94:33:37:81:e1:75:fb:c9:5c:37:f4:41:3e:8c:57:
         70:59:3d:64:b0:7c:6a:fb:30:2c:67:7c:cd:ad:27:76:10:9f:
         31:d0:0b:cc:55:bc:de:cc:aa:54:fe:4e:e9:41:fc:2c:39:ed:
         2b:29:44:99:48:47:84:2d:b8:e3:05:59:47:90:d8:3a:3d:40:
         c0:a9:f5:54:7c:ea:b1:2d:42:69:4a:9f:40:fd:b3:1a:a9:e6:
         48:c3:81:76:d1:f6:1f:c2:79:d5:97:b3:0c:65:b7:56:cc:84:
         f6:78:da:8e:73:cb:d7:dc:4f:5f:f4:13:63:ab:b9:7d:c1:c8:
         2e:bc:8c:c9:a3:f1:e4:6b:5e:58:fe:c6:7f:97:99:25:60:cd:
         2b:01:e3:8d:8d:ea:be:f0:d4:5c:49:d0:d8:c9:86:08:a6:2b:
         fb:83:14:d2:29:98:4f:aa:a5:75:cb:cc:c7:52:5d:38:07:3a:
         bb:e0:b0:b8:cc:7c:61:a9:0a:29:a3:7e:d8:37:fc:e6:4c:a6:
         ae:5a:cd:5d:1c:7b:e3:f4:41:1d:ae:bf:cb:05:5e:52:db:57:
         0d:3c:a6:dd:95:06:26:0b:94:7b:78:31:54:f2:ab:ba:a5:63:
         2d:b5:a6:70:89:ff:d1:23:cf:45:08:57:e8:dc:3f:30:bd:d0:
         73:ab:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:50:54 2025 by rpki-client