Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/Dv5tHdDGtI0FYtG-BWzekSn_fAY.roa
File:                     Dv5tHdDGtI0FYtG-BWzekSn_fAY.roa (raw, json)
Hash identifier:          D7JHHv9eAB3jQZE7EPBUBVT95mzCHMZqmjoyJONx2Mk=
Subject key identifier:   0E:FE:6D:1D:D0:C6:B4:8D:05:62:D1:BE:05:6C:DE:91:29:FF:7C:06
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       48
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/Dv5tHdDGtI0FYtG-BWzekSn_fAY.roa
Signing time:             Tue 10 Jun 2025 10:48:33 +0000
ROA not before:           Tue 10 Jun 2025 10:48:33 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9615
IP address blocks:        119.63.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Jun 10 10:48:33 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=0EFE6D1DD0C6B48D0562D1BE056CDE9129FF7C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:9a:5d:06:08:24:c9:39:43:9d:c6:60:dc:
                    16:89:c6:9a:02:86:af:e0:67:09:79:34:b5:c1:fa:
                    af:08:8e:7e:ad:74:ce:00:84:43:2c:34:48:43:f6:
                    d4:6a:f3:b2:4b:af:49:a1:5b:3f:30:9b:56:a4:84:
                    8b:4f:ae:18:e5:e9:dd:cc:1b:80:b3:27:52:ca:07:
                    8f:17:59:63:df:71:90:cb:38:d9:17:2f:77:76:29:
                    d4:a2:a2:fa:37:eb:83:31:e4:1e:9c:01:e7:fe:66:
                    01:ce:30:9a:7c:00:f7:4b:fa:23:b8:5c:75:0f:7a:
                    e6:8a:69:8c:2f:18:22:de:90:85:2c:42:f5:e4:53:
                    8b:f8:7e:2c:b4:be:68:92:0a:0a:c2:b7:1f:47:6b:
                    75:34:5c:87:f2:6d:35:c7:ee:d9:8f:75:c9:8f:6b:
                    84:4e:e4:22:a9:00:af:97:c6:8c:1f:5b:94:d0:5f:
                    e4:97:85:bf:0b:c4:d7:1b:e9:dd:12:6d:e5:b4:32:
                    82:50:e4:2a:c2:8e:40:fc:52:d0:16:31:a8:23:4e:
                    b1:97:a1:fc:90:8b:8b:c4:22:5f:bf:d5:c3:5e:e1:
                    3d:ab:99:6e:06:4a:77:cf:3c:9f:8b:9e:85:18:68:
                    15:0f:b2:80:c4:0a:56:f3:ea:b0:5c:a7:16:89:62:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FE:6D:1D:D0:C6:B4:8D:05:62:D1:BE:05:6C:DE:91:29:FF:7C:06
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/Dv5tHdDGtI0FYtG-BWzekSn_fAY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.63.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:1d:1e:f7:45:36:8d:b2:53:11:6d:1e:ee:6f:51:7f:96:ff:
         14:2b:4b:60:8e:1c:62:7a:44:2e:ee:fa:71:67:0f:92:62:b2:
         2e:e7:f2:60:cd:09:5c:30:d2:76:45:3c:b2:fe:d1:5b:98:0a:
         dc:64:1e:75:20:62:07:2c:7b:2f:f4:71:2c:f1:9f:2b:4f:5b:
         02:64:d9:7e:c0:2f:21:76:16:25:97:c0:8d:eb:d8:75:f3:06:
         bd:ed:11:b5:8a:42:91:40:cd:93:23:50:ff:ec:62:c9:a6:85:
         8e:84:c9:8b:89:0e:17:c2:f3:8a:ac:c6:07:57:0e:49:44:e6:
         91:8e:08:80:ac:3e:73:3c:b5:50:d6:37:1d:60:48:c0:b9:e3:
         5d:d5:05:26:2e:ff:40:ee:30:86:1c:61:65:04:85:49:20:6c:
         c0:0d:f4:d0:36:e6:fc:8f:a4:25:c8:1f:9e:a4:64:47:7f:ef:
         8a:e1:1a:a4:08:c3:b8:72:63:82:5e:39:63:0b:6d:6a:41:e6:
         53:83:50:57:bd:ec:3d:61:07:c4:d8:18:97:d4:e9:4d:ee:3b:
         53:ec:9a:d2:c1:26:a0:e9:c6:04:52:23:df:c2:62:3d:31:3d:
         b5:d7:9f:cd:78:6b:dd:e3:6b:77:32:65:bf:72:d9:52:6b:c6:
         67:dc:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:39:17 2025 by rpki-client