Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/DzoF5aaZM0Hu8Hgyi0sMJw_qz4o.roa
File:                     DzoF5aaZM0Hu8Hgyi0sMJw_qz4o.roa (raw, json)
Hash identifier:          I67VM+v9Y2uKxOa0gZhp4p6SZSc54KLhMPL80S3Djlg=
Subject key identifier:   0F:3A:05:E5:A6:99:33:41:EE:F0:78:32:8B:4B:0C:27:0F:EA:CF:8A
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       4D
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/DzoF5aaZM0Hu8Hgyi0sMJw_qz4o.roa
Signing time:             Tue 10 Jun 2025 10:48:36 +0000
ROA not before:           Tue 10 Jun 2025 10:48:36 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9615
IP address blocks:        202.224.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Jun 10 10:48:36 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=0F3A05E5A6993341EEF078328B4B0C270FEACF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:65:ea:9a:96:3f:e7:3b:65:be:e8:37:92:
                    75:b9:f9:94:e7:ad:29:d4:10:50:a3:c8:0f:0b:dc:
                    ba:60:a8:4e:48:e3:71:fc:f5:61:79:de:9b:7e:2f:
                    87:5a:4e:4e:6f:52:6f:08:2b:61:7d:98:43:76:d6:
                    0d:71:3b:96:29:4d:27:c3:a7:0c:6c:0b:dc:ca:f0:
                    53:8c:62:aa:00:9d:3c:f1:f1:b1:36:6c:f5:d0:41:
                    fa:39:76:cc:fb:fb:4d:6a:08:6f:b9:6c:d1:63:9b:
                    1e:87:5c:cd:4a:67:33:97:e7:d8:33:99:65:8e:87:
                    77:61:1f:99:e7:af:1d:48:19:cf:19:fe:1d:54:2d:
                    24:18:74:3b:b5:ed:9d:b0:51:50:b9:ab:a4:e1:2f:
                    1e:d2:8b:84:15:3f:fb:a6:eb:07:3a:2c:97:9f:ff:
                    e2:d3:6d:61:53:5a:6e:dd:97:02:2a:ab:93:7f:db:
                    b3:f6:70:8a:f1:68:5c:0d:58:a4:5a:15:2e:8e:b9:
                    63:cf:c9:c0:ee:73:bf:48:fd:69:41:6b:e7:fc:1c:
                    9f:de:a7:b8:5c:1c:89:da:f3:8e:e4:ce:01:0f:c1:
                    39:60:82:c2:c9:10:6f:47:4a:26:11:30:b3:89:8c:
                    2c:3c:78:6e:c6:45:46:43:5c:2b:cd:7f:3c:49:d1:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3A:05:E5:A6:99:33:41:EE:F0:78:32:8B:4B:0C:27:0F:EA:CF:8A
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/DzoF5aaZM0Hu8Hgyi0sMJw_qz4o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:7b:a0:7f:7e:3d:c9:0b:4a:22:da:7b:b2:08:cb:0a:84:93:
         21:d4:03:82:16:a5:1b:23:08:33:09:4d:48:71:8b:7b:75:aa:
         73:cb:4c:98:9d:e2:54:12:59:35:5d:62:95:89:c7:5d:6c:8a:
         17:87:07:93:22:ab:05:44:9d:14:8e:11:f1:f7:1d:ff:bd:9f:
         75:1a:85:65:da:e5:de:cc:fa:32:66:c6:b3:70:c5:3e:7d:91:
         88:46:60:69:16:98:63:e1:b3:b4:37:b4:ef:bc:4c:5d:43:75:
         be:90:7c:ff:36:42:55:e3:2a:7b:f3:90:59:ec:de:dd:70:30:
         d7:cf:c0:72:f2:b5:69:94:ef:56:63:5c:09:aa:1c:09:d2:59:
         17:ad:fb:e3:ae:ad:8c:05:ab:29:ec:bf:f9:03:e3:99:46:85:
         07:09:12:29:32:13:1a:aa:bc:9f:57:95:6a:3f:84:2e:4f:65:
         6f:67:14:15:66:08:d0:49:c3:0b:b2:49:49:2b:98:d9:5e:aa:
         96:ac:e4:8b:98:ed:01:9e:be:94:d2:52:07:2b:5c:c4:07:46:
         91:1f:18:d3:ef:5c:92:85:a7:23:97:52:4c:30:a0:a9:5c:5d:
         e3:a5:48:f8:02:be:e6:49:19:9d:ee:32:b9:c4:dd:3f:e2:3c:
         57:01:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:24:43 2025 by rpki-client