Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/Fi_13lcJge16GftSrkAlKksAVEI.roa
File:                     Fi_13lcJge16GftSrkAlKksAVEI.roa (raw, json)
Hash identifier:          Jt0IjtCL/6M7HHnBeTiGKJIV1/fRUpHmxm/vnnvIs9I=
Subject key identifier:   16:2F:F5:DE:57:09:81:ED:7A:19:FB:52:AE:40:25:2A:4B:00:54:42
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       51
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/Fi_13lcJge16GftSrkAlKksAVEI.roa
Signing time:             Tue 10 Jun 2025 10:48:38 +0000
ROA not before:           Tue 10 Jun 2025 10:48:38 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9615
IP address blocks:        219.101.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Jun 10 10:48:38 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=162FF5DE570981ED7A19FB52AE40252A4B005442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:ef:36:69:af:f9:bb:67:f4:61:5a:48:31:
                    0f:96:de:99:d4:92:71:31:56:e1:f8:95:38:8d:83:
                    84:f0:91:7e:ec:2c:87:c2:b8:79:1f:00:04:51:dd:
                    e4:41:6e:0f:03:3c:96:42:7f:48:fb:11:90:81:80:
                    63:e9:14:b4:eb:52:c0:a6:bc:70:e2:ab:19:4a:87:
                    3c:9a:6e:4b:16:7b:06:37:3d:12:d9:ad:25:a5:46:
                    5e:2a:b6:0d:ce:84:fa:1d:b8:40:c6:e0:19:18:86:
                    f5:25:28:5c:1a:94:de:8d:51:20:f2:91:32:15:69:
                    82:94:11:b4:c7:bd:f1:fa:37:d1:f1:23:f4:97:60:
                    04:49:0c:70:30:3a:33:44:4c:bb:09:e0:ef:90:33:
                    8a:de:c6:a4:a4:a3:a7:00:02:7f:d0:a4:9f:87:b6:
                    16:62:62:59:d6:27:45:22:ee:8d:6d:fe:37:9e:36:
                    ce:83:72:b5:69:ef:24:1d:1f:4a:6b:60:27:7d:c0:
                    ed:04:8c:71:41:6c:9a:02:ac:d4:c5:dd:4b:78:a6:
                    5b:25:98:5b:85:ed:cf:b7:b6:64:ac:40:36:59:38:
                    d2:bf:db:8e:ea:97:b5:4a:64:3a:35:dd:29:ff:40:
                    92:44:c4:20:c7:cf:8d:d0:9d:f4:9b:4b:03:59:d7:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2F:F5:DE:57:09:81:ED:7A:19:FB:52:AE:40:25:2A:4B:00:54:42
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/Fi_13lcJge16GftSrkAlKksAVEI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.101.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:5a:e8:52:4d:29:d9:e6:b1:39:24:84:16:1c:f7:3c:ac:
         8b:71:62:05:19:48:81:cc:aa:c1:ee:33:01:9b:18:ed:a6:e5:
         e2:5b:36:7f:99:e7:78:6b:ca:ae:3d:5b:f3:5c:6b:bb:f0:ce:
         29:0b:ae:56:df:e1:26:1c:e3:dd:4c:bd:4b:e9:a1:ee:6a:7c:
         d4:93:06:63:bd:9a:e0:ae:ca:b7:6c:39:5b:09:e0:38:7b:f4:
         7c:8b:a6:6d:98:6d:25:43:14:dc:b0:cf:d9:46:aa:24:88:78:
         b8:27:c8:73:91:5e:92:ca:fa:ae:8d:b4:e2:db:49:32:47:76:
         ac:b3:ed:d0:28:62:6f:35:28:e6:65:4b:b7:78:34:f3:af:9c:
         1b:20:77:41:2b:68:15:c1:87:54:40:bd:f1:92:0c:d9:4e:07:
         00:87:04:78:9e:e7:c4:68:d4:ee:8c:79:c7:84:bd:ec:b6:1a:
         93:72:e1:06:80:10:46:23:db:4d:91:bf:c3:32:3b:8c:46:53:
         b8:b4:f3:5c:4f:0c:79:d5:da:65:76:90:19:13:6f:b8:5f:c0:
         e5:d4:e3:0b:2d:94:7a:73:d6:2c:bb:25:60:2c:c8:50:a0:c4:
         f6:ba:ab:ae:50:2b:6a:09:1b:17:6f:0f:be:d2:98:2c:13:08:
         df:f0:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:46:32 2025 by rpki-client