Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/QlblT--HPe3GHz9X77pNfeOWt64.roa
File:                     QlblT--HPe3GHz9X77pNfeOWt64.roa (raw, json)
Hash identifier:          BggkwlrscBMPvPNbjO/oZZ/dybU8Wd2YfdqIaS0itxQ=
Subject key identifier:   42:56:E5:4F:EF:87:3D:ED:C6:1F:3F:57:EF:BA:4D:7D:E3:96:B7:AE
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       4A
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/QlblT--HPe3GHz9X77pNfeOWt64.roa
Signing time:             Tue 10 Jun 2025 10:48:34 +0000
ROA not before:           Tue 10 Jun 2025 10:48:34 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9615
IP address blocks:        182.255.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Jun 10 10:48:34 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=4256E54FEF873DEDC61F3F57EFBA4D7DE396B7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:21:5a:e1:20:cf:ba:8b:33:f6:f7:b6:fa:
                    07:25:02:27:1b:d6:29:42:2e:bb:e6:df:65:ad:8b:
                    37:a9:96:dc:c3:fa:09:e0:39:e4:2a:97:d7:ce:5e:
                    83:59:f9:25:19:73:17:ba:fd:92:80:02:89:0f:4a:
                    91:0d:4b:ff:b9:24:33:92:c8:24:4e:2a:ed:6b:93:
                    11:0c:5a:3a:2e:57:27:fc:a8:15:f4:d0:2c:54:b6:
                    d8:08:cd:06:50:35:c2:e7:1c:6a:89:d5:f2:47:5d:
                    28:4c:5f:14:ff:99:3c:34:d7:32:1d:45:67:06:32:
                    44:8b:c4:2e:23:d8:0b:65:05:9c:77:17:80:b7:e6:
                    f7:e7:79:f8:3f:83:5b:bb:33:9f:fb:c9:74:0d:0f:
                    23:94:e2:e9:3a:77:79:53:19:16:6e:e0:05:ae:3d:
                    b0:6f:72:0c:6c:98:b4:cb:73:d0:7d:8c:e1:2a:26:
                    ca:13:13:38:fa:08:9e:84:1b:a1:15:b5:8f:1f:14:
                    7a:84:e0:f1:29:2b:8e:b7:46:f6:ed:3e:87:59:f6:
                    25:9f:f9:b7:9d:ce:50:16:e7:e4:61:0c:d0:d8:6c:
                    a9:d7:93:0a:c8:ca:b9:cf:ed:e6:9c:14:3d:48:5a:
                    6c:95:50:1e:6c:a8:7b:b7:5c:64:cb:9f:ef:1e:47:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:56:E5:4F:EF:87:3D:ED:C6:1F:3F:57:EF:BA:4D:7D:E3:96:B7:AE
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/QlblT--HPe3GHz9X77pNfeOWt64.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:19:58:00:73:fb:2c:fb:61:d5:f6:fa:7a:a2:8a:95:86:
         a9:7d:95:c8:28:bf:d1:9d:a7:a3:45:c1:6b:94:71:b7:3a:01:
         17:5f:8b:aa:16:96:7b:5a:b6:f8:7d:2f:1b:3c:fa:e1:31:56:
         b5:3c:bd:bd:ec:dd:33:dd:78:75:c8:c5:4c:31:df:59:db:c1:
         7f:5e:73:e4:22:85:1d:16:9c:05:79:b7:00:d4:34:f2:c4:cb:
         b6:8c:34:ed:1b:8d:e9:ef:da:0d:05:88:34:2c:2c:b2:75:06:
         6b:de:19:cf:4d:f8:e8:f2:16:ce:42:67:13:f2:c0:c9:a1:6d:
         38:96:f3:32:dc:80:fc:be:a7:30:8f:7d:8e:97:e3:fa:00:b2:
         5d:ec:f0:03:07:60:ab:c5:5c:82:28:68:cd:33:0c:c4:70:d4:
         3a:06:09:5e:63:bc:b5:02:85:6b:be:6a:aa:39:f0:0e:65:a8:
         ae:4e:d7:3b:9b:b4:94:d8:58:8e:e0:82:a3:b3:24:42:ff:9e:
         58:88:5d:2a:98:25:0d:c9:92:17:60:3e:a7:06:9c:36:96:88:
         90:e4:60:2e:2e:38:39:8b:87:5c:55:58:d4:d1:33:64:4c:50:
         ae:e8:ee:d4:cd:81:5e:ce:5f:79:1e:21:b5:15:4e:d3:51:53:
         7e:fd:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:03:15 2025 by rpki-client