Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kd52Y7tVV3D7gc1HbuBPqeQqLq0.roa
File:                     kd52Y7tVV3D7gc1HbuBPqeQqLq0.roa (raw, json)
Hash identifier:          cvYRgst6cdp8AzHiUmnBkaOq8UKBS86aRm/nSgGIZzY=
Subject key identifier:   91:DE:76:63:BB:55:57:70:FB:81:CD:47:6E:E0:4F:A9:E4:2A:2E:AD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0440
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kd52Y7tVV3D7gc1HbuBPqeQqLq0.roa
Signing time:             Mon 23 Jun 2025 01:33:59 +0000
ROA not before:           Mon 23 Jun 2025 01:33:59 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     0
IP address blocks:        183.181.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jun 23 01:33:59 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=91DE7663BB555770FB81CD476EE04FA9E42A2EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ec:88:f4:25:c9:66:75:7c:0f:f1:04:32:41:
                    6e:b0:39:dc:21:ec:87:a9:55:f5:68:9f:e1:62:61:
                    02:88:c2:da:4c:5d:81:eb:21:f7:1f:4c:f6:95:5f:
                    51:d7:21:fd:5f:33:e0:8d:5c:36:97:65:c9:08:e9:
                    fc:57:38:16:b9:e7:91:7d:69:9d:45:c6:fc:6e:99:
                    53:39:21:c6:fb:9f:cf:69:39:33:21:be:8b:47:52:
                    45:44:22:42:e7:c9:7d:1c:81:10:e7:4d:34:06:3f:
                    14:8e:53:74:3e:72:bc:6b:4c:63:6f:2a:0e:df:b5:
                    95:e0:fb:db:00:6d:e2:b1:a3:fb:7f:87:7d:72:97:
                    6c:f6:7d:56:89:7f:43:ab:b0:f8:d0:2c:51:88:27:
                    80:00:dd:3c:1f:c6:a5:52:86:a3:a2:43:2d:d0:a0:
                    78:bd:74:01:ab:dd:84:6d:9e:66:d7:0f:ae:2f:11:
                    cb:74:41:80:15:64:04:52:95:8c:df:cf:ff:a7:dd:
                    31:2b:8e:cb:d7:93:01:3e:09:ba:51:ed:f9:49:1c:
                    91:b0:3b:2e:dd:4a:e4:ee:9f:69:fa:2f:49:db:36:
                    4a:39:51:b7:9b:26:6c:22:42:31:ca:04:5b:a2:66:
                    b3:b3:0e:fd:15:67:13:71:38:ec:df:3c:24:7a:e1:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DE:76:63:BB:55:57:70:FB:81:CD:47:6E:E0:4F:A9:E4:2A:2E:AD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kd52Y7tVV3D7gc1HbuBPqeQqLq0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:09:bb:c5:16:8c:94:62:1f:e9:73:50:ff:0a:53:6f:92:ff:
         4a:06:0b:3e:36:f1:34:23:ad:ba:5d:9e:99:6e:ce:98:78:ed:
         42:5d:e1:c0:63:d4:d6:2e:54:df:9d:2d:d1:b8:98:a4:b1:4d:
         a2:c8:dd:c3:64:ef:a2:e4:68:f4:7a:e8:86:0d:f6:f0:9b:1b:
         9f:76:24:b3:7c:d3:46:3a:2b:96:3b:3b:bc:4b:dc:2e:eb:49:
         6c:5c:21:d6:da:a5:21:e1:31:e9:d8:e2:ec:00:f5:4e:b7:7c:
         9c:8b:70:4b:82:90:5d:c6:84:9f:62:7b:07:f0:fd:de:f6:a6:
         b3:dc:4f:e5:ca:75:60:f8:0a:70:65:1c:46:aa:7b:b5:b0:f6:
         b9:f5:88:44:a9:52:e3:d2:31:01:52:a5:f8:4b:25:b1:37:ec:
         74:74:a7:49:3c:b3:12:32:7d:00:ba:99:49:a8:aa:19:6f:f6:
         6c:d0:98:f6:10:f6:45:d8:58:49:b9:51:98:91:32:8f:07:dd:
         6d:06:0c:a1:79:ca:c6:41:f5:46:a3:c7:c0:b3:06:03:3d:8d:
         e7:95:68:0b:08:0b:c6:ad:41:3a:c9:97:53:ce:6f:ae:ac:dd:
         f3:d6:2e:2c:c3:06:07:59:7b:e5:c7:b0:b2:83:d8:64:92:f3:
         9c:96:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:48:35 2025 by rpki-client