Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/-R0NhgDzfLI53DHVFNbUkW5KGIw.roa
File:                     -R0NhgDzfLI53DHVFNbUkW5KGIw.roa (raw, json)
Hash identifier:          j2CegJTGU6jN76hSosBy83xuQOZ+60u6VLoz0DEEVoY=
Subject key identifier:   F9:1D:0D:86:00:F3:7C:B2:39:DC:31:D5:14:D6:D4:91:6E:4A:18:8C
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       36
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/-R0NhgDzfLI53DHVFNbUkW5KGIw.roa
Signing time:             Tue 01 Jul 2025 01:31:26 +0000
ROA not before:           Tue 01 Jul 2025 01:31:26 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9997
IP address blocks:        61.120.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul  1 01:31:26 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=F91D0D8600F37CB239DC31D514D6D4916E4A188C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d9:88:79:48:c0:be:10:43:a8:3a:aa:f6:58:
                    da:9a:eb:55:fa:7d:1a:d7:fe:9b:b5:65:bb:a8:a4:
                    37:5c:84:06:29:49:b0:30:26:74:b7:63:4e:82:8b:
                    70:f8:3e:fb:30:7f:eb:3e:a8:97:e3:16:bb:8e:e0:
                    be:7d:f6:55:6f:95:b0:8d:1b:91:a2:63:c4:25:f0:
                    db:97:62:93:28:a9:01:74:5a:19:4c:3d:e2:79:6e:
                    9d:f4:39:1d:6a:0a:e1:e0:a9:28:1e:77:59:00:27:
                    4c:4a:ed:61:95:01:ce:9c:3b:42:82:ed:4f:2b:81:
                    10:8d:2a:92:44:c0:77:5b:88:75:d2:f6:1b:ab:41:
                    14:86:ef:b6:fa:5c:34:7a:87:41:57:98:77:72:c3:
                    34:9b:bf:d9:6a:f5:e9:ab:d8:f5:b7:2a:94:6e:52:
                    47:96:4d:51:de:e6:18:88:03:b2:48:b4:7c:46:00:
                    a8:e7:d2:fe:68:88:07:a2:74:fb:11:ae:2a:4e:3e:
                    d8:46:e6:b6:0f:79:0e:b0:d4:19:8c:35:3d:96:40:
                    54:c1:be:be:3b:2b:00:d6:5e:ef:25:bf:3b:fa:5f:
                    09:cb:50:52:4b:3f:fe:35:3d:e8:6b:2b:01:08:c6:
                    3a:44:62:4c:b1:4f:9f:e1:b7:0d:b1:6e:5c:a9:9e:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1D:0D:86:00:F3:7C:B2:39:DC:31:D5:14:D6:D4:91:6E:4A:18:8C
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/-R0NhgDzfLI53DHVFNbUkW5KGIw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:fb:f2:05:8e:f4:b4:17:d1:f7:0a:bc:22:d7:aa:3a:21:
         e2:94:90:e3:8f:f3:0e:c1:7b:b9:86:dd:b8:32:af:76:20:07:
         ea:76:a4:3b:13:52:32:28:76:ff:77:e9:9b:72:b3:80:b6:a1:
         3e:37:df:26:06:d8:b2:bc:8b:86:3e:34:df:0d:91:03:06:1c:
         ca:0c:88:20:c8:cf:8a:91:b6:50:57:82:bb:f8:dc:cf:3f:d8:
         d4:68:ed:20:ff:83:63:cd:1d:19:a6:63:98:25:d9:d5:92:49:
         c6:43:81:0d:a9:27:af:c4:ee:c6:b1:ba:54:ec:b3:22:5b:db:
         b2:41:cd:13:1e:c3:c2:a2:6e:f4:48:09:81:b3:fd:d2:69:2a:
         60:76:fc:fb:99:5f:ca:f7:9c:f5:bc:34:2a:1d:07:61:32:be:
         95:1f:f3:46:c5:d6:41:f6:f2:c7:d9:92:cc:37:79:58:2d:a5:
         45:73:b5:02:65:e3:ad:d9:12:10:bc:26:4b:40:5a:a0:36:78:
         fe:43:d9:8d:6f:a4:3c:d8:1f:85:c3:e2:52:4d:ce:84:98:f8:
         4c:77:cc:a4:81:a3:04:86:53:a9:64:9a:21:87:73:c6:18:87:
         f8:01:6b:aa:af:f0:c5:3a:50:b9:7b:b0:3e:e8:27:f1:65:d0:
         03:85:82:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:05:03 2025 by rpki-client