Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/9G9KT_Z9egtDEHrBA4yvcphRAmw.roa
File:                     9G9KT_Z9egtDEHrBA4yvcphRAmw.roa (raw, json)
Hash identifier:          LiDC01BeC/5K1B2Whj+gBIZlGvDQLsv8V3wmdcpYeBY=
Subject key identifier:   F4:6F:4A:4F:F6:7D:7A:0B:43:10:7A:C1:03:8C:AF:72:98:51:02:6C
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       3E
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/9G9KT_Z9egtDEHrBA4yvcphRAmw.roa
Signing time:             Tue 01 Jul 2025 01:31:30 +0000
ROA not before:           Tue 01 Jul 2025 01:31:30 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9997
IP address blocks:        219.100.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul  1 01:31:30 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=F46F4A4FF67D7A0B43107AC1038CAF729851026C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:a2:63:ee:22:e0:c8:3f:e2:b0:66:ae:ff:
                    06:39:fd:13:f4:57:70:01:71:b7:cb:f5:8a:a6:b0:
                    da:a1:f8:4e:dd:d6:61:04:e7:a4:f3:c6:7f:2c:0e:
                    f4:91:fb:ef:0b:3e:71:a6:79:02:64:ce:ec:e0:21:
                    a5:8b:13:f8:57:ba:95:2f:57:f7:93:38:d0:c8:60:
                    b7:ff:c5:de:ab:f4:68:da:d5:5e:34:46:b7:e2:80:
                    e4:48:de:f6:da:3e:49:eb:7f:ed:71:c3:a6:a6:e9:
                    22:4f:c1:71:e3:a1:df:1a:e2:b8:30:f1:be:a2:8a:
                    41:f3:39:9e:d0:39:0c:4f:e6:ca:b5:31:e1:e5:e4:
                    9f:b9:83:e1:c9:75:f1:53:5d:28:2b:81:7e:e1:e0:
                    cb:99:2e:e3:02:7a:71:af:2e:4b:cb:fa:78:52:e7:
                    85:63:77:59:72:90:ac:7d:16:ab:41:93:63:92:cf:
                    c1:0d:c8:00:f0:c4:17:2a:f2:58:15:3f:48:2c:76:
                    e0:2f:29:a2:87:9a:67:b8:44:45:b4:b1:a8:59:0c:
                    42:f9:39:b6:76:62:47:f4:3d:2e:1b:21:96:c7:0b:
                    0d:88:99:1c:f4:f6:bd:67:8c:ce:c7:83:9e:c6:55:
                    6c:7f:50:47:38:71:36:33:ba:83:9e:de:45:2d:94:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6F:4A:4F:F6:7D:7A:0B:43:10:7A:C1:03:8C:AF:72:98:51:02:6C
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/9G9KT_Z9egtDEHrBA4yvcphRAmw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:49:ec:24:de:0a:15:f5:d5:b6:d0:c2:3d:f3:a5:67:da:
         18:16:9e:59:9a:df:34:a8:47:5f:87:f4:e9:aa:a2:72:6d:ed:
         da:e8:4f:50:31:c5:ec:cb:ce:58:e4:a9:0e:2b:25:2a:f2:c5:
         af:b0:5e:21:5c:37:52:78:f6:f1:90:a3:b5:77:72:37:08:d9:
         34:98:d1:81:c3:8d:90:77:07:b2:c1:ec:11:1a:9a:3b:33:eb:
         66:22:4c:71:d2:dd:15:e8:dd:b2:1f:e6:a3:71:5a:8f:5e:1d:
         e6:2e:2a:52:5c:84:40:51:d7:0f:19:71:47:28:0f:91:be:27:
         1b:02:d7:05:a1:e7:c7:68:f8:16:84:c1:a6:4e:3d:db:55:8a:
         d1:b4:e3:b8:5e:a6:1d:45:81:ec:0a:eb:ff:8f:38:c9:86:2e:
         94:90:f6:ae:01:bb:f2:73:e5:7d:23:d5:8f:53:74:00:02:43:
         51:62:57:fc:d5:e0:4d:99:c0:2b:4a:c6:63:fa:66:14:a1:66:
         d9:09:22:33:da:77:0f:b7:4f:2a:81:90:b6:69:5f:63:06:dc:
         79:7a:75:52:e9:5f:e4:ed:2c:75:c7:1b:24:ca:57:d0:ec:c5:
         64:39:27:d9:46:4d:54:51:67:90:05:1f:b3:b9:1f:32:cc:a5:
         26:bd:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:17:08 2025 by rpki-client