Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/kHn-RFmCUt59TsGwG-Rao9d0H8M.roa
File:                     kHn-RFmCUt59TsGwG-Rao9d0H8M.roa (raw, json)
Hash identifier:          HO5Ff84U5NFPTW5GysrmkQQ0QSTAA51W2pKCJH83W54=
Subject key identifier:   90:79:FE:44:59:82:52:DE:7D:4E:C1:B0:1B:E4:5A:A3:D7:74:1F:C3
Certificate issuer:       /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial:       4E
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/kHn-RFmCUt59TsGwG-Rao9d0H8M.roa
Signing time:             Tue 01 Jul 2025 08:47:47 +0000
ROA not before:           Tue 01 Jul 2025 08:47:47 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     4675
IP address blocks:        202.73.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
        Validity
            Not Before: Jul  1 08:47:47 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=9079FE44598252DE7D4EC1B01BE45AA3D7741FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:9e:03:31:41:60:7a:d6:b1:76:a0:4f:7c:9d:
                    05:80:ae:29:97:ce:c2:0d:3f:c6:44:fb:f9:04:7d:
                    ad:47:1a:3a:f3:ad:b2:f1:69:f1:1a:e7:ac:82:3a:
                    70:a8:cd:8c:a0:e9:14:ff:84:f6:d6:dd:e6:f2:c5:
                    ca:c8:5a:fc:ed:99:de:02:15:e7:54:6b:8d:c9:8e:
                    e0:ae:cd:99:74:8b:49:30:43:9b:28:c6:fc:d1:e2:
                    07:54:e8:45:f5:1d:02:96:61:da:1b:22:60:42:71:
                    e6:9b:6e:20:db:73:27:fd:f7:e5:df:62:0f:62:0d:
                    5c:b7:de:12:1e:bc:0a:18:a6:77:31:d1:bf:51:37:
                    93:38:c3:ec:72:14:26:bf:ab:bf:d8:f9:f7:da:e2:
                    a9:c4:f3:d2:59:81:da:8f:1a:71:4e:46:0e:90:35:
                    98:ee:48:2f:dd:7a:3d:77:3a:28:82:c8:df:ef:53:
                    17:e6:80:46:1a:77:17:11:e9:cc:d4:2d:04:8d:d5:
                    12:3e:1d:4f:c3:8e:74:16:55:22:b2:32:ec:c0:ef:
                    70:a4:42:9a:30:31:df:58:51:65:ca:01:e2:24:ca:
                    86:69:e4:b1:e6:81:fd:bb:47:36:7b:38:f9:2e:0a:
                    39:2e:6d:cb:9e:61:6c:62:a2:9f:6a:be:e0:7e:a0:
                    42:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:79:FE:44:59:82:52:DE:7D:4E:C1:B0:1B:E4:5A:A3:D7:74:1F:C3
            X509v3 Authority Key Identifier:
                keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/kHn-RFmCUt59TsGwG-Rao9d0H8M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:f9:5e:dc:d5:96:64:14:6f:5d:a2:ab:a7:24:e9:9d:67:55:
         31:dc:d0:8b:32:74:9b:32:29:79:6c:8a:70:8e:eb:1c:dd:9a:
         f5:bb:fb:2c:a3:00:e0:01:34:81:25:07:88:b9:e0:95:60:8f:
         d7:e0:fc:16:c7:10:f4:2d:af:4b:35:64:de:9c:cf:35:25:16:
         10:c1:05:25:70:cc:02:2a:6f:8d:e5:0c:9a:e3:e6:a7:06:ae:
         be:ee:c2:ed:42:b6:29:32:72:31:c4:cd:c8:af:33:c5:ca:dd:
         bb:5d:58:7b:35:a7:f1:14:47:67:fd:72:d0:01:3e:0d:f5:82:
         cc:fd:cd:2d:dd:79:05:dc:71:cf:f2:e3:2a:5b:c2:fc:17:c0:
         e9:69:58:1c:c2:37:81:be:13:08:3f:d3:2d:29:07:d8:6b:7f:
         19:dc:38:a2:36:c1:38:4c:ae:1b:e0:0e:8a:4e:a1:11:78:21:
         ed:8b:98:fa:13:70:c8:3f:92:da:9a:3a:4f:94:c9:f2:fd:f7:
         00:50:62:8b:7f:83:f7:60:c5:04:b4:f4:a7:66:85:60:ac:3f:
         9e:38:e8:24:85:7a:87:a7:00:46:f6:51:0f:87:a3:c2:b2:a1:
         2a:54:23:b4:b2:9b:91:67:f3:29:54:a9:a0:36:4c:2e:e9:91:
         0e:fc:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:47:04 2025 by rpki-client