Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/BRxlWptNCgoloLjweI_ediR9vlM.roa
File:                     BRxlWptNCgoloLjweI_ediR9vlM.roa (raw, json)
Hash identifier:          TtrhN25UmSLEms6TKWFt3AkqSFF7VedSjhVFohguXj8=
Subject key identifier:   05:1C:65:5A:9B:4D:0A:0A:25:A0:B8:F0:78:8F:DE:76:24:7D:BE:53
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       8B
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/BRxlWptNCgoloLjweI_ediR9vlM.roa
Signing time:             Tue 10 Jun 2025 10:47:09 +0000
ROA not before:           Tue 10 Jun 2025 10:47:09 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     55900
IP address blocks:        180.131.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Jun 10 10:47:09 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=051C655A9B4D0A0A25A0B8F0788FDE76247DBE53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:5d:90:41:ba:d3:79:9f:54:03:2f:d2:47:
                    38:14:dd:06:94:0a:47:0f:32:73:2a:0b:34:2f:1f:
                    02:5b:7f:a1:44:a4:97:b4:9b:84:6c:6c:ed:4a:de:
                    25:fd:02:f3:2e:0e:f3:84:c9:63:e9:f1:0e:ff:3b:
                    f9:dc:c9:bc:e2:d0:53:64:ae:26:35:a9:8e:c6:8b:
                    8c:05:2c:7a:ab:d5:d5:19:1e:0e:c6:3d:fd:c0:58:
                    61:ca:a9:35:b9:8a:c5:43:7b:ae:b2:63:c1:0a:53:
                    f9:55:bb:be:7b:57:fe:4e:48:2b:f5:78:e2:2b:58:
                    88:f2:e9:58:c6:d7:dd:02:47:e9:2f:86:f9:62:46:
                    79:4a:1d:f2:9f:a8:8d:5e:e9:b3:77:5c:2c:59:e5:
                    f4:97:ca:71:b8:23:7f:0c:37:2f:0c:11:2c:f3:39:
                    d1:c2:02:3d:79:33:48:57:6b:1f:3c:05:b5:72:84:
                    f4:52:fa:ff:17:6e:0b:63:0d:e2:4f:a2:35:0a:54:
                    c1:53:4a:41:2f:bc:7a:57:d4:fd:b8:55:06:12:37:
                    64:92:c9:05:8b:2b:bc:a2:fb:2a:ac:b6:a1:11:37:
                    c0:a7:cb:4b:c1:b1:e7:84:43:08:7d:eb:16:a4:52:
                    b2:76:88:a9:c8:1b:5f:bd:9c:e6:f3:29:0a:d8:e0:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1C:65:5A:9B:4D:0A:0A:25:A0:B8:F0:78:8F:DE:76:24:7D:BE:53
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/BRxlWptNCgoloLjweI_ediR9vlM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:cf:6e:08:d3:6a:d2:8d:c1:e4:08:23:00:cb:0e:ce:8b:18:
         67:a5:a4:ea:c7:a4:de:6c:9f:35:42:1a:77:65:de:d0:56:05:
         49:28:b5:fa:71:7e:36:80:55:b0:2d:0a:d3:1b:53:a8:8d:c4:
         de:29:47:7d:7d:fd:2c:e3:69:fc:94:10:9f:55:2b:10:61:7b:
         73:b6:d1:92:bc:dc:4b:d4:40:79:d9:59:a6:66:0e:47:57:f6:
         e3:56:02:05:47:ba:4b:82:07:d1:26:f2:dd:a7:ea:98:a1:99:
         9d:e6:4b:ff:a0:09:37:cf:0d:9e:fb:a6:fb:0e:92:1e:64:6a:
         b7:3c:39:aa:c9:e0:b4:39:9b:1d:34:60:f0:1f:0a:d8:24:25:
         8f:99:03:82:22:8b:88:26:d9:90:db:75:65:90:96:8a:41:ee:
         97:51:c1:21:7a:a1:4b:a3:b3:d0:0c:69:21:7e:b0:43:7d:ed:
         99:82:76:71:b7:7a:c9:70:07:4b:8c:d0:d1:df:d4:4b:6a:a5:
         b6:cd:21:7f:11:15:0e:a8:0b:c8:56:36:8e:23:87:f9:92:3c:
         84:82:a0:1b:71:67:63:a9:b5:64:af:4c:68:f2:bc:f3:a9:da:
         63:05:da:82:42:15:dd:95:6a:fa:ac:94:4b:10:c7:c7:23:1e:
         9b:ea:31:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 09:36:46 2025 by rpki-client