Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/rw0AIl8nHzk8fweN0JALIm6kcJY.roa
File:                     rw0AIl8nHzk8fweN0JALIm6kcJY.roa (raw, json)
Hash identifier:          cwQHQJJmhNWm2rqu06/6CgDROM9NiURHYmVLnZWcI+g=
Subject key identifier:   AF:0D:00:22:5F:27:1F:39:3C:7F:07:8D:D0:90:0B:22:6E:A4:70:96
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       8E
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/rw0AIl8nHzk8fweN0JALIm6kcJY.roa
Signing time:             Tue 10 Jun 2025 10:47:11 +0000
ROA not before:           Tue 10 Jun 2025 10:47:11 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     55900
IP address blocks:        180.131.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Jun 10 10:47:11 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=AF0D00225F271F393C7F078DD0900B226EA47096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:aa:78:9a:9a:a9:87:81:78:67:b5:a5:67:
                    13:a3:2c:d4:e6:02:f2:d6:24:14:32:80:db:c4:6f:
                    6a:15:ce:36:b8:83:4f:95:e6:6a:ef:f6:ef:5f:5d:
                    ea:09:0f:48:ce:d2:94:cc:63:b6:2a:e2:a6:cd:fe:
                    a5:72:8b:26:b5:5b:d2:5a:f9:7b:8e:e4:3a:6f:2d:
                    b7:ad:dd:1c:48:07:5a:a8:93:f4:7f:cf:da:13:9b:
                    c2:6f:2c:32:7f:2a:7f:c4:f3:22:55:ae:d3:8d:8e:
                    36:4a:aa:9b:27:df:56:93:02:ab:6c:2f:fc:d1:8a:
                    81:50:e0:14:ca:f3:59:eb:5e:df:b9:38:85:05:33:
                    4c:5b:0c:35:21:41:60:bd:28:70:9e:61:b5:5f:9b:
                    ae:ea:3e:ce:98:57:df:4f:b8:c2:39:7a:24:cc:56:
                    7e:7a:88:82:3f:01:06:da:0a:30:3d:51:43:e7:96:
                    3d:62:b3:6d:55:13:79:f6:a5:bd:3a:5c:75:dd:a7:
                    67:c8:c0:31:c2:80:69:85:61:30:35:b6:d3:e4:ab:
                    46:91:38:f2:72:4b:96:2d:b8:7b:7c:10:66:88:ab:
                    29:83:4d:cc:dd:3f:32:40:8b:22:34:68:4c:fc:58:
                    8e:7f:c9:77:72:60:a5:90:9b:6c:81:89:92:4b:7f:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0D:00:22:5F:27:1F:39:3C:7F:07:8D:D0:90:0B:22:6E:A4:70:96
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/rw0AIl8nHzk8fweN0JALIm6kcJY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:ff:d6:9b:57:03:cb:ef:62:5f:f8:9c:a0:6d:4b:33:e5:
         87:da:44:68:85:ae:db:1d:8a:2c:34:ee:90:ba:c3:03:f3:d4:
         3d:d3:7c:c7:70:30:3a:54:48:c5:99:67:8e:8a:44:5f:57:f6:
         05:d0:2e:b9:55:f0:0e:28:90:d3:92:32:fb:43:b1:1d:43:77:
         d3:9d:09:82:84:79:47:6a:22:89:ac:cc:1d:83:7e:d2:27:11:
         f9:81:6b:0c:c6:11:c8:11:4e:d3:f1:13:36:d6:ff:16:6a:35:
         eb:ed:7d:ed:9e:51:28:02:dd:8e:d7:16:f0:f9:8d:f8:fc:17:
         78:37:97:f4:77:a7:6b:93:10:73:1e:48:fb:85:86:a8:85:cc:
         62:89:62:f4:f4:ac:9f:36:19:bb:82:d5:32:8f:d1:aa:57:ea:
         1c:fa:f5:7b:11:7f:89:76:5a:76:8b:0a:99:cf:f4:e7:80:6c:
         c6:0a:b1:dd:8b:7f:33:b9:df:cf:d6:ad:0e:23:cb:62:91:c6:
         75:b0:e8:97:23:36:71:eb:9e:5d:44:e2:f0:d2:5c:56:03:fb:
         0d:f8:0b:5e:d3:c2:aa:5a:91:89:1e:7b:a3:3b:8a:e2:31:05:
         2f:b2:d6:13:0b:55:fd:54:38:53:f6:67:86:85:3a:5d:bc:29:
         00:39:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 09:54:09 2025 by rpki-client