Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/5eD1vNT2zRGoS76rqBesbrT6Vl8.roa
File:                     5eD1vNT2zRGoS76rqBesbrT6Vl8.roa (raw, json)
Hash identifier:          eQ5I57kmAhqX8WOSw6FxShgP8HYVuzOmN9vn9ccCxIc=
Subject key identifier:   E5:E0:F5:BC:D4:F6:CD:11:A8:4B:BE:AB:A8:17:AC:6E:B4:FA:56:5F
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       52
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/5eD1vNT2zRGoS76rqBesbrT6Vl8.roa
Signing time:             Tue 01 Jul 2025 01:33:17 +0000
ROA not before:           Tue 01 Jul 2025 01:33:17 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     131921
IP address blocks:        153.124.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Jul  1 01:33:17 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E5E0F5BCD4F6CD11A84BBEABA817AC6EB4FA565F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:26:ec:6d:17:9d:4b:1b:ff:5c:9f:18:a3:
                    89:62:42:1c:07:d1:50:fb:6d:92:f0:7c:3a:ef:47:
                    c4:58:5e:f6:b1:28:c4:01:41:4a:f6:af:cc:c5:ea:
                    94:a4:4a:38:aa:92:d0:d4:f6:c2:e2:a7:e2:c3:4f:
                    7d:77:d5:1d:37:8f:eb:fe:45:e2:6f:e9:53:f2:49:
                    04:3a:21:ff:d7:a6:0c:f9:ca:c2:15:e2:ce:09:ae:
                    29:28:bc:c6:1e:7c:11:96:03:a0:ff:58:5c:c9:b4:
                    54:44:db:05:40:7a:da:02:52:d8:06:9c:19:ed:2d:
                    9c:ad:98:99:bb:63:bc:7f:46:36:da:1c:46:77:4d:
                    db:1b:6a:e3:31:d0:7b:d7:5c:94:ae:10:4e:31:15:
                    8d:c1:e1:f6:ae:b5:76:7b:45:4f:c3:aa:74:20:e1:
                    02:b0:97:6a:dd:46:47:e3:94:9f:ea:71:c8:14:34:
                    db:ad:47:7d:c8:3f:e7:0a:e9:63:28:15:ed:e4:60:
                    c4:e1:77:81:5f:4d:54:8b:96:64:d4:9c:f8:72:c4:
                    85:1e:f6:59:01:27:2b:ce:c0:64:26:2d:66:61:a5:
                    6a:d2:7a:59:f7:48:02:1a:cc:5c:e7:ce:98:6e:36:
                    dc:61:36:78:9f:5b:3a:0c:2a:59:04:78:2a:56:75:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E0:F5:BC:D4:F6:CD:11:A8:4B:BE:AB:A8:17:AC:6E:B4:FA:56:5F
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/5eD1vNT2zRGoS76rqBesbrT6Vl8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.124.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:88:4a:d5:6c:a8:ed:2c:21:be:86:07:2e:1a:55:f8:38:bf:
         ab:32:3e:0a:5f:02:91:c7:87:c1:a4:35:65:e9:d9:8c:64:dc:
         86:fb:cc:1e:9e:0a:65:4c:7c:4b:d7:74:81:e5:26:d5:46:1c:
         98:f3:df:5a:ec:84:c5:ff:3a:32:0c:0a:b4:2c:05:6c:b8:3a:
         16:6f:42:2d:65:4f:36:b1:58:b7:ad:38:48:c4:10:f9:ca:cb:
         ff:93:c4:e5:8d:10:ba:fa:24:34:7c:41:a1:42:7d:29:3b:28:
         a3:70:28:2c:2b:00:5f:88:fa:d1:02:14:04:8a:d8:10:a0:da:
         47:03:a1:fb:63:e0:2b:58:10:8f:cc:36:62:c1:09:f8:60:2b:
         73:7a:bb:ff:0f:14:41:9d:82:ba:a8:b0:2d:83:0e:00:bf:a1:
         ed:44:08:f4:d4:6f:7c:c4:43:d8:a6:97:88:f7:b2:af:6a:22:
         ca:6f:b9:ce:d4:ef:4e:7d:91:10:14:ea:11:30:1d:b9:da:3a:
         75:33:6e:38:fe:34:18:8a:0f:13:a7:c8:10:cc:80:a8:03:b8:
         fb:a5:2a:33:fc:ec:d7:cc:d5:3c:8e:33:84:73:7b:27:b4:43:
         02:75:94:de:bd:3e:80:69:01:60:f0:1c:61:a1:1d:a6:e3:76:
         66:e8:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:16:14 2025 by rpki-client