Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/0IC16-wqDdnoJOoqfoSDJjQ79xg.roa
File:                     0IC16-wqDdnoJOoqfoSDJjQ79xg.roa (raw, json)
Hash identifier:          Ri2TIovGfPn4PFdYun//vyBcXwjwKW6v5fRSxoknr5Y=
Subject key identifier:   D0:80:B5:EB:EC:2A:0D:D9:E8:24:EA:2A:7E:84:83:26:34:3B:F7:18
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01DB
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/0IC16-wqDdnoJOoqfoSDJjQ79xg.roa
Signing time:             Tue 01 Jul 2025 01:42:32 +0000
ROA not before:           Tue 01 Jul 2025 01:42:32 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        210.133.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:42:32 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=D080B5EBEC2A0DD9E824EA2A7E848326343BF718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:59:ce:60:a2:c8:39:9c:99:19:57:e9:95:4a:
                    5a:56:52:2d:2a:22:52:e1:3c:52:ab:1b:83:03:27:
                    e8:a0:e4:b6:08:59:f0:76:ed:d1:29:06:6c:af:50:
                    cb:58:02:66:e7:28:3d:91:e4:a4:26:09:fa:f2:ab:
                    c3:88:4b:73:55:01:70:87:fb:f3:89:b6:66:68:0f:
                    2f:76:06:f9:de:3a:b9:46:c9:6d:7c:15:3e:de:cf:
                    d6:89:0f:c9:e9:7e:8a:89:fe:33:68:f0:fc:ba:67:
                    ae:99:f2:3d:f1:0e:d8:83:fe:b6:16:41:d4:94:6c:
                    88:2e:3a:ab:cb:a7:b6:c4:5e:66:b4:38:0f:96:13:
                    fb:46:65:2f:a2:ea:69:08:59:d9:52:59:80:eb:12:
                    f7:a8:a5:79:2a:e9:b4:d8:11:7d:b4:73:79:b0:43:
                    97:f4:ea:03:72:55:58:e9:91:dc:fe:dd:3e:4c:e5:
                    24:e4:82:33:42:b5:93:d9:d2:bb:c0:a0:04:03:84:
                    4c:80:1f:81:e0:c1:aa:2f:75:0f:99:5e:a6:85:e9:
                    a8:25:a4:a9:3f:0d:db:9e:32:e9:7b:dc:0f:ef:d3:
                    85:1b:42:4e:4e:7c:c1:23:eb:0f:2b:ac:c1:92:18:
                    03:ce:a7:b6:e6:70:a7:31:df:25:45:ae:c8:87:5c:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:80:B5:EB:EC:2A:0D:D9:E8:24:EA:2A:7E:84:83:26:34:3B:F7:18
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/0IC16-wqDdnoJOoqfoSDJjQ79xg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.133.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:96:88:f3:dd:6f:07:cb:7f:b4:ae:b2:78:48:29:80:7a:
         a9:ae:c0:b7:2a:82:8d:31:b5:f1:84:56:e5:36:3c:a2:d0:40:
         e4:aa:01:d5:ca:71:f8:be:9a:e3:b3:61:bc:6a:25:84:1e:f9:
         3d:d9:97:77:5d:86:13:ef:78:45:73:db:c1:4b:e7:2b:9a:29:
         1a:78:3f:f0:ac:81:40:a8:68:70:c2:04:06:0b:fc:8c:1d:2d:
         79:59:03:dd:d1:9e:ad:92:fb:59:60:4f:f0:c0:d8:26:6e:07:
         fb:ad:7a:e1:fc:af:7c:09:b5:6f:61:4a:87:0c:7f:a6:ab:8d:
         68:d2:ea:b6:f4:ea:9c:7b:1b:f7:cd:c4:9d:d9:0d:14:cb:61:
         d0:b1:d2:2b:60:de:58:5f:52:96:73:a6:52:a3:91:d4:9a:c0:
         4b:33:28:c3:fe:ff:9e:68:7f:6c:5a:80:b1:f3:db:80:3f:48:
         e8:b7:85:54:6d:a9:4a:2f:ec:aa:c3:6b:5d:7f:6a:3a:20:c1:
         1a:9e:3e:e5:72:80:ac:4b:a3:8b:d7:f0:fe:66:3e:23:be:a7:
         b7:8f:61:36:aa:c8:fc:fc:42:05:44:e7:73:78:5c:fe:57:a6:
         43:59:13:83:92:b7:95:1e:d0:55:23:4d:31:da:bb:90:8d:2f:
         c0:2f:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 18:32:18 2025 by rpki-client