Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/7kbygiMvqMcT9k483iDeOEMIJ5k.roa
File:                     7kbygiMvqMcT9k483iDeOEMIJ5k.roa (raw, json)
Hash identifier:          rXo4SnTNPLM0V7ww1QMFy8cYoFBZik0+3KZ3ljBh3qo=
Subject key identifier:   EE:46:F2:82:23:2F:A8:C7:13:F6:4E:3C:DE:20:DE:38:43:08:27:99
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01C8
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7kbygiMvqMcT9k483iDeOEMIJ5k.roa
Signing time:             Tue 01 Jul 2025 01:42:22 +0000
ROA not before:           Tue 01 Jul 2025 01:42:22 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        124.41.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:42:22 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=EE46F282232FA8C713F64E3CDE20DE3843082799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:a7:42:f7:c1:28:4e:fa:74:b4:2f:4d:82:
                    03:ab:9f:90:2f:f6:19:d6:4b:c7:de:2c:7b:44:66:
                    86:00:79:7c:60:6d:20:ef:73:15:93:ec:a6:4f:b1:
                    78:87:d2:4e:64:29:6b:0f:c2:17:04:f9:f2:3f:b8:
                    eb:4e:27:e9:a9:21:f0:44:6e:68:d7:ac:09:85:25:
                    db:e3:30:d9:04:c9:52:d4:7d:dd:ef:cb:f6:8e:6b:
                    b2:83:ee:c6:b6:84:06:ad:5c:ff:84:f5:09:aa:55:
                    e1:bd:be:8c:5d:3a:8e:a6:9c:e2:cb:d2:a3:44:a7:
                    3e:47:86:b7:cd:b5:b7:8b:79:57:d7:ed:b9:6e:b8:
                    73:cd:56:97:9d:30:83:07:8a:e9:4b:e6:a4:d5:48:
                    6f:89:cb:b9:10:6b:da:2d:21:ad:5a:b8:a2:24:03:
                    12:e5:e7:7f:c6:da:b5:a9:6b:63:26:57:b7:43:11:
                    25:49:ed:ca:90:c5:1c:11:ee:82:d0:d2:fb:a1:ee:
                    c8:34:32:1f:a0:f3:1e:02:62:38:b7:ab:06:86:a7:
                    21:ad:ac:47:aa:a8:bc:2a:09:43:f2:b0:30:25:97:
                    3a:44:07:85:91:b8:b7:58:7a:6c:4e:d4:02:85:e9:
                    f3:9b:fb:0a:d3:53:3d:69:86:92:ba:71:ed:bc:78:
                    fd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:46:F2:82:23:2F:A8:C7:13:F6:4E:3C:DE:20:DE:38:43:08:27:99
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7kbygiMvqMcT9k483iDeOEMIJ5k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.41.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:bc:6b:a1:18:ce:90:e7:85:60:6d:22:f5:87:69:d4:d8:b6:
         af:d5:67:bb:7c:81:e9:33:a2:e9:fe:be:b4:b0:e1:9c:11:bf:
         f0:58:28:6c:a2:0f:4d:36:5b:45:70:3a:43:22:77:46:62:52:
         ba:0a:7e:ed:e9:2b:45:63:ba:d4:d9:35:a1:a7:12:2f:3f:f3:
         8b:a3:0c:f3:56:96:fe:5f:d2:7d:9c:86:68:af:43:52:7a:be:
         ad:bf:eb:51:0a:0b:03:c1:ab:50:6f:3c:6b:b1:d4:50:6f:db:
         bd:81:71:b2:1a:cc:73:66:31:6d:d1:e5:0a:a0:3e:53:f0:f6:
         8d:61:c7:10:96:af:fe:06:ed:cf:74:e0:ac:2b:f2:c6:95:95:
         c0:0f:2e:a5:c5:9c:1b:a8:84:0d:20:c7:eb:5e:b7:32:9e:c6:
         4d:39:83:2d:c7:72:1f:48:84:71:4f:3d:d1:93:03:1f:1f:af:
         de:72:b5:12:2c:32:76:65:28:80:ec:a5:87:d9:89:f3:32:d9:
         3b:23:52:d7:42:28:a7:d0:81:73:54:7c:06:d4:ae:c4:7a:ab:
         b4:e9:59:57:4f:85:a9:06:30:c6:5d:e9:1e:d6:76:c3:40:81:
         37:ae:8b:cf:c2:4e:16:e0:25:b4:be:ed:e3:0d:d4:6b:28:0f:
         8c:d0:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:15:28 2025 by rpki-client