Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/FU5nzmorsLhJz8rCB5Eg0ZeEyfQ.roa
File:                     FU5nzmorsLhJz8rCB5Eg0ZeEyfQ.roa (raw, json)
Hash identifier:          ki3BLe4tj6/mXuROq4uoyKafpn3IfaOUCB5KP5k2Ppw=
Subject key identifier:   15:4E:67:CE:6A:2B:B0:B8:49:CF:CA:C2:07:91:20:D1:97:84:C9:F4
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01D9
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/FU5nzmorsLhJz8rCB5Eg0ZeEyfQ.roa
Signing time:             Tue 01 Jul 2025 01:42:31 +0000
ROA not before:           Tue 01 Jul 2025 01:42:31 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        219.126.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:42:31 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=154E67CE6A2BB0B849CFCAC2079120D19784C9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:db:60:7a:0e:22:ae:55:ca:ee:16:0f:ff:
                    74:bf:a6:f7:05:9e:e3:09:55:48:8b:ed:67:0b:c4:
                    61:69:5a:69:3d:16:51:a8:3c:48:9b:97:2f:8f:92:
                    f0:fa:ee:3e:8c:aa:c9:52:3f:df:dd:5c:7e:f3:f9:
                    4c:59:e7:e3:ec:c0:2b:ea:20:c0:f7:46:33:aa:0c:
                    5a:4a:b2:10:f4:63:e1:51:ec:7e:2f:31:c5:74:13:
                    93:7b:e7:16:fc:ab:e3:a6:7f:27:3c:25:4c:eb:bc:
                    1c:e4:d9:6c:96:88:76:ba:e5:ee:f0:19:87:ec:45:
                    3f:e1:3c:5d:c9:10:8c:4b:39:3e:3f:2d:a8:9f:d9:
                    cf:62:1b:57:d8:6b:97:c3:2c:a2:f2:10:08:2b:cc:
                    1d:13:20:92:27:ba:fc:02:4e:01:37:45:d6:cb:2c:
                    00:c5:a2:14:56:17:00:a4:21:0c:95:58:33:fb:5a:
                    7d:dc:f7:2b:2d:0a:c4:cd:98:8c:71:cb:58:da:a9:
                    e9:7e:cc:76:13:ce:ff:31:1d:ee:f9:d3:25:f4:ff:
                    13:17:cd:33:dd:73:e1:34:03:e3:60:fe:bc:23:d4:
                    4a:f7:0d:83:51:89:79:71:d2:6e:33:af:e3:d6:5d:
                    49:e5:f5:21:37:cd:9b:55:ce:9f:b3:54:c0:15:ee:
                    75:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4E:67:CE:6A:2B:B0:B8:49:CF:CA:C2:07:91:20:D1:97:84:C9:F4
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/FU5nzmorsLhJz8rCB5Eg0ZeEyfQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.126.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0b:67:48:17:c4:8f:7a:1a:f5:f3:49:f6:91:eb:ea:4d:b3:e1:
         07:29:fc:fe:95:c3:55:69:70:64:ca:2b:b2:d7:c8:c2:33:73:
         a6:48:7a:93:92:ca:da:ae:6f:97:94:ea:ee:92:a7:d6:0d:1b:
         84:4a:2d:89:9f:03:64:c8:f4:a7:97:64:61:30:81:12:ed:de:
         7c:99:79:39:26:59:6c:87:26:1e:5e:77:39:fa:2b:0c:39:f0:
         68:b4:ba:6d:e5:c1:11:c1:b4:de:83:5c:8c:94:cb:4d:9f:06:
         15:a3:ea:2c:b9:d3:29:bc:95:e0:9f:2b:43:4d:f8:e0:51:75:
         a1:40:39:0d:e8:e1:90:1e:4f:8f:da:30:92:8e:87:cd:01:2b:
         21:07:fa:47:cf:2b:3f:43:8f:20:4e:f1:9f:00:30:af:2b:13:
         42:af:30:b1:d9:e9:df:4d:df:4c:e8:28:99:4b:15:f5:50:95:
         e0:63:67:3e:1f:ff:c7:83:f7:27:f5:74:72:d8:d1:30:15:21:
         dc:77:f1:fa:56:f8:a6:cc:61:35:91:db:7e:da:94:96:bc:72:
         74:6e:9d:cd:de:85:f3:f3:92:4f:5a:bb:cf:a6:34:42:c0:7d:
         f0:4b:3d:93:79:cd:b4:1f:e9:ee:f9:90:a4:7e:6c:e8:81:e8:
         1c:4c:7c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:18:28 2025 by rpki-client