Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/QMHAK7yk2FNca6joZ40qET6p5M0.roa
File:                     QMHAK7yk2FNca6joZ40qET6p5M0.roa (raw, json)
Hash identifier:          O5hJoHfOr+7wBM8sGGALWmoVoahiEvYArtl/S4AAwr4=
Subject key identifier:   40:C1:C0:2B:BC:A4:D8:53:5C:6B:A8:E8:67:8D:2A:11:3E:A9:E4:CD
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01CC
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QMHAK7yk2FNca6joZ40qET6p5M0.roa
Signing time:             Tue 01 Jul 2025 01:42:24 +0000
ROA not before:           Tue 01 Jul 2025 01:42:24 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        119.10.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:42:24 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=40C1C02BBCA4D8535C6BA8E8678D2A113EA9E4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:8e:a5:2d:28:e7:21:07:85:64:fb:16:36:
                    e4:d0:d7:9f:74:dd:4b:ce:ac:ff:eb:48:f1:de:b3:
                    4f:d0:c2:1e:07:33:78:86:2b:f7:f4:d0:c6:d5:06:
                    2f:4e:25:7b:3f:41:c1:3d:8a:cf:1e:50:98:59:12:
                    ac:5f:3e:32:2d:4b:e1:7c:c1:80:f0:43:f7:06:2c:
                    4d:46:ec:44:fd:20:37:29:9b:84:3e:91:c3:27:ac:
                    67:6b:e5:fd:d6:7a:ae:49:0c:8f:18:a0:50:bf:52:
                    11:23:3b:01:3e:34:86:0d:8d:da:53:96:75:35:05:
                    00:83:7c:b7:c4:09:c7:02:9f:30:e3:12:40:69:03:
                    f0:3f:2f:b6:7c:9d:63:2f:2e:a3:b7:19:10:20:2b:
                    c3:75:d4:69:03:b9:a4:2e:6e:ca:9a:28:fb:e2:d1:
                    88:da:b8:dc:da:51:af:82:e8:0f:13:98:d9:40:1e:
                    1d:62:d9:03:7d:3a:bf:65:05:b2:fd:a4:38:83:f6:
                    85:5d:73:58:19:74:5d:9a:aa:95:2d:06:13:aa:52:
                    59:75:31:de:a6:11:38:c4:c7:80:31:81:72:0b:da:
                    86:0a:46:d4:aa:33:b9:07:28:ab:c9:94:e7:b5:d2:
                    2d:65:5b:ea:99:33:2d:b7:31:02:25:5a:12:a3:22:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C1:C0:2B:BC:A4:D8:53:5C:6B:A8:E8:67:8D:2A:11:3E:A9:E4:CD
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QMHAK7yk2FNca6joZ40qET6p5M0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:65:cc:6d:75:d8:0d:37:f7:54:b5:a9:3b:1a:54:4c:c4:60:
         1e:e5:17:b9:2a:b4:bf:78:ef:d9:c5:1f:da:76:0c:af:b9:b7:
         14:5c:5b:0f:57:16:77:f2:a0:d2:9c:56:b3:b1:e8:ee:d5:1d:
         a6:a7:f5:82:28:bb:f6:a4:da:45:13:15:20:e5:36:5b:5f:7a:
         5b:94:05:0f:c8:4d:ea:2b:d5:de:14:0e:84:68:66:46:04:8d:
         fb:c8:e9:38:a3:f2:1d:f5:2a:16:f3:0e:55:9a:02:06:ef:32:
         af:ea:9b:b4:f3:0d:dc:12:31:64:95:e5:c6:87:9e:c1:f7:fa:
         04:04:c2:6d:1e:3d:5f:37:67:23:d6:0d:be:ee:dc:38:d9:1c:
         a5:7f:82:b6:55:cb:33:43:fb:fa:99:62:5c:ad:f5:ac:ea:bd:
         42:ed:6b:0f:bc:48:dc:42:94:4f:b3:92:62:de:6c:2d:98:1e:
         a2:c7:13:93:77:26:4b:dd:a0:b2:bd:b1:83:92:6e:51:6c:dd:
         f2:fa:7a:ce:71:7d:32:52:76:9b:55:73:ae:c2:d0:d9:22:92:
         38:2b:da:60:56:85:7f:84:22:8c:00:c2:8d:d9:15:28:35:9b:
         d1:d0:c2:c4:c9:da:33:f5:11:98:df:3e:2f:fe:e4:08:4a:13:
         20:14:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:36:35 2025 by rpki-client