Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/VIrBq4j-8zLWaP-Q2csUye2h9qA.roa
File:                     VIrBq4j-8zLWaP-Q2csUye2h9qA.roa (raw, json)
Hash identifier:          6ecd2sP38MQYCkMAJs4tR19Bp+PBbtOgxyihcSmF648=
Subject key identifier:   54:8A:C1:AB:88:FE:F3:32:D6:68:FF:90:D9:CB:14:C9:ED:A1:F6:A0
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01BD
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/VIrBq4j-8zLWaP-Q2csUye2h9qA.roa
Signing time:             Tue 01 Jul 2025 01:34:39 +0000
ROA not before:           Tue 01 Jul 2025 01:34:39 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        113.197.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:34:39 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=548AC1AB88FEF332D668FF90D9CB14C9EDA1F6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:03:51:7e:ed:ad:e5:f6:04:8c:7b:fe:e7:
                    cb:58:5b:e4:80:b3:c6:35:f5:76:4f:c9:7d:53:d0:
                    1b:b3:70:51:d8:4e:b2:a7:25:17:76:fb:8d:11:d2:
                    08:70:ca:30:03:68:0c:e9:11:a2:b6:58:c1:a3:c7:
                    71:6c:75:39:90:26:95:a9:1f:7c:d0:61:07:62:5c:
                    37:91:46:0d:b3:94:3c:45:f9:e1:10:53:90:1d:a1:
                    27:0b:04:af:73:a9:ad:c1:ee:b7:24:80:dd:04:1d:
                    0e:18:04:3b:bd:5e:2e:6c:a5:1a:73:fc:5e:c4:2f:
                    15:b3:cd:4e:a2:cd:69:74:30:ec:71:05:5d:1e:d3:
                    8f:2f:6a:cf:e2:45:ba:72:ee:89:36:25:e4:30:a8:
                    f2:ab:94:8c:e3:ba:a4:c5:c8:a7:4e:13:5c:85:b9:
                    f5:8d:4a:2c:be:77:ac:30:53:d9:6f:01:e3:93:54:
                    75:55:7e:cf:90:68:36:60:ef:4d:5c:36:fe:c2:03:
                    0a:a5:15:8b:d1:ff:3e:a3:ff:12:38:41:5f:b6:de:
                    a1:cf:51:66:23:c6:1d:29:e2:04:b6:44:c3:49:cb:
                    3c:d1:74:1b:60:d9:aa:d3:23:ad:65:1f:c7:19:2e:
                    d0:22:c2:04:04:51:99:3e:01:fc:e8:26:bc:f4:8c:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8A:C1:AB:88:FE:F3:32:D6:68:FF:90:D9:CB:14:C9:ED:A1:F6:A0
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/VIrBq4j-8zLWaP-Q2csUye2h9qA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         72:ea:16:30:df:9e:21:be:eb:91:83:42:4b:b6:d0:79:3b:23:
         10:96:15:71:e4:f5:45:08:a8:7b:7d:b9:74:1b:5a:ee:2d:5d:
         4c:16:1e:15:f0:43:32:a9:c3:bb:f2:32:6a:c9:2f:18:9c:02:
         3b:b0:c4:2a:1c:39:8c:82:28:3e:f2:d3:d2:61:e4:1b:5f:92:
         3a:12:7b:6f:b6:6c:6e:5e:12:f6:d4:e9:4e:ef:0e:ae:c2:e2:
         6e:2c:a2:4f:38:5a:b2:f5:c1:98:e9:57:29:cc:53:67:eb:94:
         6d:82:be:46:84:6b:53:57:29:b6:c9:2e:ec:9a:b8:07:2a:c9:
         73:dc:d9:b8:eb:67:4b:ae:d5:92:e3:88:02:c6:7c:ef:00:fa:
         d2:f0:23:8f:2d:66:57:9b:5f:92:8b:81:a1:8d:e5:2f:3f:2e:
         97:50:52:cf:8a:66:ca:80:33:8e:de:21:9c:36:b4:59:95:3d:
         e5:5d:86:1b:93:25:1c:6f:38:30:a8:43:a2:3e:4e:3d:64:12:
         03:b8:d8:0a:ab:d9:95:f4:18:0e:24:dc:a9:c1:a6:36:f5:e1:
         ea:69:40:56:ed:7b:00:54:2d:d9:a5:68:9d:6b:68:6c:62:b9:
         eb:6f:a2:9c:7f:d0:5a:c7:fd:f5:13:01:22:e6:e6:59:5b:39:
         f1:ca:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:22:09 2025 by rpki-client