Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/e9gLAol1q7kBhLRQioZiBJYa_Pg.roa
File:                     e9gLAol1q7kBhLRQioZiBJYa_Pg.roa (raw, json)
Hash identifier:          VAiYbbVv/xkOEytt8h70yV2oPrETc6G1Wd2eM1smgZE=
Subject key identifier:   7B:D8:0B:02:89:75:AB:B9:01:84:B4:50:8A:86:62:04:96:1A:FC:F8
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       80
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/e9gLAol1q7kBhLRQioZiBJYa_Pg.roa
Signing time:             Tue 01 Jul 2025 01:34:33 +0000
ROA not before:           Tue 01 Jul 2025 01:34:33 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        157.65.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Jul  1 01:34:33 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=7BD80B028975ABB90184B4508A866204961AFCF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:84:36:26:77:f1:6b:1a:37:d2:46:63:7a:
                    44:2f:42:c8:41:0f:d1:23:92:82:cb:93:40:d3:d3:
                    4f:6b:54:b1:24:4b:ea:f1:fb:95:23:17:f6:46:c4:
                    2c:f1:b8:4d:60:03:d5:06:4d:9d:2d:8d:9d:88:e6:
                    d1:ba:80:d3:09:ca:1b:13:4c:9c:b2:8b:2a:9d:53:
                    f3:bd:94:a4:73:81:c9:7e:96:51:42:20:dc:5b:31:
                    91:24:2e:df:75:89:61:00:e0:d6:ea:cd:17:97:7e:
                    aa:32:7f:e2:c2:72:3f:97:89:c3:14:d0:61:56:d4:
                    06:6f:c3:07:59:e5:d6:1f:0d:50:a7:15:ae:fa:42:
                    9f:5a:2d:b6:8e:25:ed:47:5e:2d:5b:9d:3d:c7:c9:
                    87:41:c0:21:a7:a1:67:67:88:ab:7a:c1:82:4b:64:
                    fe:a8:ad:dc:93:01:59:98:e4:27:0c:4f:ee:8a:13:
                    86:d3:8b:b0:36:15:e5:e1:2a:e6:38:a1:83:4f:72:
                    e8:1e:5c:71:ac:a6:08:3d:b6:13:d7:b2:15:e1:40:
                    35:66:c2:be:b1:b1:bf:3b:6b:c2:90:09:38:5c:4c:
                    31:30:05:3d:e2:3a:fb:53:9a:e8:15:60:b2:be:cf:
                    d9:f6:31:34:8c:7d:5a:f0:42:4d:76:57:3a:cf:8a:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D8:0B:02:89:75:AB:B9:01:84:B4:50:8A:86:62:04:96:1A:FC:F8
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/e9gLAol1q7kBhLRQioZiBJYa_Pg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ca:a7:f9:b7:5c:02:17:38:95:b8:c5:52:13:a2:75:04:18:ab:
         a2:b7:cc:c8:66:2a:81:e3:d6:f9:22:c8:11:4f:ac:2f:8b:46:
         99:19:2d:91:dd:ee:55:f2:44:d2:72:af:b0:f5:1f:d4:86:78:
         62:47:f8:31:65:ea:9c:89:d4:f1:42:16:9a:53:3d:3b:4a:7c:
         76:d9:1d:63:3e:83:18:a7:f7:71:9c:b5:db:9b:40:c2:7a:59:
         52:1e:77:1e:fa:b8:3e:33:76:ee:40:1d:42:ec:02:b5:ce:c0:
         3e:3a:7d:a8:a3:fb:5b:b5:19:ef:98:89:0a:4b:96:f9:9f:80:
         35:e2:28:61:88:93:67:f8:0e:fc:4c:88:2f:d0:5d:0c:2a:db:
         12:85:b3:ca:4a:f0:f7:f1:b0:cc:b7:b6:70:39:f4:25:b6:28:
         df:b9:de:83:f2:f2:d2:d8:10:f0:50:4c:97:54:f8:b3:0d:2d:
         ac:c8:5a:03:87:9d:af:a3:fa:91:e2:41:b4:c9:d0:8d:54:92:
         68:9d:d8:1b:de:75:f6:17:a5:9f:5c:75:78:b1:fe:a1:bd:e4:
         af:67:7e:a3:46:07:7e:37:66:e5:2d:17:4c:82:a7:69:81:8b:
         39:ed:e8:8b:5e:fe:f9:f0:79:0f:d3:a0:a0:af:df:4c:99:7d:
         6a:8e:04:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:40:50 2025 by rpki-client