Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/fLuvH8jF6O0PEQNS927oj3LgV8s.roa
File:                     fLuvH8jF6O0PEQNS927oj3LgV8s.roa (raw, json)
Hash identifier:          YL1EpSrGla15/MZXm7GVuO4+L0cDBajuHz+hF8I4qZk=
Subject key identifier:   7C:BB:AF:1F:C8:C5:E8:ED:0F:11:03:52:F7:6E:E8:8F:72:E0:57:CB
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01C9
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/fLuvH8jF6O0PEQNS927oj3LgV8s.roa
Signing time:             Tue 01 Jul 2025 01:42:22 +0000
ROA not before:           Tue 01 Jul 2025 01:42:22 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        58.138.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:42:22 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=7CBBAF1FC8C5E8ED0F110352F76EE88F72E057CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:09:da:c2:89:37:ce:e7:3d:ae:73:aa:41:94:
                    a3:f0:3e:d6:0e:67:5a:3c:0a:86:40:38:59:3a:31:
                    ed:02:a7:45:4e:77:fe:49:c7:f4:68:3f:87:1e:36:
                    4d:ab:56:99:4e:bb:73:1f:3b:88:a6:e1:3c:b9:08:
                    8d:b2:92:f6:f7:ce:74:b4:c7:d9:0b:ce:f8:b5:db:
                    b7:25:c1:29:72:13:23:44:ab:da:5c:dc:9a:be:71:
                    b6:1c:c9:74:88:f7:d1:ea:fb:f8:ee:84:ba:c0:aa:
                    c0:d3:91:e0:55:f3:f2:37:06:5b:7f:96:14:0f:26:
                    13:9e:ff:e1:04:79:5d:15:22:3c:ab:72:29:90:13:
                    0a:3a:8e:12:c9:eb:5d:73:27:42:06:10:ef:7a:44:
                    00:b9:5d:f6:83:56:b5:39:a0:29:0c:a9:c9:48:38:
                    98:c3:fb:b6:83:7e:e7:dc:e1:9f:46:fb:c5:58:f5:
                    e6:36:83:1f:23:f4:c6:4a:d5:33:d8:4b:8e:67:e8:
                    ab:07:7f:1f:fd:76:ed:31:10:ec:be:31:bd:91:30:
                    4a:7d:c7:6e:50:12:5e:db:c5:18:90:c7:c7:d6:5f:
                    d6:b1:af:41:f1:7e:a7:31:0c:dc:1e:f1:5a:29:99:
                    9e:0e:f8:dc:1e:c9:85:22:41:eb:64:37:46:23:0a:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BB:AF:1F:C8:C5:E8:ED:0F:11:03:52:F7:6E:E8:8F:72:E0:57:CB
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/fLuvH8jF6O0PEQNS927oj3LgV8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.138.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:47:b6:c4:65:73:73:ad:74:81:68:fb:b5:1d:a4:3d:7e:1d:
         23:96:d1:fd:44:ad:20:a1:d7:67:d5:9e:c3:06:0f:3b:11:8c:
         60:8c:24:dd:57:25:37:e8:20:cf:aa:f7:34:5f:1a:44:18:f5:
         e6:e1:db:c9:cc:a0:90:b8:fd:7c:44:75:9c:f2:dc:e9:51:d8:
         9f:a7:1d:ff:01:e4:59:3c:83:28:c3:27:0f:52:69:a1:b4:9f:
         72:29:de:65:fd:33:47:07:57:ba:fe:b1:be:e3:45:39:40:28:
         21:c8:32:35:61:18:ad:dd:02:49:57:80:b0:75:88:82:e7:8f:
         de:6c:c5:3a:8b:1b:b2:15:33:5a:82:1e:29:50:99:79:90:c3:
         e2:45:ef:f0:a6:2f:48:b7:0c:9c:e9:40:2e:c3:a6:74:a4:e9:
         26:e4:fd:ce:18:7b:38:3d:fd:9b:ea:59:3f:f6:37:be:4c:19:
         00:02:42:96:da:66:68:a3:0f:65:05:44:09:28:72:4e:5c:35:
         db:a8:d5:0f:c5:9b:8e:08:84:f7:10:43:a9:9f:11:97:33:a0:
         65:79:55:62:73:be:24:2c:d5:e6:54:0d:10:8b:fe:c0:6b:d8:
         74:6a:1b:b1:ad:60:e4:6f:1d:8a:70:f9:38:56:10:54:58:5a:
         4e:70:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:26:18 2025 by rpki-client