Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/l47CTmJ8ViV4xLwhnQ7Yhi9gb-g.roa
File:                     l47CTmJ8ViV4xLwhnQ7Yhi9gb-g.roa (raw, json)
Hash identifier:          3JEF1/ixV8A9r/Pla+qK0XcODmd9LcMDb5iVl3DwxiQ=
Subject key identifier:   97:8E:C2:4E:62:7C:56:25:78:C4:BC:21:9D:0E:D8:86:2F:60:6F:E8
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01B9
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/l47CTmJ8ViV4xLwhnQ7Yhi9gb-g.roa
Signing time:             Tue 01 Jul 2025 01:34:37 +0000
ROA not before:           Tue 01 Jul 2025 01:34:37 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        49.239.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:34:37 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=978EC24E627C562578C4BC219D0ED8862F606FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:b0:e0:52:ec:f1:5e:27:71:cd:bb:00:0d:
                    4f:65:64:6a:04:2d:a1:8c:41:ca:55:0b:6b:e2:ca:
                    89:c5:e1:6e:3a:a5:68:b7:d3:04:d7:3d:73:88:c7:
                    90:7c:43:1f:b2:f3:c0:cc:b9:7f:96:03:bf:49:b6:
                    5e:af:64:fe:af:6c:84:90:60:14:57:23:f4:3f:20:
                    fb:5e:09:cf:91:7b:e2:fd:96:e8:63:81:39:b0:3b:
                    ef:5e:48:07:c3:f9:cf:66:67:2b:98:b3:99:51:07:
                    bb:2e:30:48:1f:55:ff:8f:4a:ee:ab:40:d9:ab:8b:
                    24:b9:cd:9f:ee:90:b9:7b:9c:70:15:80:7a:ae:90:
                    80:e0:51:04:19:ff:74:47:0a:6f:30:4d:5f:6e:6a:
                    28:64:45:62:a8:2a:b9:41:98:38:23:da:38:eb:9e:
                    ef:11:e4:34:7e:60:8f:a3:25:d6:65:0a:84:0f:8c:
                    25:0b:09:e4:69:d6:c9:b0:65:f7:34:d2:d2:a3:26:
                    a6:78:fe:a5:a3:da:22:7f:8c:2c:b7:02:5c:ec:a2:
                    bc:a6:bc:43:32:bf:d5:4c:d3:70:a0:83:c1:52:4a:
                    cf:9c:96:ef:86:84:07:95:12:1e:fe:10:ca:3e:f0:
                    00:83:c0:6e:40:17:69:04:f4:03:33:54:55:b3:80:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8E:C2:4E:62:7C:56:25:78:C4:BC:21:9D:0E:D8:86:2F:60:6F:E8
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/l47CTmJ8ViV4xLwhnQ7Yhi9gb-g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.239.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7d:67:c5:14:0a:8b:69:a9:f9:a8:6b:37:31:eb:0e:21:86:cd:
         64:42:04:36:2a:f6:c5:3b:d5:c2:0b:57:83:22:8c:e7:92:57:
         db:d1:78:cc:ce:16:31:62:a3:d2:50:85:f8:4b:40:6a:af:46:
         96:d7:7e:cd:de:19:9c:ae:2e:93:c1:41:b4:4d:47:44:cb:6a:
         3d:43:45:86:5a:10:95:30:ef:59:4f:17:b2:ec:44:5f:66:bd:
         e9:93:73:6e:e2:f4:b5:e2:3f:bf:74:42:97:92:93:b4:7d:05:
         c4:30:37:dc:4c:8a:f9:91:64:c6:d5:b7:49:48:17:76:60:5a:
         db:0c:94:9b:68:20:27:3e:d8:c5:d6:c2:64:32:fb:ba:69:66:
         59:7f:3d:b8:45:bf:12:e4:1a:9b:ff:e8:35:04:27:6a:e6:f4:
         7a:96:8d:7f:30:76:9f:f5:b6:c5:15:08:f5:3d:af:9e:4f:20:
         8a:9d:a7:5f:0a:87:f4:02:90:b9:e2:7f:b3:77:59:94:73:4e:
         cb:0e:9d:db:17:53:e7:b9:ba:bf:23:8d:82:bc:0f:26:ac:2e:
         63:04:ad:de:4e:c4:a7:c8:c6:47:ef:b1:cc:c0:43:3c:e1:57:
         5d:e5:c5:ed:02:0d:09:14:2c:25:28:f5:1a:b9:a2:8f:4c:c1:
         43:5f:d0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:07:13 2025 by rpki-client