Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/nix7E5wyrqDb8kDxIkqPYfEF6Ss.roa
File:                     nix7E5wyrqDb8kDxIkqPYfEF6Ss.roa (raw, json)
Hash identifier:          4KWGscvLolOB2SFUE6Kg53UA+ANWZ8PdFhfFtOwZrZI=
Subject key identifier:   9E:2C:7B:13:9C:32:AE:A0:DB:F2:40:F1:22:4A:8F:61:F1:05:E9:2B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01D8
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/nix7E5wyrqDb8kDxIkqPYfEF6Ss.roa
Signing time:             Tue 01 Jul 2025 01:42:30 +0000
ROA not before:           Tue 01 Jul 2025 01:42:30 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        219.111.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:42:30 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=9E2C7B139C32AEA0DBF240F1224A8F61F105E92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:a1:9b:a8:fa:68:3f:14:9b:97:72:02:0f:
                    bf:8c:06:8d:fd:8b:da:9e:02:e1:ee:9a:6b:ed:9c:
                    4c:b0:b3:37:16:c1:83:fc:65:a4:3a:a5:57:e8:e1:
                    6a:98:2f:2e:92:98:db:ba:d8:59:2b:6d:47:12:e9:
                    58:75:8b:7e:54:db:06:36:a1:8c:12:71:8d:ef:07:
                    73:7e:0c:e2:73:21:b2:65:24:70:aa:5c:93:4c:c3:
                    ac:48:e0:72:48:05:40:79:80:b3:2c:be:7c:e8:37:
                    07:dc:42:e2:f8:f5:66:bc:d0:8e:f6:53:60:b0:a9:
                    23:41:db:04:10:65:0e:99:11:bb:c9:f5:d3:44:ca:
                    87:a2:e7:2d:98:21:3f:5f:1a:d1:c4:e3:f4:50:6b:
                    2a:4b:bf:6d:d0:30:5f:2c:b4:71:27:b5:6e:7a:91:
                    57:9a:a7:fd:05:6d:03:99:b6:89:d9:90:9f:c5:bc:
                    13:f6:3d:81:5b:f8:d8:b2:b0:94:e1:5a:4a:11:6a:
                    db:8e:34:63:58:29:ae:cf:1f:9c:b1:92:f2:e6:80:
                    cd:bf:c6:b9:a7:93:1d:41:07:94:b3:48:da:9d:29:
                    6b:1a:66:7b:9a:cc:32:80:9c:85:96:0c:36:8f:8d:
                    ee:ef:c4:9b:f6:f6:e4:f9:10:bb:0d:d1:45:e1:b9:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2C:7B:13:9C:32:AE:A0:DB:F2:40:F1:22:4A:8F:61:F1:05:E9:2B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/nix7E5wyrqDb8kDxIkqPYfEF6Ss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:f6:54:48:c9:40:70:01:fc:bd:a7:0c:4f:7c:4d:59:09:
         16:da:4f:5b:8f:ad:11:a0:7c:96:c1:ef:6e:04:eb:51:d5:3f:
         ec:55:70:cc:a7:20:62:a8:fb:c8:ab:f6:64:c2:b9:49:b0:ee:
         d4:d0:ec:a9:03:56:ed:45:91:f0:af:20:72:be:eb:24:97:83:
         ad:ad:82:e7:04:7e:a4:61:f9:65:fe:57:43:63:17:27:eb:ba:
         6e:17:71:28:47:54:09:c0:e3:69:05:e2:92:27:8d:97:23:5c:
         72:6a:fa:92:59:18:7c:00:28:ab:8f:3e:1f:51:41:dd:78:83:
         fc:b3:72:18:3f:a1:bc:82:15:ca:d5:af:f6:31:50:ef:38:73:
         ca:78:39:93:26:be:b9:21:3a:cf:df:ee:24:3b:49:32:f3:a6:
         55:13:16:4e:4a:7b:85:a2:6f:db:4c:57:aa:de:16:e6:92:a6:
         37:a3:14:41:4c:c5:d6:6a:5e:53:a6:ba:19:13:74:b0:35:88:
         e8:57:13:af:ff:67:f2:5f:cc:4c:a9:d2:70:34:58:a5:64:83:
         5d:14:28:6f:9c:4b:6a:d2:2f:e4:87:df:1b:1c:79:a6:1c:d5:
         03:f4:5f:6b:36:d5:7b:bd:79:7a:98:d8:30:3a:06:be:1f:05:
         8c:ed:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:16:21 2025 by rpki-client