Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/LuQGyZfWR65s57U0yQlEJSmcuj0.roa
File:                     LuQGyZfWR65s57U0yQlEJSmcuj0.roa (raw, json)
Hash identifier:          zscNJolDTe9pGnAuiihGkAX/icR1kbyXN/t3rYysNts=
Subject key identifier:   2E:E4:06:C9:97:D6:47:AE:6C:E7:B5:34:C9:09:44:25:29:9C:BA:3D
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       35
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/LuQGyZfWR65s57U0yQlEJSmcuj0.roa
Signing time:             Tue 01 Jul 2025 01:32:17 +0000
ROA not before:           Tue 01 Jul 2025 01:32:17 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     17682
IP address blocks:        218.40.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Jul  1 01:32:17 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=2EE406C997D647AE6CE7B534C9094425299CBA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:a9:77:be:ff:47:ec:1c:88:2b:40:38:9e:
                    04:f6:7a:6b:ac:e6:60:b4:01:ca:b1:f1:79:7e:35:
                    56:04:59:9c:31:08:3c:f9:8c:12:78:9a:2f:53:a9:
                    8b:04:3e:71:99:26:84:19:07:5b:05:ca:f1:a5:3c:
                    62:e8:ca:e1:b1:23:40:89:5a:d1:41:3e:47:cc:6e:
                    99:1b:ea:9c:06:be:c9:6e:c9:15:01:c6:66:cd:f0:
                    57:bf:ad:44:cb:96:6f:c0:0f:b6:83:7d:7c:e0:11:
                    a6:4b:a4:6f:10:b7:b5:7e:1b:10:5d:a5:8b:db:23:
                    13:3a:5e:c3:c2:4e:2c:85:b4:fe:0e:a8:c6:01:38:
                    a7:1e:0f:29:a0:e3:79:bc:00:1e:f8:3e:1c:8c:ad:
                    b8:93:ed:04:70:89:12:f1:65:0b:35:4d:4e:6c:2e:
                    6f:61:cb:7b:dd:e7:60:09:39:2c:02:e1:84:c2:0e:
                    31:dc:b7:20:2b:e7:8b:ca:0d:43:6b:df:fa:da:98:
                    89:13:b3:5e:a8:a8:14:8f:4e:c7:c6:55:9b:ec:3b:
                    98:bd:7b:c0:b9:72:9d:fa:ff:25:8a:fb:6e:f2:b7:
                    05:7a:fe:d1:fe:67:e8:8f:4d:26:f6:64:03:74:7b:
                    5d:40:74:a5:73:b3:60:9a:17:f3:75:42:5d:3f:3d:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E4:06:C9:97:D6:47:AE:6C:E7:B5:34:C9:09:44:25:29:9C:BA:3D
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/LuQGyZfWR65s57U0yQlEJSmcuj0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:2b:14:d5:ca:66:53:3d:91:83:f8:84:37:37:ec:dc:5f:6c:
         13:f3:46:bb:17:a4:cd:90:cb:a7:4e:ac:08:3b:eb:81:3f:80:
         d6:54:db:b4:f6:cc:ad:d1:8d:b3:af:3a:a3:ad:08:84:86:d5:
         88:a3:c4:e7:57:01:80:0a:52:5b:98:ff:34:e2:a8:f1:7f:07:
         2c:d2:a8:34:b7:88:41:56:a6:93:d9:2d:78:52:17:09:8a:b7:
         0f:06:b9:bb:da:1a:49:11:a1:5c:27:e1:42:f5:a4:48:f9:d2:
         30:79:9e:ce:cd:61:6d:88:65:53:a2:dd:1e:48:5e:3d:a6:cf:
         d6:d1:91:4c:46:e3:5b:ed:df:0d:b1:b5:be:51:19:78:45:12:
         46:24:fa:c8:2b:56:ac:e4:d7:a0:c0:d3:01:7c:c0:82:97:ec:
         7c:ca:08:72:c7:a5:a2:79:8f:7d:be:d7:0f:c6:ea:91:a2:cf:
         c3:68:8e:b8:b0:7b:db:90:39:a4:98:e9:10:94:8d:a3:69:fd:
         d3:c3:7e:d9:94:f9:ae:db:b0:a4:84:0f:6b:3e:73:93:05:c8:
         12:68:ee:99:0d:63:43:a0:4c:a3:03:c4:86:c2:16:d1:ec:3e:
         2c:b1:28:15:14:02:03:7a:fd:79:bf:5f:d4:72:80:5a:06:f3:
         1d:b3:aa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:55:33 2025 by rpki-client