Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/Xi5o3DopOBkNof2vUkoRgYz-lYk.roa
File:                     Xi5o3DopOBkNof2vUkoRgYz-lYk.roa (raw, json)
Hash identifier:          ogCbq8T/QMgtyy0MU+iZHOHc0tUDDDt0KVSXOPuddps=
Subject key identifier:   5E:2E:68:DC:3A:29:38:19:0D:A1:FD:AF:52:4A:11:81:8C:FE:95:89
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       39
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/Xi5o3DopOBkNof2vUkoRgYz-lYk.roa
Signing time:             Tue 01 Jul 2025 01:32:19 +0000
ROA not before:           Tue 01 Jul 2025 01:32:19 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     17682
IP address blocks:        119.47.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Jul  1 01:32:19 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=5E2E68DC3A2938190DA1FDAF524A11818CFE9589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:2b:fb:42:2a:6c:4b:f0:c7:ec:1e:c5:07:
                    e3:bd:73:ed:4d:28:a2:90:25:36:b6:a5:3b:f3:95:
                    86:c6:4f:f1:ca:52:e8:49:01:6a:26:f4:70:6c:38:
                    b0:51:60:85:bb:76:e8:74:09:85:ba:7f:35:c3:5a:
                    44:d6:06:9a:ad:2b:66:f1:3d:b7:95:3c:84:57:81:
                    9d:b7:96:6d:60:2e:aa:3e:92:ee:bc:6a:66:73:06:
                    2b:f0:12:a6:65:d1:5e:64:20:39:db:64:9c:cd:0b:
                    9c:25:91:53:80:a9:26:9b:0a:95:68:0a:25:4a:a0:
                    a4:28:43:2d:2e:d4:6b:a0:84:12:e6:96:a9:df:c8:
                    83:51:46:4d:c2:53:97:2c:7b:f3:9f:21:da:f3:27:
                    6e:74:80:03:32:7c:cc:9e:64:7c:b3:7a:62:b7:49:
                    fd:59:83:73:f5:ed:e4:52:92:49:a3:0a:8e:d4:65:
                    6a:82:5c:6f:99:a7:4c:3c:75:3a:91:df:06:29:ac:
                    77:53:47:2d:8b:45:72:eb:7b:0d:b8:8a:83:9c:da:
                    e7:3f:9f:9f:1e:eb:f3:a8:99:f7:f5:26:96:2f:b1:
                    38:3d:d0:6f:55:43:ba:b5:72:e2:15:6a:7a:fb:67:
                    20:72:30:f9:27:6f:ff:2b:8f:c8:3d:21:21:17:26:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2E:68:DC:3A:29:38:19:0D:A1:FD:AF:52:4A:11:81:8C:FE:95:89
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/Xi5o3DopOBkNof2vUkoRgYz-lYk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:3b:e7:ad:82:99:c2:a5:03:3d:5d:f8:26:52:eb:8d:8b:66:
         51:7b:04:89:ee:06:0c:9a:ac:34:6d:f1:f2:8e:a7:17:fb:07:
         af:a5:2c:f3:70:cf:bc:27:5a:af:f5:33:7e:42:c2:c4:34:6e:
         59:6f:2a:f4:9e:76:02:b6:4f:5b:f9:9d:24:84:f3:a2:5e:25:
         19:7a:07:6b:11:79:9d:33:b7:74:56:04:22:e6:75:f4:3a:aa:
         37:d1:fb:af:50:56:9b:c3:c2:b8:ec:16:34:ba:c2:84:67:b1:
         41:96:b0:5d:0e:5e:a1:5e:b7:4c:a4:f6:ad:be:98:71:22:06:
         59:28:8c:75:f5:14:76:0e:57:e6:4c:8f:1f:37:cf:32:71:b3:
         a2:4e:80:0b:e1:1b:56:40:2c:69:c0:00:2d:e9:c8:49:cb:db:
         76:2e:94:20:3c:5d:c2:93:21:39:2d:35:05:4e:44:e1:40:49:
         28:e0:28:57:cd:f6:39:ef:79:3b:41:2a:73:1d:73:01:bd:22:
         88:67:33:aa:a0:64:57:8a:a5:ff:b0:36:cc:af:c1:78:c5:40:
         da:92:b1:b1:71:bb:d2:30:ce:de:04:3e:48:3d:00:e8:f4:86:
         59:3f:79:36:26:92:3b:b7:e0:ac:02:2f:d6:28:18:13:4b:09:
         7e:fd:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:37:14 2025 by rpki-client