Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/kAx61L_Kh192SVTt_B0gFTSe7Zk.roa
File:                     kAx61L_Kh192SVTt_B0gFTSe7Zk.roa (raw, json)
Hash identifier:          5uCuSATvMYWwKA/vLl+PnvcJlga3PWwcXF+zwdheeas=
Subject key identifier:   90:0C:7A:D4:BF:CA:87:5F:76:49:54:ED:FC:1D:20:15:34:9E:ED:99
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       30
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/kAx61L_Kh192SVTt_B0gFTSe7Zk.roa
Signing time:             Tue 01 Jul 2025 01:31:38 +0000
ROA not before:           Tue 01 Jul 2025 01:31:38 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     23791
IP address blocks:        124.246.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Jul  1 01:31:38 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=900C7AD4BFCA875F764954EDFC1D2015349EED99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:3b:79:d9:65:12:6c:90:d5:1b:77:77:9d:
                    1f:fc:9a:15:86:c8:a9:a2:e7:23:71:15:36:20:60:
                    24:65:5f:00:2d:86:bd:95:de:82:12:bf:47:b9:e4:
                    e5:a2:7a:5c:e9:d9:5a:93:34:d6:88:7d:09:c9:95:
                    da:c8:00:8a:6e:b6:63:b1:02:b7:1a:cd:92:3d:a5:
                    fd:a9:cb:3c:76:0d:98:e3:e8:2d:b9:99:21:31:08:
                    80:c7:06:06:b7:48:e1:f0:1b:34:71:05:ea:f3:17:
                    64:bf:5d:04:cd:b6:cb:ac:24:d2:3c:6b:89:74:87:
                    8d:60:8e:de:6d:78:af:9f:2f:d2:d0:c3:36:fe:21:
                    05:e3:ce:fa:36:24:38:ee:55:6c:60:f4:e6:28:29:
                    d7:b0:4e:2a:e1:05:71:de:a9:ba:c3:71:42:21:e9:
                    5e:f9:ec:28:bc:3a:8f:bb:83:67:40:66:5c:11:04:
                    6b:9c:f8:62:7a:5b:5e:1d:5e:d5:11:31:4e:b2:e4:
                    b1:0a:f3:a1:2e:4e:15:80:ff:28:2a:d9:77:0a:6c:
                    4c:2b:95:18:17:1f:86:8e:e9:f2:91:db:43:53:11:
                    c0:a3:97:64:b2:2a:f0:9c:c8:87:cb:73:9f:e3:82:
                    cc:e0:ed:38:62:bd:47:35:28:ce:b8:96:2e:d8:80:
                    42:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0C:7A:D4:BF:CA:87:5F:76:49:54:ED:FC:1D:20:15:34:9E:ED:99
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/kAx61L_Kh192SVTt_B0gFTSe7Zk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.246.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b3:e1:bc:4d:59:ae:0f:2f:32:28:e3:37:0c:53:d8:8f:0e:60:
         3f:0e:d0:fa:7e:5f:e1:0b:ec:b9:2f:28:7c:47:1b:68:b3:20:
         cb:d6:5d:82:84:18:e0:0b:fa:a1:31:36:ab:01:08:0c:b7:24:
         bd:2f:6e:42:cf:62:58:dd:63:4c:e7:a9:cd:bf:5f:5f:9b:24:
         d2:51:e9:7f:b2:f4:68:c0:e4:bf:ef:88:ee:35:55:f0:8a:59:
         9b:b3:8a:7d:95:b4:65:ea:de:63:df:80:a2:81:2e:28:3e:6f:
         e4:1f:74:9f:5e:9a:de:2c:f0:a1:f0:a0:a5:95:cd:23:c4:d0:
         ca:8c:fc:ee:8a:16:b9:71:dd:68:9b:62:55:bb:a3:8b:e3:7e:
         f7:27:a7:83:34:84:f0:0b:15:06:d2:f9:29:8a:aa:f9:a9:61:
         41:63:d3:f1:10:48:fc:60:08:3f:c4:1b:b9:d6:80:c9:62:13:
         22:12:8a:7c:fe:cd:08:88:5a:f1:e7:0f:77:9e:c8:b6:2f:cc:
         66:49:3f:0d:ab:31:2d:74:20:99:60:54:bd:30:1d:8f:a2:8b:
         fe:e9:f3:56:7d:5c:05:5e:8a:da:ed:05:82:3a:0f:10:95:95:
         7b:ee:36:67:bd:6c:67:9b:e3:bb:3b:02:c9:75:b3:70:60:87:
         84:cb:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:33:35 2025 by rpki-client