Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/Fj3jKkFUjwcQmYfuogRegPn15Lk.roa
File:                     Fj3jKkFUjwcQmYfuogRegPn15Lk.roa (raw, json)
Hash identifier:          5BxQq9oP+kAsPkyZSKnGIVrVSvPrU/phdByNPhjDtro=
Subject key identifier:   16:3D:E3:2A:41:54:8F:07:10:99:87:EE:A2:04:5E:80:F9:F5:E4:B9
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       46
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/Fj3jKkFUjwcQmYfuogRegPn15Lk.roa
Signing time:             Tue 01 Jul 2025 01:40:21 +0000
ROA not before:           Tue 01 Jul 2025 01:40:21 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     23618
IP address blocks:        150.9.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Jul  1 01:40:21 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=163DE32A41548F07109987EEA2045E80F9F5E4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:f2:14:55:23:49:3a:b8:43:cd:77:fd:9f:
                    9b:ae:d5:87:dd:29:75:8a:2f:b2:02:92:60:e2:e6:
                    28:51:76:5b:17:a1:ab:b7:e0:09:16:de:f8:1d:16:
                    7c:14:24:7b:ff:37:de:df:97:b6:6f:34:c5:1f:e5:
                    e1:8c:82:85:15:9d:ba:55:8b:2f:11:c8:50:3a:e6:
                    8c:fe:3a:e1:00:95:64:e1:da:4c:e0:96:97:13:f1:
                    f6:8e:63:21:f6:44:18:0e:ad:91:ab:a7:19:71:6e:
                    e6:b6:76:f6:35:89:dd:b3:88:e8:20:84:6d:c9:46:
                    90:8c:e1:af:cc:ac:00:af:c0:ca:25:aa:53:71:9b:
                    0b:a2:cf:8b:41:09:31:d5:a3:08:1c:5a:bf:4f:1b:
                    55:54:64:fc:3e:8d:f4:2c:bf:d4:3c:2a:2a:cb:5b:
                    a9:e7:9e:12:08:e0:6a:91:31:ff:9a:0c:5c:9e:e2:
                    6f:bf:74:a1:ef:7f:9e:a7:12:e1:c0:92:39:ea:78:
                    cd:b5:79:14:be:7d:55:da:d4:c5:89:3e:d4:1c:f4:
                    b8:fe:ed:5d:bb:a0:c2:8f:f7:de:6e:85:4e:6a:91:
                    8f:ab:75:94:c8:32:02:e1:3f:17:d7:68:62:31:6e:
                    91:ed:ec:65:44:60:15:bb:4a:e2:4c:22:18:f9:76:
                    19:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3D:E3:2A:41:54:8F:07:10:99:87:EE:A2:04:5E:80:F9:F5:E4:B9
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/Fj3jKkFUjwcQmYfuogRegPn15Lk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:3c:35:e1:c9:17:8d:b9:f9:b5:63:6e:ca:ff:84:77:c3:1c:
         23:1b:83:f9:df:cc:61:6e:78:73:ca:1c:79:d3:55:e9:dd:54:
         b5:6c:96:e0:30:51:0f:1a:56:a6:bc:7f:7c:78:34:3a:a0:9a:
         6f:a6:1f:59:9b:73:20:9a:d7:a8:bf:52:d2:4a:7d:c9:8b:f7:
         53:20:62:19:8d:6f:44:13:04:f0:04:71:3a:1c:c7:56:95:0d:
         9d:bc:03:f4:03:16:6b:36:e0:98:c5:51:6f:36:ba:46:9f:cd:
         db:bf:e2:1b:ce:e6:0b:18:b5:1a:b5:0c:30:73:c0:2c:93:27:
         8f:36:c6:c9:d4:ae:26:aa:e5:ff:ff:9e:b2:7a:bc:b8:b2:0d:
         e1:37:2f:9f:80:d6:64:ec:37:a5:49:7c:8a:c8:11:ec:00:ba:
         9b:66:dc:24:22:3c:35:54:29:b1:f6:c0:00:d6:8c:86:2b:72:
         6f:08:8a:3c:b5:bb:0c:a2:6e:3c:ff:65:6e:5a:ca:67:c6:9a:
         0e:1a:98:c6:2b:b7:a9:cf:a6:21:0e:00:a0:65:88:6e:0f:60:
         c3:56:76:97:1f:4d:dd:ac:14:7c:22:80:ab:f3:33:65:6b:4a:
         fd:e2:ae:65:7b:75:bd:82:f5:82:66:c1:be:63:56:ce:b6:02:
         a5:a5:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:40:07 2025 by rpki-client