Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/rLBquink9VsRT-uwa7QWwjPvPls.roa
File:                     rLBquink9VsRT-uwa7QWwjPvPls.roa (raw, json)
Hash identifier:          plzJf/NOqQwLejq3UcQGiy72dV58pWHI/vyDhiAWDSw=
Subject key identifier:   AC:B0:6A:BA:29:E4:F5:5B:11:4F:EB:B0:6B:B4:16:C2:33:EF:3E:5B
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       3F
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/rLBquink9VsRT-uwa7QWwjPvPls.roa
Signing time:             Tue 01 Jul 2025 01:31:49 +0000
ROA not before:           Tue 01 Jul 2025 01:31:49 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     24259
IP address blocks:        124.110.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Jul  1 01:31:49 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=ACB06ABA29E4F55B114FEBB06BB416C233EF3E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:51:c9:23:cc:6a:d3:64:fd:93:1e:a4:58:
                    dc:be:db:fb:1b:8a:ea:0e:27:9f:2a:7e:4d:4f:6a:
                    2e:eb:06:a9:11:69:0a:63:b2:ea:a9:89:14:af:6c:
                    83:3c:99:44:f4:93:ec:a0:b5:f9:8b:94:81:33:e0:
                    54:35:cb:df:b6:fa:65:c9:40:f5:ba:95:09:05:0c:
                    61:aa:d8:6f:7e:79:02:34:f2:a9:d6:5d:d2:90:d8:
                    db:25:a9:ab:e6:36:ad:77:fb:e3:c6:99:0c:ba:73:
                    f3:25:a9:e1:df:20:ef:bd:22:1b:95:46:83:2b:42:
                    25:1d:5b:70:ec:d9:57:28:c6:44:b6:c5:14:ea:d9:
                    10:e6:4a:9b:b5:6a:46:0d:5a:dc:43:1d:2b:62:27:
                    08:7a:b9:86:64:3a:59:67:3c:12:04:8e:84:49:5e:
                    91:b5:d1:51:06:fd:53:9d:1a:9e:5a:b1:27:46:bc:
                    8f:87:44:6e:ae:92:8a:98:1e:15:57:7a:58:85:e0:
                    ac:f6:38:e7:9c:b5:3c:4f:ea:ec:f1:79:52:8d:f5:
                    8e:d4:6e:e4:0e:bc:14:ea:44:4c:b0:e9:64:30:da:
                    4f:3c:b0:d3:1e:cb:a3:a0:af:ad:68:02:e6:fe:6f:
                    b5:da:08:03:2b:d7:d4:6c:10:af:7c:d2:9a:63:ba:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B0:6A:BA:29:E4:F5:5B:11:4F:EB:B0:6B:B4:16:C2:33:EF:3E:5B
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/rLBquink9VsRT-uwa7QWwjPvPls.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.110.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:0c:08:ff:9f:6e:a7:f4:33:00:c2:ef:9d:79:b3:d3:e2:dc:
         26:4d:75:26:a3:24:8c:c9:77:a9:60:07:cd:da:b9:77:dc:bb:
         c0:82:8a:62:c1:78:df:f1:90:f3:74:a3:65:b3:cc:d4:19:f6:
         f3:aa:b9:fb:d8:d1:36:1e:5d:b7:4d:c6:25:d1:09:46:79:7f:
         97:ea:3e:d6:73:a2:7d:11:24:5a:72:dd:02:25:f9:57:29:ae:
         40:dd:37:23:f8:8d:19:bb:90:4c:e0:55:12:ca:c9:7a:7d:0a:
         3f:0f:ec:4b:95:20:ed:8f:a8:bc:92:72:4e:e5:b6:2f:5f:a4:
         f7:f8:8b:e0:24:d7:7e:34:d7:ff:5b:82:05:08:f8:e5:66:87:
         b0:76:3e:7e:e3:61:26:29:aa:a7:2a:4b:f7:95:1b:76:da:91:
         b4:77:50:5b:58:41:9c:32:02:a7:d3:5b:5e:e2:42:6f:32:9a:
         a7:b1:36:81:2f:c0:aa:d3:4c:5d:13:6e:4d:8e:c4:9e:4d:22:
         de:69:33:94:50:9a:69:8b:26:7e:1b:7e:df:de:57:ee:bb:fc:
         75:50:65:83:1f:f5:7a:f7:fb:9b:1f:c6:12:55:e2:c2:e6:01:
         7b:e3:d6:52:dc:02:c0:12:a5:2e:42:d2:da:f5:6b:f2:05:85:
         60:30:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:04:22 2025 by rpki-client