Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/iXVBtdx_iCjReeU9-69WCc-tEeo.roa
File:                     iXVBtdx_iCjReeU9-69WCc-tEeo.roa (raw, json)
Hash identifier:          Masm6f5ljD0V21CcnPgZezBSKqYewLA3gTkWej19WxI=
Subject key identifier:   89:75:41:B5:DC:7F:88:28:D1:79:E5:3D:FB:AF:56:09:CF:AD:11:EA
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       49
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/iXVBtdx_iCjReeU9-69WCc-tEeo.roa
Signing time:             Tue 05 Aug 2025 01:13:07 +0000
ROA not before:           Tue 05 Aug 2025 01:13:07 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     138384
IP address blocks:        110.165.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Aug  5 01:13:07 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=897541B5DC7F8828D179E53DFBAF5609CFAD11EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:e5:63:dd:fe:c4:11:76:c4:df:ff:f9:7c:
                    57:c2:f2:20:e1:8b:92:a3:b4:2a:29:71:54:5b:7c:
                    3f:86:4b:6d:9b:7a:0a:e2:2b:23:09:b4:93:34:c4:
                    46:e4:76:46:a0:f6:2d:b1:23:d0:7d:c5:01:b0:72:
                    81:04:ba:6e:eb:2f:8f:9f:da:2b:79:6b:d0:3d:98:
                    31:6a:7e:c3:34:c9:40:99:c2:c1:5f:36:a4:5f:a4:
                    e3:bd:32:2f:0b:01:5e:e5:7b:68:9c:41:84:42:29:
                    11:9d:20:da:39:7f:e4:4f:41:44:86:ef:88:8c:2f:
                    89:27:03:38:01:38:56:8b:81:4e:9f:63:89:fa:ae:
                    26:76:a2:a4:d3:1a:d8:81:07:92:41:28:ff:bb:fb:
                    c8:54:12:a2:1b:3a:b0:cb:1b:78:d3:e8:18:f8:e6:
                    64:c8:de:1a:c3:3d:4f:ae:8e:02:b5:bc:f8:31:c0:
                    ee:3e:2f:c9:84:8d:ca:16:29:bb:58:fc:9a:e8:2b:
                    f9:8a:7c:49:38:86:ee:2a:08:52:a7:76:bb:d1:ca:
                    a5:36:8b:3d:fb:39:91:30:60:64:97:55:4f:57:a0:
                    db:d1:d8:1b:fe:ed:01:bd:6a:31:d5:c1:6f:41:10:
                    62:db:04:4e:05:a4:d4:60:8d:ec:e7:bf:d2:40:3a:
                    3a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:75:41:B5:DC:7F:88:28:D1:79:E5:3D:FB:AF:56:09:CF:AD:11:EA
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/iXVBtdx_iCjReeU9-69WCc-tEeo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.165.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b0:8a:86:d2:e6:49:95:be:90:f3:4a:c6:e5:ef:fa:ba:b4:24:
         e0:5c:3f:87:06:07:06:04:a4:70:a1:bd:a0:0a:4b:f7:03:8b:
         b1:72:74:77:26:9f:0e:70:78:e6:9f:61:47:d8:55:d5:a0:71:
         71:70:6c:c3:3a:2d:bd:ba:d9:84:9c:29:0f:84:dc:a6:9d:2f:
         9f:d9:77:a5:ce:f6:1e:f4:32:3b:33:2d:2f:79:67:0a:a3:10:
         1f:2e:d5:1e:54:c0:19:ea:b3:92:04:24:dd:20:68:5c:90:d5:
         64:40:4b:af:6f:4f:a2:df:e8:d2:55:ee:c6:b4:f6:ff:c4:d5:
         59:50:72:5c:d4:73:05:a8:3a:0f:70:52:05:cd:55:ff:90:f2:
         cf:0c:ab:10:5d:de:24:df:a6:50:fa:8b:2a:25:74:9c:fc:76:
         37:fa:a6:6b:63:38:3e:e9:57:63:8c:e5:1c:10:16:01:61:47:
         c5:da:9b:7e:2a:c3:85:04:21:d1:4d:f7:cc:2e:fc:95:9c:44:
         10:9e:98:d2:fd:ac:dd:df:c0:39:40:74:75:70:84:7b:3e:8a:
         5c:fd:f8:ae:cb:7e:31:01:06:e7:de:ff:b0:7c:68:74:04:45:
         a6:f4:6d:65:a7:39:aa:26:38:22:f3:77:71:90:8a:62:ba:a9:
         f6:ea:c2:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:14:03 2025 by rpki-client