Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/k5QofJJwV-S1MOsFI_H9RrDFRsg.roa
File:                     k5QofJJwV-S1MOsFI_H9RrDFRsg.roa (raw, json)
Hash identifier:          bSIH0RdH/4WhanTo5p18fl02gUjlgQn49cizeOjVo4A=
Subject key identifier:   93:94:28:7C:92:70:57:E4:B5:30:EB:05:23:F1:FD:46:B0:C5:46:C8
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       D0
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/k5QofJJwV-S1MOsFI_H9RrDFRsg.roa
Signing time:             Tue 10 Jun 2025 10:50:38 +0000
ROA not before:           Tue 10 Jun 2025 10:50:38 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     4913
IP address blocks:        61.200.83.144/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Jun 10 10:50:38 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=9394287C927057E4B530EB0523F1FD46B0C546C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0e:39:4d:a8:49:b8:9c:78:e5:88:c1:f1:89:
                    03:9a:59:af:b7:e9:ff:46:54:f8:45:86:d8:3b:bc:
                    91:31:e7:76:79:ea:05:2d:00:f1:e7:e2:3f:78:f7:
                    a9:99:b3:be:b7:e2:fb:a0:a3:5d:f8:5a:d4:62:58:
                    4a:0a:e1:d6:bc:5c:bd:79:64:03:82:95:5b:95:df:
                    ac:03:1f:b1:ce:f7:d5:3b:42:61:85:6b:3e:9d:cb:
                    39:92:b2:3a:63:ef:32:00:48:cf:84:88:be:35:55:
                    e3:c4:39:4f:94:86:10:2d:65:f5:31:d2:9e:7b:1a:
                    22:1f:63:5a:1f:b1:54:aa:20:db:0c:98:c1:c0:50:
                    de:e9:ed:46:37:da:d6:e1:db:28:ab:32:ec:6d:45:
                    ee:01:f6:1c:fb:2b:8b:04:eb:a7:a5:b1:33:7d:e0:
                    07:48:e2:f5:28:6e:86:6b:f5:da:8c:f9:39:e8:e7:
                    0d:e6:d2:d0:47:c6:06:34:a7:dc:40:3b:8c:8e:f2:
                    44:93:8a:0e:f3:a9:b0:4c:11:f4:6f:db:d5:d9:e4:
                    c7:3e:8e:74:49:ea:91:26:d1:04:98:6c:cf:bd:a8:
                    90:77:f4:97:31:24:83:93:e4:63:3a:0c:7e:62:c9:
                    83:89:d2:58:60:f2:55:49:81:d3:67:84:ca:d2:67:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:94:28:7C:92:70:57:E4:B5:30:EB:05:23:F1:FD:46:B0:C5:46:C8
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/k5QofJJwV-S1MOsFI_H9RrDFRsg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.83.144/28

    Signature Algorithm: sha256WithRSAEncryption
         10:c4:a4:17:3a:85:ab:e1:6e:4c:5a:41:de:34:fd:4f:35:31:
         bf:f8:e9:82:8f:e0:99:45:d1:c8:2f:1d:c2:61:71:b7:bb:f4:
         ba:93:f5:c1:72:40:28:31:85:65:a4:ae:e9:97:a4:3b:ae:78:
         38:78:4b:3e:74:32:1d:09:b6:5a:0e:07:5c:28:d7:75:39:e5:
         04:11:7b:a4:00:aa:c2:22:89:34:6b:91:d0:61:1e:c6:4f:61:
         b6:1e:20:8f:9c:66:80:15:66:de:1e:8f:74:6b:d1:1b:35:bb:
         c7:49:41:9c:98:e1:40:b3:35:2f:e4:72:d8:20:a7:ad:ed:e3:
         91:0c:ce:39:a2:4e:4e:cf:22:45:8a:6c:4e:73:22:f0:d0:95:
         12:43:3e:ce:4b:db:f2:85:ef:b2:63:6d:ec:5a:ea:3f:5b:81:
         55:32:8a:e9:59:96:6e:2a:ce:05:03:e0:0a:8b:e6:d7:88:29:
         47:58:97:58:f7:85:b7:00:7e:b5:da:c4:57:0d:44:f8:9c:d8:
         63:bf:c9:07:37:8f:3a:bd:2b:33:f1:50:1c:05:9d:2e:6b:a3:
         07:0a:e4:a3:54:27:07:f9:04:33:22:2b:18:61:2a:85:92:1d:
         bd:72:47:af:ea:ff:ba:62:49:34:d1:1a:ea:ea:cd:64:ac:b0:
         26:f5:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 17:40:57 2025 by rpki-client