Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/ZwmWaLxIacyUrV8WsogOY5vNqL4.roa
File:                     ZwmWaLxIacyUrV8WsogOY5vNqL4.roa (raw, json)
Hash identifier:          BqI74Eo7s5RN92ATr9c6F1vQvu7V0RaOwK4xsiczqXc=
Subject key identifier:   67:09:96:68:BC:48:69:CC:94:AD:5F:16:B2:88:0E:63:9B:CD:A8:BE
Certificate issuer:       /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial:       19
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/ZwmWaLxIacyUrV8WsogOY5vNqL4.roa
Signing time:             Wed 02 Apr 2025 04:53:28 +0000
ROA not before:           Wed 02 Apr 2025 04:53:28 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     17931
IP address blocks:        202.165.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
        Validity
            Not Before: Apr  2 04:53:28 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=67099668BC4869CC94AD5F16B2880E639BCDA8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:85:d4:d0:26:ce:f6:2a:cf:9f:85:66:62:
                    bc:c2:57:81:35:80:90:d5:b7:3c:c7:73:b0:27:7d:
                    8a:3a:8b:82:e8:6a:be:08:4d:89:08:a2:93:6c:fd:
                    22:32:94:ae:4d:d4:30:0b:3b:69:d1:27:c9:2e:f6:
                    ed:4b:e2:09:aa:76:1b:68:4b:51:72:af:d7:94:f6:
                    30:49:e9:f3:b7:ac:17:dd:f0:a0:34:16:5c:70:54:
                    b9:30:ef:d6:4f:d0:7e:77:37:4b:16:d4:bc:82:67:
                    3f:45:d5:e3:1a:32:32:44:4a:e3:6c:96:bc:a1:d1:
                    de:4c:ab:f5:4b:1b:96:d1:39:db:ed:b4:81:ca:3d:
                    d8:11:1c:56:05:38:4a:6c:fd:21:22:50:64:0e:18:
                    2b:92:be:37:92:b8:9f:f6:81:19:24:b3:2b:74:b3:
                    47:0f:7c:b9:7e:14:02:f8:9a:12:1b:f6:b7:b3:8d:
                    e1:ae:40:c4:cb:e4:1f:94:dd:74:bd:3d:8b:7d:7e:
                    91:70:bd:cf:67:e5:26:8b:77:7b:0c:0c:4e:86:58:
                    52:2f:f7:aa:87:0b:5d:96:ea:b9:87:52:79:66:7f:
                    80:4e:c1:2e:a8:92:44:a3:ca:6e:1d:bd:4d:9e:98:
                    79:90:e6:6f:d6:18:ce:4d:c1:3d:28:b7:13:8e:e9:
                    3c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:96:68:BC:48:69:CC:94:AD:5F:16:B2:88:0E:63:9B:CD:A8:BE
            X509v3 Authority Key Identifier:
                keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/ZwmWaLxIacyUrV8WsogOY5vNqL4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:9a:82:9b:bc:3d:87:18:3a:58:e2:5b:b0:a4:85:7c:d2:77:
         f7:bf:49:f7:97:1b:98:b9:64:03:e7:1d:9f:56:61:6a:01:87:
         f9:7f:ec:03:ca:10:82:e5:95:cf:ed:b2:d0:fb:f6:47:84:18:
         a8:27:21:e5:d4:a7:fb:ee:43:0e:e7:a2:b3:35:d9:f8:02:a8:
         75:32:10:c6:d8:18:11:92:d3:4b:9e:07:c9:e3:ce:b3:f7:45:
         1f:f1:61:e6:e1:8e:e4:6e:f9:c1:7e:57:6b:4f:c8:fb:d5:46:
         79:44:eb:af:23:c0:0d:24:e4:83:56:cf:0e:f0:b0:7b:ad:de:
         22:93:c0:be:ea:ef:a1:e5:30:38:e6:19:e1:f5:0a:45:8e:26:
         09:28:14:67:ba:5f:7a:e9:c6:9e:60:7e:fe:60:11:b8:cc:8c:
         18:49:85:14:e6:df:3f:9b:da:30:26:11:b1:a6:f0:a8:2c:d0:
         75:45:e4:63:11:16:bb:4c:5f:fa:2e:ac:0f:12:64:52:30:91:
         e8:b2:0b:12:86:ce:8c:24:8f:45:ff:2f:63:82:e8:57:b4:7e:
         82:6c:92:6c:68:93:43:1b:83:2d:0e:12:f7:67:d1:f1:0b:a2:
         23:ea:e6:5d:de:2c:79:93:bb:e1:ea:39:cb:31:d3:a4:54:bd:
         4c:a3:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:39:08 2025 by rpki-client