Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/5FvzcGbgt_sd_OwDZUaZxgNlkIY.roa
File:                     5FvzcGbgt_sd_OwDZUaZxgNlkIY.roa (raw, json)
Hash identifier:          QQh2s4XKA6Wf2pu0dVme4DTOKf2OTlV0RfZkVpQWUBo=
Subject key identifier:   E4:5B:F3:70:66:E0:B7:FB:1D:FC:EC:03:65:46:99:C6:03:65:90:86
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       48
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/5FvzcGbgt_sd_OwDZUaZxgNlkIY.roa
Signing time:             Fri 01 Aug 2025 01:30:22 +0000
ROA not before:           Fri 01 Aug 2025 01:30:22 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     17958
IP address blocks:        133.226.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Aug  1 01:30:22 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=E45BF37066E0B7FB1DFCEC03654699C603659086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:f1:55:b7:52:97:4d:be:41:23:51:9e:51:
                    9b:ec:62:af:5c:95:3b:7a:0b:da:da:2b:3a:c1:e8:
                    91:34:fb:67:5f:71:ad:43:9f:2b:da:ad:29:09:35:
                    df:ab:a6:5d:73:12:cd:f5:30:80:d7:dc:eb:b7:fa:
                    a4:d7:51:c7:0e:03:38:69:d7:fd:46:c7:ed:bd:44:
                    a3:e6:32:d3:f8:fc:47:2d:9c:cd:b9:2c:56:51:29:
                    91:d5:9d:78:e6:c0:75:41:d8:e8:6e:4e:43:ab:d4:
                    1a:fa:9f:2f:e3:52:c3:cd:9f:07:cb:4d:ee:98:0b:
                    b5:6c:66:da:11:33:5a:48:f8:96:54:0b:77:87:77:
                    82:06:3f:41:d9:3e:ce:19:5c:ea:90:89:ce:15:42:
                    f1:34:b1:c3:43:b4:98:ed:6f:97:ee:7f:ad:fe:74:
                    8b:17:de:23:01:58:e1:16:ae:f0:ad:9b:cf:08:ba:
                    fc:6c:98:f6:63:3d:52:3d:1e:d2:3a:3e:19:5a:d3:
                    28:97:3a:f8:c8:75:00:4c:b4:c7:aa:5b:cf:1b:9b:
                    53:20:44:4f:75:72:b7:60:a6:04:71:52:72:dc:73:
                    d0:9b:ad:db:e6:5a:24:0f:3f:50:32:f9:1c:02:89:
                    af:cc:2f:a5:69:7f:35:72:63:9c:90:c6:6b:0e:3d:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5B:F3:70:66:E0:B7:FB:1D:FC:EC:03:65:46:99:C6:03:65:90:86
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/5FvzcGbgt_sd_OwDZUaZxgNlkIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.226.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:bf:76:71:78:78:d6:92:0b:57:78:17:0e:8e:de:ff:44:74:
         11:e7:57:dd:f3:c0:7f:09:95:81:17:24:40:0f:f1:0e:75:48:
         08:97:7c:f0:c0:02:f1:db:ee:82:b1:0a:0a:c6:c2:b3:dc:94:
         e3:f5:fe:bc:eb:bf:2d:39:fa:56:f4:e1:92:1a:76:8b:a2:b3:
         98:45:85:0b:fe:49:e7:f8:8c:2e:b3:88:5a:70:f9:97:27:4b:
         e9:9b:8e:53:45:f4:42:77:e7:e4:b9:34:62:83:b2:b5:8b:ff:
         ef:76:28:11:b5:65:b2:36:e4:96:3b:0e:74:4c:a9:02:e5:93:
         18:68:d4:b5:4f:20:c7:76:76:6a:6b:d7:80:02:a5:0b:1c:e5:
         70:22:7c:20:b7:62:2a:6f:c2:4e:40:15:b2:56:3b:88:2b:0b:
         ac:11:2e:e4:b1:04:9f:cb:50:24:34:60:e6:38:1e:a2:34:35:
         8b:19:c9:ec:0e:df:00:7b:f2:fa:4b:53:4e:c3:c8:79:84:21:
         21:b6:7a:cf:7c:73:45:95:55:56:d7:e9:f9:fa:a5:6b:ea:4e:
         3d:98:8e:07:76:c4:8d:36:f3:d8:9d:3d:1f:36:0c:63:96:9b:
         77:91:28:d9:38:2a:97:e6:93:84:43:61:5c:5f:57:7a:c8:5e:
         be:55:82:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:10:02 2025 by rpki-client