Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/R_sO95pIUkmekBAMSAer4nEx16k.roa
File:                     R_sO95pIUkmekBAMSAer4nEx16k.roa (raw, json)
Hash identifier:          MXEGc5p5Sr9mJ9KBWWd1LS7o7+7Kws7uM2dGgCGT7nI=
Subject key identifier:   47:FB:0E:F7:9A:48:52:49:9E:90:10:0C:48:07:AB:E2:71:31:D7:A9
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       76
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/R_sO95pIUkmekBAMSAer4nEx16k.roa
Signing time:             Fri 01 Aug 2025 01:31:13 +0000
ROA not before:           Fri 01 Aug 2025 01:31:13 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9374
IP address blocks:        124.108.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug  1 01:31:13 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=47FB0EF79A4852499E90100C4807ABE27131D7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:28:6c:bf:8e:e8:79:eb:95:8b:58:28:4b:
                    cf:b9:4f:18:fd:ff:f7:34:bb:a7:84:73:f4:75:ce:
                    85:6f:e1:97:b2:8a:22:76:d6:a2:08:f1:ea:a4:31:
                    25:e6:5e:6a:09:04:c2:dc:19:e5:91:cb:2f:a6:cb:
                    0b:49:f9:f4:e5:f6:3b:62:50:f5:5a:84:6f:1a:47:
                    c2:c5:82:48:20:d0:5f:eb:0f:c8:38:35:a9:37:b0:
                    ae:3f:96:f7:7f:08:e9:4a:b3:85:8d:fc:de:05:09:
                    82:3e:3f:7d:70:c5:e0:86:56:35:f0:3d:96:c4:18:
                    c1:d3:5d:ea:45:68:14:d6:33:02:9e:4e:25:5c:86:
                    0e:c2:53:cc:c1:6e:59:cb:50:7c:bc:17:cc:0e:60:
                    e6:c6:0e:77:57:f5:91:cf:9c:19:59:3e:76:9c:90:
                    a8:5d:3d:2f:56:4d:54:67:02:df:c2:32:fd:68:de:
                    52:ff:dd:2c:2e:4e:77:47:d1:21:25:56:89:30:77:
                    04:ff:6e:db:36:57:11:ce:df:3e:11:8e:c5:3b:37:
                    6e:d3:1b:76:60:df:cc:a1:40:00:27:60:aa:30:4e:
                    21:92:61:52:9d:e2:52:04:cf:99:b9:a2:1c:c7:1a:
                    c4:34:e4:5e:12:b6:45:14:b2:b9:95:50:98:4f:a5:
                    95:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FB:0E:F7:9A:48:52:49:9E:90:10:0C:48:07:AB:E2:71:31:D7:A9
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/R_sO95pIUkmekBAMSAer4nEx16k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:ed:d5:56:bb:58:4c:2a:64:cf:84:99:13:44:fc:3b:36:
         7c:c8:70:59:b3:c9:1b:2b:3d:a1:df:85:85:8b:75:fa:9a:db:
         c5:5c:c2:5a:c0:b6:c5:59:36:d0:1f:b7:72:ac:0f:2f:50:0a:
         59:9b:1c:4c:cd:f1:fa:2c:29:41:3e:e7:48:f6:fa:db:b2:8f:
         33:22:a2:19:89:64:7f:f6:d7:a7:0c:eb:fc:0d:87:1d:92:fa:
         24:be:93:0d:91:82:ad:04:1d:4f:8a:ac:7a:24:d2:1e:14:1b:
         bb:1c:de:90:8f:82:bc:19:fe:9c:ec:1a:bc:96:73:bd:6b:f1:
         01:24:b1:a9:24:0f:8d:b1:85:f1:ae:58:10:bd:f0:42:07:64:
         c0:03:43:35:32:bc:db:3f:15:57:e5:b6:80:60:9c:cf:57:28:
         4c:49:78:68:cc:98:86:5c:c6:94:3b:ec:f3:bb:72:76:b0:6a:
         3a:83:05:42:f1:57:20:62:ff:a6:e4:56:09:02:91:ce:82:82:
         7b:0f:05:32:34:4d:e8:ef:2a:d2:52:8e:71:58:4a:bd:3f:b8:
         65:10:a9:3a:5c:57:a5:e1:96:8d:c1:b1:88:fb:b6:98:47:bd:
         d7:8c:cc:d5:f1:ab:06:8a:bd:fa:40:8d:e4:91:e0:22:f8:ae:
         77:17:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:15:14 2025 by rpki-client