Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/hvPK9t65cphZLalGy-0XNJYzvMg.roa
File:                     hvPK9t65cphZLalGy-0XNJYzvMg.roa (raw, json)
Hash identifier:          mVKmuTpD6UbLWGEZCUoKqHRCUixnRRq5tQpHMwosJ40=
Subject key identifier:   86:F3:CA:F6:DE:B9:72:98:59:2D:A9:46:CB:ED:17:34:96:33:BC:C8
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       73
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/hvPK9t65cphZLalGy-0XNJYzvMg.roa
Signing time:             Fri 01 Aug 2025 01:31:11 +0000
ROA not before:           Fri 01 Aug 2025 01:31:11 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9374
IP address blocks:        119.224.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug  1 01:31:11 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=86F3CAF6DEB97298592DA946CBED17349633BCC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:98:53:58:81:42:b4:ca:e1:57:b0:d8:7f:
                    7b:b7:16:7f:82:b8:7e:3a:20:4a:c6:ca:b6:55:77:
                    19:45:8f:cb:ee:e4:db:5b:f2:14:d0:50:2e:d2:ad:
                    07:e6:cb:13:00:a1:0a:05:4b:2f:dc:8d:04:a2:79:
                    b4:a5:b1:3c:a1:dc:d7:42:c8:ed:9e:7c:9b:ce:30:
                    ba:4e:f4:26:a7:e1:1b:ce:40:a5:37:2c:ae:13:e6:
                    0f:5f:88:6e:10:95:7f:58:62:2a:52:31:57:f6:82:
                    e8:83:e4:86:f4:c4:d7:23:07:73:a9:ca:cc:ce:50:
                    f8:6d:85:42:64:16:5e:3b:ba:5b:42:7d:65:36:21:
                    8f:e8:b7:5e:84:29:12:55:0e:eb:ef:a3:6a:6f:37:
                    5d:a6:b7:ed:1f:7f:63:80:8c:0b:7b:ba:0f:dc:ce:
                    5e:ec:f4:56:37:00:80:af:ac:02:45:02:86:37:7e:
                    e7:40:dd:5d:e2:64:3f:2e:e1:0f:1b:13:86:d3:98:
                    2f:7a:22:93:22:c0:c9:5f:44:5c:9e:3f:98:4b:85:
                    20:77:50:74:67:72:cf:4d:65:5c:f1:c3:94:d6:ea:
                    c7:55:0e:64:7d:db:18:91:fb:a2:d7:fb:37:26:8b:
                    c7:0f:5d:a7:72:ed:bc:53:55:53:fc:9c:0c:5a:d3:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F3:CA:F6:DE:B9:72:98:59:2D:A9:46:CB:ED:17:34:96:33:BC:C8
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/hvPK9t65cphZLalGy-0XNJYzvMg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.224.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:ee:0a:58:00:a6:f4:0d:cc:89:23:0b:fd:0f:67:45:5d:e7:
         e7:26:fd:0b:57:8c:3a:3d:00:a1:b5:8a:47:7f:9b:a8:52:b1:
         c5:69:d1:66:34:51:17:b2:d8:01:69:b3:24:1a:83:1f:08:b2:
         c0:6f:56:3b:d0:99:ab:55:b8:1f:ed:7d:aa:e9:26:ff:8b:38:
         1c:5d:96:7c:1a:63:88:31:3e:ac:48:92:56:74:19:8d:2a:4b:
         7f:54:7e:c2:80:ca:4f:3c:14:9d:52:69:2b:5b:30:49:58:a8:
         4d:58:4f:70:66:dc:07:91:03:e5:f6:47:a6:11:86:e7:d0:8c:
         04:b1:e2:bb:b5:2e:f8:3b:c4:9c:58:b3:a1:8c:57:55:80:d1:
         4f:8e:81:d0:8c:52:24:64:58:cc:33:a3:f8:c4:b6:e3:27:15:
         6d:ea:3e:75:d3:ac:d3:43:6c:5f:be:69:a1:f3:29:cb:6f:8d:
         88:95:71:70:c9:1c:6a:f1:44:c1:7d:5b:95:a6:cc:bd:9d:a7:
         43:b1:ee:39:7d:f0:0e:8d:dc:a6:89:87:65:d5:ee:f0:2c:0a:
         0c:15:ea:1e:a6:65:45:ac:66:3f:df:29:dc:0a:55:b2:88:47:
         f8:51:af:26:29:48:c6:bb:bb:55:77:c7:0a:15:28:e9:ec:49:
         a9:1a:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:19:24 2025 by rpki-client