Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/2sMD6A9ZSsClk9AK2djU3hoH9LY.roa
File:                     2sMD6A9ZSsClk9AK2djU3hoH9LY.roa (raw, json)
Hash identifier:          QATWxfwev05JyJXrbfC5WHevmizsl1y6glpbP2NrPc0=
Subject key identifier:   DA:C3:03:E8:0F:59:4A:C0:A5:93:D0:0A:D9:D8:D4:DE:1A:07:F4:B6
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       92
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/2sMD6A9ZSsClk9AK2djU3hoH9LY.roa
Signing time:             Thu 24 Jul 2025 00:39:48 +0000
ROA not before:           Thu 24 Jul 2025 00:39:48 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.218.128.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 00:39:48 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=DAC303E80F594AC0A593D00AD9D8D4DE1A07F4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:67:b0:11:cc:c5:31:57:4a:09:c6:8f:49:4a:
                    74:99:71:a9:ae:8a:bd:74:2e:e0:c0:f7:db:10:2c:
                    fb:da:00:4d:1d:cc:60:86:af:3f:82:31:9f:ec:c8:
                    8e:63:95:12:ff:59:b5:7e:0e:0b:61:51:88:20:4a:
                    6a:2f:25:82:ee:be:74:53:d0:40:4a:cf:b3:8d:0c:
                    0f:90:1f:26:04:a0:fe:9f:69:43:15:b8:2e:4d:c7:
                    e6:23:04:64:ba:d6:4a:df:3a:95:57:ee:c6:d9:79:
                    f7:9e:84:8f:b0:15:85:fd:78:1f:b4:e3:18:ff:2c:
                    23:c9:bb:16:6f:69:91:dc:6d:3c:5f:c6:16:7a:46:
                    4d:a3:61:84:a7:42:f7:43:01:a2:88:50:19:34:0c:
                    8e:8c:7e:b6:09:ec:83:12:2d:71:2f:e1:cc:bd:fe:
                    81:41:2c:d3:3f:81:39:cf:72:e0:9f:44:7f:39:b4:
                    30:4c:7c:d2:85:17:05:6d:85:83:b3:13:a6:d1:fc:
                    b5:44:a5:ab:f7:ec:74:11:54:6c:87:16:29:16:37:
                    e2:59:27:89:1f:3e:b6:c8:a9:4e:02:29:c0:06:b9:
                    6a:f5:db:a0:f4:2d:91:75:22:6b:38:b3:02:e4:71:
                    9a:3b:72:c5:9c:b9:6e:be:84:3b:b8:2f:77:75:28:
                    e1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C3:03:E8:0F:59:4A:C0:A5:93:D0:0A:D9:D8:D4:DE:1A:07:F4:B6
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/2sMD6A9ZSsClk9AK2djU3hoH9LY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.218.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         44:e1:33:8e:c1:00:93:54:bf:fa:3b:10:57:5e:a4:13:6d:32:
         40:5b:07:45:cf:e4:4a:96:54:f5:95:1d:0f:40:60:e8:35:c7:
         24:60:6f:3a:b0:0c:c4:a1:11:59:dd:c4:8c:81:8c:c9:39:03:
         de:b8:03:72:40:b2:92:2b:22:5c:44:60:40:0c:09:38:9d:27:
         d4:ff:7a:08:19:ec:8b:64:ec:d8:5e:47:02:5a:ad:a7:6f:ae:
         33:21:a5:33:a8:f7:f2:06:c4:2e:a7:73:e9:e1:03:cc:3a:a4:
         e5:60:bb:1b:46:4a:d7:61:e5:4d:3e:3b:45:c9:2d:ef:7f:64:
         d0:e1:22:c0:59:78:be:60:a6:77:17:38:63:34:18:2a:9f:ee:
         e8:31:0e:ff:d6:21:26:9d:b0:b3:c6:73:4c:8d:90:eb:b9:3c:
         71:02:e0:6d:82:30:85:1c:06:9c:c1:39:cb:84:46:24:51:d3:
         11:2f:bb:04:9f:f8:c9:f7:81:ff:6c:3a:75:53:b0:fa:fe:ed:
         51:31:66:fc:6c:63:8c:19:6f:97:58:1e:a9:dd:40:46:ef:17:
         58:04:78:79:c6:63:dd:4d:ae:7e:db:d7:7a:81:86:3f:7b:78:
         07:f9:ff:dc:e3:ab:95:fc:3f:71:ce:a8:ae:fe:f1:6c:db:3f:
         f2:4e:6d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:19:51 2025 by rpki-client