Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/KvTVwc-JGY3JQJ1mrLZjEO0HyeM.roa
File:                     KvTVwc-JGY3JQJ1mrLZjEO0HyeM.roa (raw, json)
Hash identifier:          Dec9fqgxOftkVKT2h9DdTw76o2kM8ZuzWPCVZSEREUs=
Subject key identifier:   2A:F4:D5:C1:CF:89:19:8D:C9:40:9D:66:AC:B6:63:10:ED:07:C9:E3
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       7A
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/KvTVwc-JGY3JQJ1mrLZjEO0HyeM.roa
Signing time:             Thu 17 Jul 2025 01:15:37 +0000
ROA not before:           Thu 17 Jul 2025 01:15:37 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.234.147.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 17 01:15:37 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=2AF4D5C1CF89198DC9409D66ACB66310ED07C9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:70:59:4e:35:98:8e:c1:d1:80:8f:7a:20:5c:
                    f5:f7:02:92:5e:24:2a:d2:03:7d:2c:1a:04:de:3d:
                    e7:59:41:e1:6b:a6:64:0a:65:2e:04:83:05:d7:f8:
                    6a:26:77:df:52:5c:54:63:ba:2c:01:a1:fc:5e:85:
                    00:3a:54:3a:eb:b9:f6:9f:d2:fc:2d:1d:72:61:80:
                    71:d4:59:e0:10:eb:4c:f8:95:2b:b2:cd:23:e4:55:
                    d4:fb:ad:62:7b:1c:85:23:d7:75:95:45:15:28:22:
                    a7:4b:1f:fa:fa:ee:ae:eb:93:73:11:4b:b1:a8:9d:
                    c1:e1:dd:9c:36:ed:af:56:70:e3:d0:e0:b5:44:21:
                    35:99:b1:d5:9e:02:de:2c:5f:2e:cb:0b:00:a3:2f:
                    93:97:23:03:36:e1:8c:97:93:a9:80:d3:fd:5d:42:
                    b5:06:cf:ba:e0:3d:e7:02:ba:19:a4:bf:15:83:37:
                    d5:f8:92:a2:27:75:fc:fb:25:cb:01:56:08:bc:17:
                    a3:1b:e2:b8:eb:ee:2d:7e:72:2a:1c:f7:1b:f9:69:
                    d6:24:71:e9:68:24:0a:f5:37:55:53:ff:28:8e:c3:
                    1f:97:98:5a:0f:ff:46:1d:86:e6:a9:00:3a:d6:ac:
                    a4:c3:9f:91:b9:8d:6f:93:f6:c2:0a:27:32:e4:a0:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F4:D5:C1:CF:89:19:8D:C9:40:9D:66:AC:B6:63:10:ED:07:C9:E3
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/KvTVwc-JGY3JQJ1mrLZjEO0HyeM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:f6:2d:8f:f5:b6:85:ea:d9:60:51:cf:24:03:66:90:74:f3:
         25:e6:37:15:f9:6d:26:9e:f2:c0:e2:ed:0f:3b:1e:fe:3b:3f:
         3b:6f:0b:10:61:8a:86:4f:b3:c7:a7:b7:33:46:98:71:9f:bc:
         80:2d:c7:65:bb:12:03:1a:a7:01:85:15:04:b7:42:80:6c:47:
         43:e1:ce:cd:99:df:3d:27:dd:ba:b2:c1:1d:48:08:d6:5b:ba:
         40:8c:ad:0e:b0:d6:78:4e:79:fa:c7:56:74:56:9c:d6:3c:d6:
         62:08:6d:e7:12:53:48:ba:2b:ca:f4:37:55:ae:8d:4d:53:13:
         b1:79:cc:97:26:b9:7d:c0:ed:77:93:82:0d:2f:17:82:88:0c:
         b9:b0:75:7c:74:c6:37:5c:ae:64:12:09:d0:4d:91:ee:40:d8:
         c7:1e:ed:50:79:50:d4:51:08:dd:69:94:ec:62:ee:7a:51:ed:
         a9:c0:cc:ec:e0:a4:24:6e:ef:3b:a7:d5:5e:d9:06:bc:c9:28:
         fb:39:4c:8e:e6:62:dd:58:71:43:c6:07:57:e5:86:1b:ba:4b:
         25:0c:a6:c0:0b:34:88:87:52:be:82:0e:a8:ba:87:66:fa:c9:
         b0:01:ab:1e:9e:43:97:28:3b:a4:89:62:69:de:ae:b1:9f:9b:
         83:cd:14:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:03:06 2025 by rpki-client