Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/LRNxal6HBxPUd9BythpG5GSTgXo.roa
File:                     LRNxal6HBxPUd9BythpG5GSTgXo.roa (raw, json)
Hash identifier:          /Fqel1UL7CFkQ0bCbkVePZalN1M8i11F77byX71Iogs=
Subject key identifier:   2D:13:71:6A:5E:87:07:13:D4:77:D0:72:B6:1A:46:E4:64:93:81:7A
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       90
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/LRNxal6HBxPUd9BythpG5GSTgXo.roa
Signing time:             Thu 24 Jul 2025 00:39:47 +0000
ROA not before:           Thu 24 Jul 2025 00:39:47 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.218.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 00:39:47 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=2D13716A5E870713D477D072B61A46E46493817A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:f3:40:f0:9c:ce:a4:97:e7:fe:83:08:41:
                    28:43:ef:62:d4:34:3c:82:74:13:bd:2e:44:3e:c2:
                    7f:f5:8c:10:45:24:e9:db:3e:c1:b9:cd:d0:4e:4d:
                    3e:40:b9:a1:79:c4:a5:39:79:c2:03:2a:47:10:a1:
                    11:fc:27:01:a7:76:8c:2f:97:e5:21:6c:64:43:67:
                    4a:92:8a:dd:b0:d9:d8:66:24:d9:87:a1:f7:12:16:
                    87:77:f7:61:73:cb:22:ce:3c:7f:81:1f:5d:d4:27:
                    3c:c7:24:46:f0:2b:98:32:aa:dc:4d:93:1f:ec:ce:
                    55:9c:45:53:58:66:9e:25:14:26:be:a9:d3:41:8e:
                    f5:44:09:de:b1:01:16:94:0b:f5:95:c6:f8:ef:05:
                    58:ee:8f:90:f8:16:ec:fb:e2:44:62:54:71:da:3c:
                    bd:83:41:15:e1:5d:3d:79:2f:5f:67:c3:66:9b:37:
                    f9:95:07:73:73:6c:7c:11:99:35:4b:1b:c2:88:dd:
                    8e:d6:22:8a:5d:b1:a3:d5:0e:25:22:84:75:58:83:
                    53:1f:4a:61:5f:94:5d:1b:b8:f9:95:37:5a:08:82:
                    ad:ff:f5:5c:1f:d8:cf:78:85:f4:4e:05:8b:76:bd:
                    d1:9f:5e:22:48:b5:ea:4e:43:83:3e:8c:96:f1:d4:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:13:71:6A:5E:87:07:13:D4:77:D0:72:B6:1A:46:E4:64:93:81:7A
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/LRNxal6HBxPUd9BythpG5GSTgXo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.218.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:3c:c4:03:f3:e6:f1:bd:11:9c:b8:11:00:34:99:57:fe:
         7e:84:6c:aa:84:85:bc:9b:d3:cc:45:a6:b1:f1:bf:2b:28:9b:
         99:3a:14:3a:ec:05:1a:99:17:38:8b:32:4b:e0:1a:ea:1a:9b:
         74:23:1d:12:0b:2d:f1:1e:04:fe:e0:d9:dd:6b:2d:97:a3:4b:
         d8:45:51:8f:bc:1b:19:ba:23:ed:45:37:b1:b2:ea:48:ec:72:
         6e:c1:47:e3:cc:a2:aa:15:2f:4e:21:ee:bd:38:3e:51:c1:d3:
         ef:2b:ed:57:00:94:04:d8:12:1d:dd:de:18:c2:a0:51:54:73:
         d4:e5:06:a1:69:5a:ce:28:ed:98:6d:45:14:81:c2:dc:92:34:
         06:44:07:13:02:ae:98:4e:37:1f:29:3a:c3:34:a3:49:fe:1f:
         96:a4:63:8d:7d:b3:ba:08:bd:c2:a2:93:3e:7b:fc:92:80:b8:
         e4:34:a1:8e:53:12:a9:53:74:66:fd:80:99:05:42:14:57:dd:
         b1:46:df:bf:76:44:2a:6f:d7:fd:ad:88:08:2e:2d:c9:b0:82:
         27:a1:31:fd:95:d3:6c:44:b5:15:1b:9f:1a:8c:66:ac:5f:d1:
         b0:d0:74:a6:45:05:49:bb:80:74:26:cf:7a:e7:76:61:fb:3f:
         35:40:e2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:11:06 2025 by rpki-client