Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/OaeB5NHPI-16hqH4Te8xsLO6QC0.roa
File:                     OaeB5NHPI-16hqH4Te8xsLO6QC0.roa (raw, json)
Hash identifier:          bU50Zr5roJWVsGnvWrCFTOyW5Xuwd794+2Ll+Xxb15Q=
Subject key identifier:   39:A7:81:E4:D1:CF:23:ED:7A:86:A1:F8:4D:EF:31:B0:B3:BA:40:2D
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       79
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/OaeB5NHPI-16hqH4Te8xsLO6QC0.roa
Signing time:             Thu 17 Jul 2025 01:15:37 +0000
ROA not before:           Thu 17 Jul 2025 01:15:37 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.234.144.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 17 01:15:37 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=39A781E4D1CF23ED7A86A1F84DEF31B0B3BA402D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:ef:5e:25:6a:5b:10:ec:3b:b5:e7:a7:95:
                    17:a3:73:c3:e6:18:93:0a:f9:74:68:ac:02:8e:3f:
                    06:4a:01:1a:bd:b6:4b:7d:3e:a0:51:f5:13:a2:e9:
                    4e:c5:0a:f8:be:bf:5c:f0:4f:63:e7:72:d9:92:45:
                    6b:2b:7c:e5:24:15:0d:6e:14:17:de:17:cc:79:c9:
                    b4:a7:82:02:cf:b6:d1:49:7b:45:3e:34:4b:54:28:
                    fa:de:8d:f9:82:68:e1:69:9a:57:d1:c7:cf:89:46:
                    a6:4c:1b:39:b7:2b:9f:22:55:c1:56:e3:0c:41:52:
                    86:1e:55:9f:d9:54:18:6b:09:4d:4c:7a:d4:6a:b0:
                    31:b4:4b:f6:7f:5a:ef:14:78:07:67:6c:cc:97:cc:
                    23:f5:bd:c6:4a:5e:3f:0f:61:c9:70:97:72:75:d2:
                    6f:9b:69:f4:03:1e:0a:62:f1:f9:41:93:16:be:19:
                    da:82:21:7d:8f:65:a8:85:97:1f:94:4e:ed:6c:70:
                    66:c3:c5:3f:94:1b:2d:54:73:f0:45:b5:36:71:56:
                    bf:73:72:2f:a0:37:a8:8a:b7:06:59:fc:14:81:28:
                    45:59:3e:7f:58:1b:11:a3:fd:4e:5a:c5:d6:d9:cf:
                    04:54:a3:dd:14:15:d5:c1:2a:ec:15:a0:51:45:d5:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A7:81:E4:D1:CF:23:ED:7A:86:A1:F8:4D:EF:31:B0:B3:BA:40:2D
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/OaeB5NHPI-16hqH4Te8xsLO6QC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:28:cd:60:fa:94:da:6c:eb:97:cf:43:25:5f:5b:54:82:
         6b:56:1e:4b:33:7f:7b:c2:f3:02:26:ed:6e:50:50:07:91:0b:
         b8:3f:7d:51:62:37:07:16:e4:40:cd:87:6b:82:53:36:1f:ab:
         a5:01:d0:93:1d:97:3b:d6:53:a0:b4:1a:7e:16:b5:24:f9:56:
         42:3a:e7:15:3e:4f:fd:bd:04:c3:51:44:8f:31:45:c1:96:c1:
         f6:c0:35:13:3c:7d:4a:5b:89:66:0f:66:dc:e0:42:19:f3:8d:
         22:85:11:4f:5b:08:17:0c:63:e9:4a:3e:1c:ab:2d:88:e2:e5:
         f9:88:f7:bb:79:33:d7:70:05:02:59:56:cf:7b:c1:93:62:97:
         d4:01:9a:38:d9:0e:61:ca:36:4b:59:7d:ea:ed:a1:09:9c:13:
         93:e9:c5:b8:b0:c5:68:f1:4f:5f:06:39:8c:c7:21:a2:f5:28:
         d7:72:be:22:6e:cd:62:f2:01:96:72:20:76:5a:18:0e:e2:c3:
         3e:44:c4:79:9d:27:9a:d2:08:fc:5e:27:96:e4:02:4a:b2:40:
         a2:4a:fb:00:c6:12:73:18:bb:ad:97:bb:1d:a8:5e:6e:f7:3a:
         f1:08:b0:61:88:11:ee:53:17:34:df:11:9b:9a:c4:30:6c:04:
         41:6e:2b:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:01:17 2025 by rpki-client