Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VEe-lvfXKftXJ4dmRc1RwhBtl-g.roa
File:                     VEe-lvfXKftXJ4dmRc1RwhBtl-g.roa (raw, json)
Hash identifier:          YW1nMVHJJLujgQlBy9BzZCF/Wxbg+3CzaVOGbR4r1qA=
Subject key identifier:   54:47:BE:96:F7:D7:29:FB:57:27:87:66:45:CD:51:C2:10:6D:97:E8
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       011A
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VEe-lvfXKftXJ4dmRc1RwhBtl-g.roa
Signing time:             Thu 24 Jul 2025 02:22:05 +0000
ROA not before:           Thu 24 Jul 2025 02:22:05 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.234.0.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:22:05 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=5447BE96F7D729FB5727876645CD51C2106D97E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:dd:f4:de:19:1d:63:9f:3b:4a:92:db:34:
                    41:75:fa:68:89:87:a3:66:ab:02:08:32:49:4c:72:
                    ec:9b:7b:c2:db:ac:c2:c7:45:e0:79:d6:e8:a9:16:
                    62:47:6c:05:5c:cc:97:42:a7:cf:b4:f4:e5:be:5d:
                    15:20:97:c8:2a:cd:a0:34:2d:77:cf:75:66:0a:d3:
                    b4:fd:67:22:41:49:3e:bb:d7:8b:05:0d:67:23:76:
                    3d:e0:a9:9b:be:b0:0e:0c:8d:2f:ce:ec:bc:0f:6f:
                    14:a0:97:b4:bf:37:a0:e2:34:c3:78:e4:6e:e5:e8:
                    50:3a:4f:aa:05:2c:f8:4b:9b:a6:5a:57:1c:d7:39:
                    21:b4:92:4c:bc:ef:2b:87:a0:85:7d:f1:9c:69:22:
                    06:72:9f:7a:a9:eb:12:6c:fa:59:03:f4:65:7e:03:
                    69:82:31:8d:c6:70:fc:73:1e:c3:ac:b1:73:20:18:
                    26:a1:bc:03:96:14:cc:39:0c:96:fa:39:9c:78:c6:
                    a5:6b:4d:d2:60:45:82:67:ed:64:70:8d:de:19:a8:
                    0f:a2:31:a1:21:49:2e:c1:70:3d:e5:a0:7d:75:16:
                    6b:74:2b:2c:90:df:8e:ae:01:0d:1e:24:46:b4:0f:
                    7b:96:36:87:16:94:30:f4:f1:50:f8:77:ee:3d:03:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:47:BE:96:F7:D7:29:FB:57:27:87:66:45:CD:51:C2:10:6D:97:E8
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VEe-lvfXKftXJ4dmRc1RwhBtl-g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:f0:97:1b:18:87:70:69:96:1e:4a:99:7c:10:f1:1d:75:8d:
         fe:84:cd:46:3c:21:0b:77:d0:a7:dc:ed:e9:f6:95:b9:bd:7f:
         e9:b2:9f:6e:5e:95:1e:0e:5d:63:9a:10:d1:2f:dc:87:82:37:
         4c:c7:76:41:0b:41:cd:4d:e9:4a:6b:6e:36:61:ed:95:9a:f3:
         e9:74:ce:2e:d4:c5:74:c5:c3:b8:b2:c8:8c:03:d7:77:6f:30:
         81:1f:ed:73:96:89:97:76:45:0a:9b:1d:4f:8e:84:1e:f5:26:
         96:28:39:7f:4a:12:c5:00:95:b3:65:2d:9e:6f:d3:a9:0a:6e:
         f9:81:6d:6b:8d:46:ef:13:02:3a:0c:5a:23:3d:23:ee:b4:56:
         93:11:ba:63:0e:ff:40:6f:55:3d:87:f4:63:08:f0:8f:54:33:
         26:73:29:e9:3a:6b:ab:59:4b:ad:73:20:0b:da:7a:12:9b:30:
         2a:10:f3:97:8d:52:3c:be:d0:ac:a4:0a:c1:7e:e5:63:33:74:
         35:5a:a9:a7:9f:53:04:d6:10:82:d7:3f:73:07:64:6e:6f:11:
         30:fc:26:25:15:70:92:ad:8c:45:fb:d1:af:ab:aa:51:f2:01:
         d0:84:b7:10:1b:0d:51:ba:9e:6c:67:d6:57:49:60:d5:f3:d4:
         e2:33:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:06:01 2025 by rpki-client