Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VVp2DbxuuwQse1rKN_IrLWvYLRg.roa
File:                     VVp2DbxuuwQse1rKN_IrLWvYLRg.roa (raw, json)
Hash identifier:          rg2q6K0XIeHLL6DuCijGpxRUPb1ONVPf0ajvZZOsFLQ=
Subject key identifier:   55:5A:76:0D:BC:6E:BB:04:2C:7B:5A:CA:37:F2:2B:2D:6B:D8:2D:18
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       011B
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VVp2DbxuuwQse1rKN_IrLWvYLRg.roa
Signing time:             Thu 24 Jul 2025 02:22:05 +0000
ROA not before:           Thu 24 Jul 2025 02:22:05 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.241.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:22:05 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=555A760DBC6EBB042C7B5ACA37F22B2D6BD82D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:c8:2b:a4:07:b0:a3:9c:c1:ad:f8:b5:2a:
                    98:f3:64:81:df:db:3e:3c:b3:23:c9:c0:b9:6d:10:
                    d7:cd:17:1b:9c:77:71:26:e9:1c:c6:2e:e9:57:ea:
                    f1:d7:16:18:c6:13:43:e0:c8:ed:41:32:ef:d1:ee:
                    66:62:af:0b:f0:68:81:98:77:f8:d8:05:cd:24:80:
                    d7:a4:49:39:8e:ae:87:49:61:ca:1b:05:64:5c:66:
                    36:57:5f:4d:ae:ea:b7:5f:55:29:97:bc:ef:41:8a:
                    46:aa:ed:af:24:a5:91:69:74:3f:d7:6a:86:21:89:
                    b7:39:39:b5:2f:0d:93:61:46:d7:3c:ed:b1:31:ea:
                    f0:04:65:d0:72:3f:fd:e8:5c:b8:3c:2c:43:91:66:
                    52:fa:c7:06:f4:e1:30:fe:28:1b:7c:b9:48:4c:04:
                    fb:30:26:d0:05:29:e8:d9:52:1a:33:f9:48:b5:e3:
                    1a:46:4f:83:d9:93:c0:d6:2c:0c:6a:00:e4:5b:ac:
                    94:cf:5a:1f:b3:10:95:dd:bb:4c:9e:ab:f3:4b:7a:
                    c9:34:0f:95:9b:58:77:d6:cc:2f:b1:aa:5b:ce:64:
                    f7:b5:a2:7a:f6:e2:55:68:5c:23:e1:fa:75:fe:b8:
                    e4:46:5d:1b:ba:a7:d2:f2:29:12:60:34:1e:17:0f:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5A:76:0D:BC:6E:BB:04:2C:7B:5A:CA:37:F2:2B:2D:6B:D8:2D:18
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VVp2DbxuuwQse1rKN_IrLWvYLRg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.241.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:91:53:9a:e5:d4:65:e1:4f:bb:71:2d:5a:cb:92:eb:c0:
         33:ed:c8:04:68:e4:a6:e7:e2:e9:df:b5:38:c7:4b:80:95:e9:
         e4:59:02:90:07:4b:0d:1c:48:41:ad:61:89:d3:2e:aa:a2:ce:
         31:67:9d:ad:f6:fa:88:34:1f:a0:35:87:8e:27:3f:2e:dc:22:
         7b:e7:4e:cf:3d:1c:6b:e8:6a:0b:84:73:37:26:08:9b:c0:69:
         f2:14:8a:a8:a2:b2:79:bb:ca:b4:51:7d:a2:ae:ca:93:09:0d:
         c1:10:54:11:71:5a:1c:20:18:76:f3:15:1a:49:68:b5:bb:66:
         ea:33:39:c6:1a:44:cc:35:b5:2f:88:eb:6e:6e:f8:c3:5a:9e:
         ee:1d:b2:5e:e1:60:4c:e9:5f:97:30:a6:6a:7b:79:f4:98:b0:
         dd:d4:4f:f5:3b:7a:61:9f:12:c7:14:62:e8:74:f0:59:3a:78:
         a8:11:b3:58:f8:a9:ce:6a:cf:e5:ef:2d:de:1b:58:38:f0:57:
         b8:12:51:bf:df:b1:ac:0f:23:5b:de:03:d3:e1:b6:17:70:f5:
         54:41:e0:e6:94:69:ed:1c:54:0a:62:23:ba:25:bb:a9:44:12:
         b4:a8:37:93:f5:79:5b:93:b2:e6:b9:d4:b8:a1:b0:be:e7:97:
         c8:45:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:04:46 2025 by rpki-client