Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/dyXDE7CM8xmRoqSKRHd1WnJfCzg.roa
File:                     dyXDE7CM8xmRoqSKRHd1WnJfCzg.roa (raw, json)
Hash identifier:          bXlVekjNvIBElbbft2ULyWqvqE5+FeVJTtMZ6k/OGTk=
Subject key identifier:   77:25:C3:13:B0:8C:F3:19:91:A2:A4:8A:44:77:75:5A:72:5F:0B:38
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       99
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/dyXDE7CM8xmRoqSKRHd1WnJfCzg.roa
Signing time:             Thu 24 Jul 2025 00:46:51 +0000
ROA not before:           Thu 24 Jul 2025 00:46:51 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.230.48.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 00:46:51 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=7725C313B08CF31991A2A48A4477755A725F0B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:59:12:eb:8d:de:f7:bf:62:55:f8:61:21:
                    1d:24:11:e2:79:ef:ac:37:6e:66:b7:10:f2:18:df:
                    e3:33:0f:50:90:18:1d:db:31:0f:34:0a:85:73:b5:
                    65:7f:66:35:7f:f8:30:97:61:cf:81:cc:1d:33:ad:
                    83:58:c1:f9:5b:7c:70:df:90:c6:92:0c:3b:5d:26:
                    4e:d0:b4:5a:b0:a0:ee:6f:fa:78:6f:da:f7:85:97:
                    dd:5b:82:5d:96:bc:cf:02:5a:a0:13:c0:4d:37:2f:
                    12:8a:8b:de:47:e9:62:10:91:4c:40:00:0c:ed:ed:
                    53:d3:c8:10:49:d7:bd:76:63:65:82:74:c6:4a:c5:
                    de:7d:03:63:77:6e:61:7d:82:2f:85:51:e5:8c:91:
                    23:a7:8c:fe:08:ac:72:ae:7a:50:2e:6e:21:49:87:
                    9d:e5:05:fa:02:d6:a4:86:bb:29:ff:23:37:f5:db:
                    a9:9d:dc:14:65:c6:ba:61:eb:f2:ba:3f:35:e0:a8:
                    f9:43:49:a2:56:24:3c:63:f8:86:72:5b:b8:4d:8b:
                    82:00:8b:2e:a8:b9:4d:ac:bf:b0:82:69:ed:30:d6:
                    ff:c9:c9:c1:d9:e7:67:e7:87:11:44:3f:3a:f7:54:
                    95:f8:19:67:26:88:7b:df:f2:af:ea:cf:bc:c7:2f:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:C3:13:B0:8C:F3:19:91:A2:A4:8A:44:77:75:5A:72:5F:0B:38
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/dyXDE7CM8xmRoqSKRHd1WnJfCzg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.230.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:4f:e8:48:80:75:98:50:71:f7:c6:fd:91:47:bd:ad:a6:0e:
         f9:dc:5d:d1:60:cf:ef:9b:ef:c4:4f:e1:b2:45:c8:9e:19:43:
         b9:90:22:4b:1a:24:79:dc:cc:44:78:18:70:ab:8a:91:43:d1:
         e3:7d:20:43:5a:fb:6f:18:2f:a8:6c:10:d2:8c:6c:20:da:0e:
         7b:d3:ef:bf:59:1e:2d:b8:81:c4:30:01:83:d4:7b:a3:e8:e0:
         61:9c:16:fa:b2:f8:6b:e5:50:79:82:2a:d0:7e:f2:67:da:79:
         10:1a:6b:f5:e1:fd:77:0e:a1:2a:ef:75:ed:7d:cf:d6:7c:db:
         3e:35:4f:35:da:f7:e5:e3:5f:d5:49:22:36:06:57:db:44:3d:
         58:72:6e:34:9f:9a:a2:64:ae:b6:06:ff:4b:b2:b7:42:29:6b:
         0d:dc:83:15:4f:af:d7:a6:69:f0:55:84:17:87:91:af:6d:ec:
         40:13:f1:07:81:e9:b5:bf:8d:6f:51:aa:11:2f:eb:8b:a1:8b:
         ee:6b:86:5a:be:c3:b9:8b:43:88:63:61:a1:ba:2f:32:cd:04:
         c1:bb:62:49:49:92:b9:40:7e:41:f4:7f:1f:f1:94:47:e3:e2:
         d7:06:54:64:90:f8:48:40:e7:bd:da:dc:91:7d:db:05:23:ee:
         2b:9f:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:53 2025 by rpki-client