Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/g32aT003L6iRUknVY6N9Vr5umgs.roa
File:                     g32aT003L6iRUknVY6N9Vr5umgs.roa (raw, json)
Hash identifier:          eQMox7wZY8o2fQv3UPf6HrI4NHfgseH/H5GUQluOMXQ=
Subject key identifier:   83:7D:9A:4F:4D:37:2F:A8:91:52:49:D5:63:A3:7D:56:BE:6E:9A:0B
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0114
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/g32aT003L6iRUknVY6N9Vr5umgs.roa
Signing time:             Thu 24 Jul 2025 02:13:07 +0000
ROA not before:           Thu 24 Jul 2025 02:13:07 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.228.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:13:07 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=837D9A4F4D372FA8915249D563A37D56BE6E9A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8c:d0:15:f9:60:0e:bc:e3:dc:a6:a1:28:ab:
                    e1:77:ea:46:f8:ab:06:37:17:13:5c:ee:e4:8e:9e:
                    1f:52:fe:0b:23:63:52:86:4c:79:27:5d:07:59:ea:
                    2f:37:8b:47:aa:3f:9c:16:87:1c:8f:2f:4b:f0:73:
                    10:59:53:e8:a5:a4:55:dd:fe:9e:2c:6b:b4:e7:d1:
                    cd:ab:e1:9e:5c:3f:3b:fc:b7:92:cf:99:e8:22:ac:
                    15:9a:d3:ee:83:a3:1a:cc:85:4a:3e:fc:83:45:b1:
                    ce:67:be:c1:26:50:d0:ab:06:9b:5c:7b:7c:96:6a:
                    1b:94:6f:0e:a8:1c:c6:c8:7a:8b:39:78:e7:99:33:
                    70:c1:e4:5c:b4:2e:fd:80:eb:67:d7:bc:b3:f6:74:
                    23:b5:5c:b6:19:97:2d:56:09:32:83:59:55:22:b3:
                    14:4a:61:69:8c:b1:c2:da:fd:74:c6:81:3f:f4:a4:
                    18:c3:1f:31:03:64:42:60:a7:ed:c5:13:e7:7a:ba:
                    f1:15:45:06:ae:80:b3:bd:14:dd:49:fc:3e:5b:f6:
                    d9:f8:74:88:63:34:08:22:4e:9c:3e:e2:a9:27:80:
                    27:35:47:91:af:e0:36:88:c1:56:1a:02:2c:34:17:
                    61:f2:85:89:c0:a3:7e:3d:5f:40:2b:40:c6:ed:c4:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7D:9A:4F:4D:37:2F:A8:91:52:49:D5:63:A3:7D:56:BE:6E:9A:0B
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/g32aT003L6iRUknVY6N9Vr5umgs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.228.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c4:6d:b3:56:88:74:03:c8:3c:00:7c:23:ae:bd:58:be:ca:61:
         06:59:1f:29:ad:41:e2:ab:8d:75:e2:eb:5c:8c:3b:00:f0:d7:
         7a:88:9c:e2:a0:64:de:85:17:ca:17:a0:49:37:3b:15:ab:22:
         c4:3c:84:97:35:7c:3d:7b:c0:38:c6:74:94:c9:e9:3c:b7:88:
         00:7d:3a:b1:6b:a3:5b:1b:9a:97:92:99:fc:eb:63:2a:2f:39:
         48:53:ee:31:6e:13:fb:2a:a8:a7:1a:71:d8:f6:06:50:34:3d:
         27:62:97:56:53:0a:93:bc:62:89:18:7e:dc:83:d2:13:13:6a:
         50:f6:34:86:c4:c9:5f:a8:cf:57:9d:10:9b:a6:e7:67:1b:54:
         01:70:fb:1e:c4:16:24:c3:b8:ef:9e:60:71:2f:4d:b1:4b:2c:
         f4:e8:2a:1a:4a:89:f9:c2:aa:35:08:e7:59:fc:c6:bf:c7:8e:
         e5:fe:1d:bd:f0:b9:22:05:08:e7:5e:a0:29:3b:4f:76:dc:3c:
         a3:00:cc:d8:54:26:9d:b7:26:0b:2c:e0:f0:50:3f:94:c7:15:
         8b:f9:99:0c:1a:26:ec:5c:e0:67:ff:f3:3c:db:01:b4:6a:c7:
         fe:ea:fd:c1:11:db:dc:4a:ab:32:d2:d2:46:53:94:f4:fb:64:
         17:4c:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:22:07 2025 by rpki-client