Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/rqmvioRs-QAAt2aoca4Dg3rQhy4.roa
File:                     rqmvioRs-QAAt2aoca4Dg3rQhy4.roa (raw, json)
Hash identifier:          gCn2NMeQr3e0ajnr7LrQWaUecAV/wgjcm0idX8vM0X4=
Subject key identifier:   AE:A9:AF:8A:84:6C:F9:00:00:B7:66:A8:71:AE:03:83:7A:D0:87:2E
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       8B
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/rqmvioRs-QAAt2aoca4Dg3rQhy4.roa
Signing time:             Thu 24 Jul 2025 00:30:34 +0000
ROA not before:           Thu 24 Jul 2025 00:30:34 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.218.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 00:30:34 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=AEA9AF8A846CF90000B766A871AE03837AD0872E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:5b:98:8b:a9:0c:7b:60:af:93:b9:67:df:
                    d0:89:4d:1a:16:35:eb:d6:2f:11:2d:de:d0:58:41:
                    b7:a4:5a:59:9b:08:d5:77:ad:e4:0e:cb:c4:68:13:
                    35:b5:53:1a:6a:ee:3d:81:42:34:49:12:c4:64:f9:
                    00:64:ed:3e:b7:99:0d:4c:b5:0c:bd:e6:83:cb:f8:
                    f4:97:43:7d:8a:22:c9:ee:f3:df:02:a0:98:54:2c:
                    1c:ed:e4:4b:93:6d:9e:3f:bb:57:b6:42:26:4d:0b:
                    6b:6a:81:24:e3:49:cf:4d:71:f8:73:56:bc:6e:c5:
                    52:6f:3a:ee:c4:70:17:84:07:9e:bd:96:ec:cf:11:
                    bb:67:c2:ec:f9:7f:b7:f7:69:eb:f4:2b:ec:76:ce:
                    6b:bf:84:7d:a0:91:e3:36:85:c5:f7:ec:ff:73:f3:
                    42:b3:17:9f:ba:9f:8d:9c:20:dd:ab:ec:6d:4e:62:
                    89:c5:0f:d8:81:a8:d5:0d:68:c5:71:5b:d0:d8:4c:
                    46:a0:c5:5a:fa:8e:5d:e9:43:4a:10:84:33:ec:9c:
                    84:16:7d:b3:e9:d9:42:bc:31:4f:b1:e7:1d:ef:d5:
                    f7:66:df:36:5d:6d:d3:b6:12:46:57:1d:45:a3:8e:
                    be:03:cf:6a:6b:18:cb:25:f3:58:3a:d6:61:be:8a:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A9:AF:8A:84:6C:F9:00:00:B7:66:A8:71:AE:03:83:7A:D0:87:2E
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/rqmvioRs-QAAt2aoca4Dg3rQhy4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.218.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:32:8c:ea:df:ef:60:42:6e:99:1d:ba:84:c0:2d:25:ff:e2:
         65:51:62:ad:ac:0f:5e:49:62:a4:bb:f8:2d:f3:04:16:a0:35:
         11:b8:20:be:33:30:e2:e1:63:68:15:9f:ff:46:01:d3:62:f9:
         ca:c5:e3:52:df:3a:bb:14:37:36:f8:28:6d:68:85:26:a0:06:
         e5:cd:b9:85:0a:77:dd:74:43:b0:48:3b:ca:d6:6e:e9:70:f9:
         6e:c8:e1:77:16:38:4a:93:d5:80:59:23:5e:c6:ab:0c:80:5b:
         0c:18:7b:58:24:c3:55:16:34:b4:b7:66:a9:18:12:a4:98:f0:
         81:79:13:37:49:17:e2:01:4b:00:8b:ad:37:f8:96:5d:5e:06:
         8a:f5:d3:bb:95:b8:81:de:17:d3:ce:4f:69:ed:54:c3:c4:29:
         b6:17:1f:e9:e2:ec:d1:87:66:de:00:5e:7f:c6:c2:a9:58:20:
         f0:19:e0:da:e6:87:3d:15:52:28:45:f9:d7:a6:42:58:02:ce:
         5f:60:4f:b3:8c:a9:4d:6b:43:d4:9a:ef:de:c4:5e:5f:83:1b:
         35:1c:50:31:41:6b:cc:8d:4e:eb:eb:f5:39:1f:a9:2f:40:a8:
         2c:ff:aa:75:06:05:05:18:c6:5f:08:c5:a2:91:34:f5:7f:b7:
         f9:9d:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:54 2025 by rpki-client