Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/JoKMwpra0DOx0lBVKqXVXCL4ZuU.roa
File:                     JoKMwpra0DOx0lBVKqXVXCL4ZuU.roa (raw, json)
Hash identifier:          auQ+vR2fH+Hj8mIFFEtatV0kBZjD5gvuba/5TGxvD28=
Subject key identifier:   26:82:8C:C2:9A:DA:D0:33:B1:D2:50:55:2A:A5:D5:5C:22:F8:66:E5
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       69
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/JoKMwpra0DOx0lBVKqXVXCL4ZuU.roa
Signing time:             Mon 01 Sep 2025 01:33:19 +0000
ROA not before:           Mon 01 Sep 2025 01:33:19 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     2907
IP address blocks:        202.211.0.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep  1 01:33:19 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=26828CC29ADAD033B1D250552AA5D55C22F866E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fb:5f:4e:a2:08:41:80:59:84:54:7e:55:58:
                    77:8c:55:04:3d:30:2f:6b:f0:16:43:f3:27:40:3a:
                    9f:3c:03:be:db:ac:bb:93:82:d3:63:ad:95:ea:fe:
                    74:a8:06:82:54:65:9b:c7:ae:df:27:4a:33:de:90:
                    e5:da:13:e2:de:54:b5:24:ac:2f:ff:2b:8a:d1:fd:
                    f2:d5:97:8e:9f:ed:b6:52:72:b6:ab:6b:8e:cb:d8:
                    40:3b:f4:a7:06:d9:ef:d7:62:d7:1a:ef:0d:1c:95:
                    f2:4e:66:eb:ca:fa:d3:e6:7f:68:fe:c5:a9:f2:9f:
                    0d:61:ae:2d:16:ed:10:d5:3d:da:27:d2:f3:cc:1d:
                    46:f0:56:12:75:6b:31:ea:f6:b8:7f:63:36:0f:fa:
                    5f:6c:a6:8b:ab:0a:c7:cf:78:c8:74:a2:54:26:7d:
                    68:02:38:af:c5:95:6e:10:d4:d5:0f:36:73:61:4d:
                    39:e7:01:08:1a:6c:fb:46:68:3a:4a:17:d0:e7:bd:
                    cb:e2:e4:b7:40:db:7a:68:bf:6b:9f:22:58:b1:bd:
                    4c:fa:11:c2:c4:2a:8c:4f:32:a8:0f:52:bc:79:7b:
                    5e:c9:10:3b:56:37:58:2e:46:90:18:b4:28:1d:83:
                    dd:ba:5a:b9:1a:74:5a:b5:f9:ac:a1:bd:27:b8:db:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:8C:C2:9A:DA:D0:33:B1:D2:50:55:2A:A5:D5:5C:22:F8:66:E5
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/JoKMwpra0DOx0lBVKqXVXCL4ZuU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.211.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:b1:88:8b:1d:f4:3e:11:1a:59:b7:e8:35:b9:e0:f3:9f:
         e4:02:c7:99:cb:dd:d1:1b:2c:b4:bf:0c:a6:16:21:92:0a:28:
         23:80:ed:55:31:25:52:09:1a:96:a2:30:6a:28:6a:62:24:39:
         67:9a:e1:73:6e:6c:84:74:31:12:50:51:4a:a7:bd:96:2d:4d:
         35:b8:d3:c3:a9:c6:25:84:fb:5a:f2:f7:33:58:9d:15:7a:11:
         7b:70:6d:fb:17:a6:be:1b:c1:9d:9c:6b:d1:24:07:17:59:83:
         5a:9b:dc:3a:87:e6:e4:a2:06:b4:ca:07:e9:53:fd:67:6a:98:
         00:69:47:36:86:84:7b:79:59:7d:0d:97:b9:ab:76:6a:c1:ef:
         94:10:d8:d8:ba:2f:23:5d:1f:29:6b:a9:d2:b9:6c:66:f8:84:
         51:9f:ed:94:94:94:41:f2:e6:29:59:b6:75:95:8b:84:cf:f4:
         ec:8e:25:e5:d9:6c:47:08:40:0d:26:b2:78:1e:3c:14:f4:27:
         45:7d:2a:f7:01:44:dc:3b:b9:f5:bc:2e:89:61:86:3c:46:aa:
         a2:2b:dc:e3:2a:86:81:89:e9:79:92:49:ab:2e:b7:78:35:0f:
         d9:b4:22:6c:96:1f:5e:71:d4:d8:5b:50:5e:95:44:13:d8:df:
         6c:63:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:23:35 2025 by rpki-client