Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/Kdr5gpfNeSybKlPaP3frfdyWTg8.roa
File:                     Kdr5gpfNeSybKlPaP3frfdyWTg8.roa (raw, json)
Hash identifier:          aL1EDXjUcpBuAC0QENiH1tjRn2KibHmh2BO35nl5/eE=
Subject key identifier:   29:DA:F9:82:97:CD:79:2C:9B:2A:53:DA:3F:77:EB:7D:DC:96:4E:0F
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       6A
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/Kdr5gpfNeSybKlPaP3frfdyWTg8.roa
Signing time:             Mon 01 Sep 2025 01:33:21 +0000
ROA not before:           Mon 01 Sep 2025 01:33:21 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     2907
IP address blocks:        202.231.0.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep  1 01:33:21 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=29DAF98297CD792C9B2A53DA3F77EB7DDC964E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:40:94:0a:7c:7e:da:07:6c:f0:df:4e:38:
                    26:35:6f:6a:f8:6b:c4:f0:23:25:0f:72:bd:c4:2f:
                    70:40:92:73:a5:10:83:3e:64:47:a9:2c:62:56:6d:
                    e4:e8:0f:bd:02:26:e1:94:39:43:1a:c6:cb:e3:96:
                    7a:8c:78:fb:c4:7b:87:71:fe:db:3e:e6:a8:87:73:
                    62:46:e0:85:c8:a2:6b:76:51:2e:c9:77:73:f0:10:
                    de:78:35:33:8a:2a:de:60:a2:98:75:03:e3:4a:d2:
                    71:72:d4:3c:93:b2:21:c7:a5:34:f6:1a:1e:ac:50:
                    34:42:2c:2c:6b:69:3f:e6:11:6d:d2:18:d2:1c:1c:
                    a7:cf:0a:e3:6f:e3:89:23:1f:bd:d2:fe:c8:e0:89:
                    6f:0e:39:15:fa:42:17:05:9b:b3:c0:28:ba:27:ee:
                    47:80:30:1c:33:72:21:c7:fb:2e:17:f2:07:3a:db:
                    eb:ab:48:6b:a9:31:07:f1:92:9d:bd:78:ed:f0:e8:
                    c3:58:ed:d7:77:7e:59:d8:dc:10:1e:e6:27:50:8e:
                    4b:e4:f3:2c:fa:c6:a3:b0:8a:91:31:ce:1e:96:58:
                    10:50:25:41:b1:34:e9:86:82:eb:b1:1a:67:f3:d8:
                    57:9f:c8:d1:d7:61:46:c3:7b:d8:f4:b2:28:b3:db:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DA:F9:82:97:CD:79:2C:9B:2A:53:DA:3F:77:EB:7D:DC:96:4E:0F
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/Kdr5gpfNeSybKlPaP3frfdyWTg8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.231.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:da:c6:3a:c7:23:dc:62:b8:0c:0d:ff:86:55:19:57:ca:47:
         7b:6d:08:0b:46:57:bf:93:92:ec:1b:4f:02:92:19:1f:53:f4:
         cf:c5:4d:30:11:cd:88:c1:7e:ef:a9:70:3b:b4:c3:74:e2:0d:
         32:4e:f8:68:25:49:8c:f6:5f:68:97:01:0d:24:84:fe:88:fa:
         1c:e1:f7:59:28:a2:ac:ed:1e:18:aa:69:4a:7b:e2:dc:11:94:
         6a:73:be:02:97:a8:50:fe:79:82:4b:12:1e:79:0d:35:3e:80:
         af:d9:15:77:7f:57:ca:92:d9:ec:db:a2:40:4e:05:2e:06:0e:
         e3:07:27:3a:55:2e:e3:cb:93:00:20:b8:90:17:20:67:3a:80:
         2b:b1:ba:46:23:05:26:34:e3:4c:48:91:22:3c:28:e4:ce:e7:
         96:43:d2:82:ad:4d:33:08:ac:31:79:0c:4b:e6:ee:36:59:8c:
         a0:55:10:ee:96:f9:ff:bc:8c:b6:0a:16:2e:d8:54:7f:57:58:
         fa:fd:30:5e:bb:0a:58:f9:e1:e2:49:5a:10:14:ab:48:38:07:
         92:a3:23:04:80:e8:00:d1:ae:88:e4:5c:cf:51:69:53:d7:be:
         c9:22:1d:ba:58:f6:c3:d5:4f:1b:a2:ff:ce:67:76:bb:7d:16:
         32:90:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:23:36 2025 by rpki-client