Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/MER8LNzU09kCWHjAOu92BkDwC_0.roa
File:                     MER8LNzU09kCWHjAOu92BkDwC_0.roa (raw, json)
Hash identifier:          r1mc4jT3eHY9yOaW544BBRBRFbYv13FaAb5uw+Hq+fE=
Subject key identifier:   30:44:7C:2C:DC:D4:D3:D9:02:58:78:C0:3A:EF:76:06:40:F0:0B:FD
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       71
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/MER8LNzU09kCWHjAOu92BkDwC_0.roa
Signing time:             Mon 01 Sep 2025 01:33:25 +0000
ROA not before:           Mon 01 Sep 2025 01:33:25 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     2907
IP address blocks:        202.241.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep  1 01:33:25 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=30447C2CDCD4D3D9025878C03AEF760640F00BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:73:03:7e:15:ea:88:6e:2c:d4:b2:76:e5:
                    55:9b:3e:44:49:cb:64:5e:d9:f4:2d:1c:d2:86:fc:
                    ce:39:84:37:0d:d5:f7:d2:36:12:1a:ec:e5:ff:64:
                    ee:23:d2:cf:4c:44:e4:91:f1:eb:29:c1:e5:a6:25:
                    2b:df:87:64:46:d8:87:b7:fb:b4:66:b3:b0:b7:67:
                    fc:32:ed:8c:a3:41:de:c1:73:54:ef:96:ce:e5:bf:
                    2a:b0:e6:f0:b1:93:90:5a:f2:c8:e8:a8:41:4d:bb:
                    d5:bf:57:4b:3c:90:f8:1d:43:3d:4d:f4:2c:53:71:
                    87:fe:4c:7b:13:39:b1:e6:70:55:7e:44:f4:0e:5a:
                    4b:4c:78:80:35:97:8e:7d:12:fa:29:2c:35:7d:1a:
                    f0:db:ea:39:62:ec:82:bd:25:a3:3a:10:94:1a:86:
                    99:64:fc:b7:23:b0:14:09:0d:bc:17:12:84:35:17:
                    5f:56:03:4e:43:b9:c8:d0:23:c0:2d:7f:ac:24:c7:
                    c7:99:fd:09:64:0b:19:46:ad:85:17:9b:61:60:19:
                    63:15:2d:16:1b:9e:b7:64:cb:25:57:22:36:cd:94:
                    cc:7b:1a:de:d7:11:71:d3:22:0f:06:dc:72:1f:bc:
                    ea:6c:e0:2b:65:8e:64:83:66:36:cc:cb:29:6c:a3:
                    68:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:44:7C:2C:DC:D4:D3:D9:02:58:78:C0:3A:EF:76:06:40:F0:0B:FD
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/MER8LNzU09kCWHjAOu92BkDwC_0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.241.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:6f:5a:f2:bb:e6:68:ad:07:be:72:08:75:47:43:e0:06:dc:
         43:4a:11:6b:14:df:f7:54:69:8d:17:4c:1e:1b:05:ab:09:8e:
         50:a1:08:4e:c4:32:6e:54:34:5a:88:23:c9:9b:fd:8c:3a:15:
         4b:b7:07:93:d6:67:d6:01:83:22:90:9f:1a:ed:f4:24:5c:5b:
         cd:4f:53:50:ba:4b:a6:c0:f4:e1:55:f6:b7:66:2f:b1:bd:46:
         2e:dd:55:81:59:90:11:47:5a:e4:2a:b6:81:88:23:0e:da:47:
         73:c8:0c:d0:35:d8:3a:cb:3d:31:0d:ed:92:4f:ca:7c:2f:0a:
         a4:95:65:eb:4a:b8:bc:77:86:e2:f0:ff:62:06:61:08:ca:6f:
         c6:8b:d0:a0:96:8f:de:85:36:4f:24:86:ae:92:ae:23:30:62:
         aa:29:e5:9e:c4:23:8c:d8:0d:f0:7f:b5:97:c4:a7:6c:88:b8:
         15:b0:2d:af:88:7d:9c:3f:8c:6c:81:6e:cb:e0:b1:b0:ec:ce:
         41:d9:7d:33:20:3c:41:02:5e:14:c0:2c:f3:8e:00:d0:e7:6f:
         6b:66:04:02:6b:a2:c5:67:c3:31:da:ea:15:3e:fa:70:2b:a0:
         26:e7:1d:13:13:48:6a:1c:aa:31:45:66:18:1d:1a:4d:d2:6b:
         cb:d7:6a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:20:30 2025 by rpki-client