Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/6ovZIHGr_dgFPtK03QlxNx19Ho8.roa
File:                     6ovZIHGr_dgFPtK03QlxNx19Ho8.roa (raw, json)
Hash identifier:          xEKkTauWvZUe5V6d749iNqWuJecJPj9To+/05dPOOmE=
Subject key identifier:   EA:8B:D9:20:71:AB:FD:D8:05:3E:D2:B4:DD:09:71:37:1D:7D:1E:8F
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01F9
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/6ovZIHGr_dgFPtK03QlxNx19Ho8.roa
Signing time:             Mon 01 Sep 2025 01:29:24 +0000
ROA not before:           Mon 01 Sep 2025 01:29:24 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     32787
IP address blocks:        210.130.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 22:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:29:24 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=EA8BD92071ABFDD8053ED2B4DD0971371D7D1E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:d6:a5:94:9e:d9:74:0b:79:c1:03:02:2c:
                    1c:2f:5c:2b:0b:14:c1:f2:8a:f6:c0:27:1a:ce:24:
                    d0:ef:8c:4a:57:b3:a5:b5:f2:9e:9d:53:68:bd:bb:
                    56:79:6f:3a:c6:bd:1b:e0:28:e5:10:21:92:2a:64:
                    b4:b0:fc:e4:d6:8e:e2:18:d4:f5:7b:e0:2a:eb:7b:
                    df:8c:82:f4:ef:b6:0c:50:e9:0f:87:90:35:25:64:
                    9a:17:85:27:8e:73:26:39:61:ce:c6:92:d2:a5:f8:
                    a4:60:1b:c6:f3:20:51:79:59:d9:2e:c7:60:49:b4:
                    30:98:d0:e7:c6:11:f0:a4:bf:ca:b0:a1:b9:75:68:
                    69:12:dd:f2:a3:4b:2d:25:75:24:7b:84:83:c3:fb:
                    cc:ff:9e:6a:e5:80:16:a6:c7:58:b7:49:16:9e:fc:
                    06:e5:8b:8e:ad:93:48:93:4e:d3:bd:10:62:16:46:
                    4f:8a:98:b4:36:8b:73:d4:ee:cc:05:c6:00:00:9f:
                    e2:58:a4:df:03:19:fe:b7:fd:f2:57:32:14:44:6c:
                    06:02:99:a2:a5:38:44:39:26:dc:b4:06:6e:18:b7:
                    2b:a0:af:d6:a8:8f:ab:de:b1:d4:16:86:09:1a:6f:
                    18:ec:2f:04:05:e3:c4:47:4c:1a:10:99:b1:19:0a:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8B:D9:20:71:AB:FD:D8:05:3E:D2:B4:DD:09:71:37:1D:7D:1E:8F
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/6ovZIHGr_dgFPtK03QlxNx19Ho8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:32:90:86:99:6a:60:a1:31:1f:bd:de:ab:ed:79:70:af:04:
         56:53:8f:74:6b:b5:75:ea:fd:a4:47:78:bb:33:7c:9a:54:0c:
         33:34:09:a3:a5:d8:af:e0:4d:86:47:d4:a4:34:33:93:12:fb:
         a8:e1:20:69:3f:30:72:91:10:86:23:24:ff:85:67:4d:32:e7:
         8f:b9:85:89:b9:98:1e:80:a7:d2:96:dd:e6:7c:b7:e4:5b:c2:
         63:ba:23:a2:96:01:d3:e2:87:29:df:b3:3b:5d:db:04:84:d7:
         a2:c9:12:f2:c4:18:23:0b:a9:5f:f8:41:f8:bd:3f:31:92:25:
         12:db:6f:e3:92:cd:1e:fe:70:5d:8e:d5:a9:b1:be:87:68:e4:
         20:92:04:63:ac:b9:33:a7:c0:16:72:31:0c:fe:4f:37:6b:ca:
         b5:38:2b:18:7a:eb:90:f7:ca:d3:88:63:78:27:29:03:5a:a9:
         f0:10:98:27:19:f9:f6:4d:2f:5e:66:ff:26:9c:e7:96:be:fb:
         48:10:30:d2:4b:7e:8d:01:f6:01:ee:a6:13:02:8b:14:e8:85:
         be:e0:2c:89:81:a0:bd:4b:76:cb:b7:c5:af:f4:5d:a9:04:29:
         54:3c:fb:17:2c:8f:ad:0a:53:a3:1c:05:49:09:18:23:e1:e4:
         ea:a8:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:53:05 2025 by rpki-client