Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/dTsxizJsPojPIjPFUwohUewsros.roa
File:                     dTsxizJsPojPIjPFUwohUewsros.roa (raw, json)
Hash identifier:          JlMk3vnEJpdv0iQYVq6drCt9XND0ozM12AC6golHdJ8=
Subject key identifier:   75:3B:31:8B:32:6C:3E:88:CF:22:33:C5:53:0A:21:51:EC:2C:AE:8B
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       87
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/dTsxizJsPojPIjPFUwohUewsros.roa
Signing time:             Mon 01 Sep 2025 06:20:16 +0000
ROA not before:           Mon 01 Sep 2025 06:20:16 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        157.67.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 09:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Sep  1 06:20:16 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=753B318B326C3E88CF2233C5530A2151EC2CAE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:d2:0b:da:0d:a9:d3:f5:29:15:b9:d3:ab:
                    cc:a4:39:07:11:2a:80:89:04:30:62:68:c4:9f:b4:
                    55:a7:2d:41:c7:ec:60:a6:a0:53:1f:10:c0:e4:ec:
                    8e:f2:de:72:26:68:68:64:ce:a7:65:4d:c8:c5:a0:
                    1a:b8:b4:ae:7c:52:d3:87:a9:5f:21:ac:ca:56:bc:
                    90:ef:3f:c5:10:8d:1b:e3:ad:76:ba:e9:ac:fa:ca:
                    de:89:10:77:1a:ba:11:03:cb:68:48:0e:52:1e:d8:
                    84:e9:77:68:99:4a:4d:0f:bb:d8:6d:d7:62:3c:f3:
                    ab:b6:c6:d2:31:27:5e:dc:60:85:ed:38:74:1a:fc:
                    f6:49:a9:84:a9:74:da:9f:d8:76:b8:9e:0a:1d:d2:
                    fd:82:f5:47:20:8c:4d:34:1f:a6:93:01:73:8c:c1:
                    ea:e1:5f:33:51:32:bf:77:f7:59:b8:39:89:c2:d8:
                    2c:6a:40:8c:27:6e:c3:6a:70:58:92:b6:dd:ad:3b:
                    73:07:90:c7:11:2d:df:71:e7:0c:d7:92:fe:0c:d2:
                    b2:72:70:cb:24:46:b5:30:82:b0:3a:87:6d:11:a7:
                    da:16:f2:bc:df:e2:b2:c2:38:5b:77:14:35:a1:58:
                    e7:70:44:b4:ac:85:3b:48:9d:40:ed:bd:a5:35:1f:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3B:31:8B:32:6C:3E:88:CF:22:33:C5:53:0A:21:51:EC:2C:AE:8B
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/dTsxizJsPojPIjPFUwohUewsros.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:c7:13:06:06:5b:02:af:39:3c:89:d0:32:87:e0:13:26:8d:
         cc:40:8f:69:d7:5b:ac:8b:aa:80:27:30:cb:db:e5:80:4f:13:
         6f:ae:9a:45:5b:e7:e2:50:3a:20:a3:74:d4:13:7a:36:8d:5e:
         4b:8d:d6:9e:26:39:07:c0:2a:a1:a2:4f:29:99:c6:26:8b:7c:
         66:85:2d:ec:dc:44:a3:e2:f5:7d:b4:c3:04:c9:b8:6a:04:73:
         85:0e:9f:18:2d:8b:8f:03:4e:7f:20:09:40:b8:62:71:e7:52:
         84:9c:f6:23:c7:2c:db:a4:bf:f5:76:d5:15:e8:32:ac:4a:6d:
         80:ae:93:2e:14:66:6d:d7:50:45:9c:ed:63:ca:2a:48:e8:7a:
         e8:3d:0c:48:d3:e8:b3:ec:78:ba:0b:99:ba:37:90:55:32:53:
         a6:17:89:0c:0a:82:8f:0b:01:c9:bc:03:c2:d1:e0:a2:d1:81:
         17:1e:bb:ba:6a:dd:ab:57:d3:1d:08:34:46:f4:2d:f3:82:af:
         78:ae:e5:e1:ea:49:8c:15:37:54:c0:68:23:bf:0d:b6:6b:ca:
         3f:36:b1:66:e3:04:56:9a:25:df:b4:00:55:23:28:e0:f2:8a:
         56:82:4b:b9:c6:84:41:5d:cc:50:3c:b5:d5:48:d3:c5:e2:98:
         cc:31:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 13:17:39 2025 by rpki-client