Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/crRXLvXWyw3_KFUPOMrMiqrEWVo.roa
File:                     crRXLvXWyw3_KFUPOMrMiqrEWVo.roa (raw, json)
Hash identifier:          mVAgusId6vg9DatWndxLxnp3MFPLorNYd6hE2yDaZZc=
Subject key identifier:   72:B4:57:2E:F5:D6:CB:0D:FF:28:55:0F:38:CA:CC:8A:AA:C4:59:5A
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       86
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/crRXLvXWyw3_KFUPOMrMiqrEWVo.roa
Signing time:             Fri 01 Aug 2025 01:29:29 +0000
ROA not before:           Fri 01 Aug 2025 01:29:29 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18144
IP address blocks:        222.231.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 21:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Aug  1 01:29:29 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=72B4572EF5D6CB0DFF28550F38CACC8AAAC4595A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:12:6f:b4:d7:04:da:95:33:ad:1a:2a:c7:ab:
                    76:8b:d8:9f:97:03:f0:b4:bb:a5:d1:cf:da:a4:0f:
                    84:26:96:97:cd:d3:96:b7:1c:df:2d:52:ed:e5:ac:
                    e2:54:a5:31:36:cc:89:66:08:b0:46:77:ec:04:bb:
                    ad:91:56:05:b9:6c:75:92:0a:9c:70:a7:1e:ef:ec:
                    cd:bd:14:3d:40:cc:90:1a:d3:05:89:5c:4b:fc:a4:
                    d0:22:38:3c:a0:56:51:48:d3:e6:0e:23:c7:19:37:
                    8e:e7:d0:e8:c4:3f:25:2a:59:3f:1d:1b:b1:0b:3d:
                    51:3e:98:d4:e2:75:71:ed:6d:f7:30:21:ec:76:4c:
                    cf:82:cd:78:44:e4:64:bb:83:1f:eb:09:c2:41:e2:
                    3b:59:18:2c:ff:1b:ae:72:22:1a:d3:7a:b5:e9:b2:
                    76:64:92:86:a0:9b:d4:0a:98:63:c3:10:0e:90:6f:
                    3c:ed:65:e3:11:47:5d:56:8d:b9:52:d8:72:26:3e:
                    3d:24:09:97:63:a2:ee:a7:3b:2a:c7:ec:dd:65:f8:
                    8f:7e:06:40:6c:95:9c:17:6a:f0:62:49:e2:e0:26:
                    b4:16:81:30:5d:63:31:c4:50:5e:a7:6c:d9:99:2c:
                    5e:59:79:58:10:22:a8:24:7e:ab:16:fe:f4:16:6d:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B4:57:2E:F5:D6:CB:0D:FF:28:55:0F:38:CA:CC:8A:AA:C4:59:5A
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/crRXLvXWyw3_KFUPOMrMiqrEWVo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.231.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:6b:9f:93:06:d3:cc:bb:3e:57:07:8b:9b:22:df:b2:63:
         16:3d:fb:87:0f:a5:2b:f8:7b:cb:89:c1:d8:1a:e0:f8:bf:18:
         a4:43:95:ec:20:01:28:44:f2:d6:05:74:e4:af:37:dd:88:94:
         b2:d1:ee:05:cf:bc:c7:d6:53:e5:3d:f1:f6:e6:74:98:c3:fe:
         50:8b:9a:05:41:60:5d:b5:aa:98:4b:85:ae:5a:4d:76:bf:06:
         24:7f:31:e8:68:0c:b1:c9:68:6a:b4:f7:1f:3c:38:bc:f2:56:
         e8:0e:15:2a:48:28:5e:9e:f5:90:57:15:29:6e:c3:f3:ee:36:
         c1:8b:5c:15:27:e1:de:06:18:8b:87:ef:59:21:9e:98:ca:b5:
         a9:ec:43:76:c7:e7:48:50:dd:c5:14:17:86:3a:ae:af:ea:b8:
         98:be:b6:8f:1a:5b:b0:46:46:78:66:6f:ee:5f:f5:d8:3d:5d:
         10:0b:d6:1d:6a:71:d9:ea:88:82:3d:6f:1f:f0:83:dc:48:16:
         2c:2c:73:22:62:27:10:49:c3:22:d4:ed:8c:0a:4a:68:78:d5:
         dd:e5:5e:5c:54:a8:b1:0f:a3:27:24:af:56:2f:28:57:5e:d3:
         fa:7c:69:c4:dd:c8:f9:1d:5c:7b:b0:33:65:25:3c:db:c1:5d:
         d3:60:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:40:16 2025 by rpki-client