Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10029/v5cmum0xQsm4gI6oxL_DKknSOlM.roa
File:                     v5cmum0xQsm4gI6oxL_DKknSOlM.roa (raw, json)
Hash identifier:          OhJGCeeh6HbBFVpgH1RPg0TtMticP37Z9pchwBBw2Rg=
Subject key identifier:   BF:97:26:BA:6D:31:42:C9:B8:80:8E:A8:C4:BF:C3:2A:49:D2:3A:53
Certificate issuer:       /CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
Certificate serial:       34
Authority key identifier: 2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/v5cmum0xQsm4gI6oxL_DKknSOlM.roa
Signing time:             Tue 01 Jul 2025 01:40:25 +0000
ROA not before:           Tue 01 Jul 2025 01:40:25 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        202.189.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
        Validity
            Not Before: Jul  1 01:40:25 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=BF9726BA6D3142C9B8808EA8C4BFC32A49D23A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:a9:1b:de:8d:fa:12:b4:15:38:21:32:ad:
                    b6:a2:92:2a:7d:88:4c:0e:e6:48:37:4c:1e:2a:be:
                    4d:b7:6f:b3:89:13:5a:b2:46:35:d0:d6:45:97:8f:
                    b7:6b:c6:d1:69:10:79:cd:c0:c5:19:68:84:fb:89:
                    2d:45:b7:78:b0:30:88:38:a7:5b:ad:b3:df:aa:a5:
                    06:e0:76:15:fb:63:26:7b:b1:2e:33:d1:3f:7d:e5:
                    f6:b0:c3:77:69:f7:fa:e3:f0:fe:3b:3e:26:10:70:
                    99:67:80:9a:b9:da:2c:8a:4d:cf:eb:ca:28:86:9d:
                    d4:f4:10:82:44:bc:50:e1:b1:81:3f:b4:bf:5e:8e:
                    86:bb:96:c0:9a:40:f0:3e:2b:c3:b3:d4:5f:f9:1f:
                    d6:90:59:4d:87:61:b1:46:ae:2b:94:47:09:ff:54:
                    66:0d:ea:38:b6:44:45:57:44:9a:9b:12:b9:dc:bc:
                    a1:9f:e7:e7:67:38:90:ce:9c:8b:e7:fd:6d:d0:99:
                    1f:20:12:99:a8:af:ca:b0:40:87:ed:8e:e7:dd:87:
                    a3:5e:08:37:6d:0d:32:6d:2a:b3:41:0c:ca:f8:e4:
                    92:3e:05:d0:03:c2:20:0c:8d:f0:68:4e:a3:bb:5c:
                    b3:52:29:91:52:d7:1b:20:d2:2e:23:cb:b2:7a:5e:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:97:26:BA:6D:31:42:C9:B8:80:8E:A8:C4:BF:C3:2A:49:D2:3A:53
            X509v3 Authority Key Identifier:
                keyid:2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/v5cmum0xQsm4gI6oxL_DKknSOlM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.189.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:db:7b:0c:a6:07:1e:5f:19:98:42:b2:ac:a9:66:17:19:
         44:07:c5:a4:89:32:a1:94:16:eb:9f:bb:d0:8a:fe:a1:6a:a8:
         e0:bc:9f:6d:e8:14:e9:04:90:7a:cc:71:59:b2:0b:2f:64:e5:
         d4:47:8a:65:fe:9b:f7:0c:2b:83:92:35:47:92:9a:06:90:f3:
         76:ee:17:74:1d:00:29:d8:bb:7a:c8:71:7c:8b:cc:15:55:44:
         83:0a:29:11:fa:0c:d3:c7:e6:de:3e:af:bd:c8:68:92:ea:79:
         22:e8:ba:c7:32:df:f0:9a:91:84:b3:dd:2b:cf:bd:79:19:44:
         84:7f:da:e7:b2:a7:bd:b5:1f:00:d0:78:4e:2c:b9:f9:cd:15:
         7d:25:64:45:0e:49:f4:3e:2c:da:d0:c8:bb:d4:8e:a1:4b:29:
         29:c9:aa:90:72:c2:fc:4f:c2:94:f1:dd:b3:a3:98:f5:f8:4d:
         55:3a:76:b2:75:e1:00:b8:65:9c:d7:3c:95:83:86:7d:ea:34:
         cf:0c:b8:8b:e6:8e:1d:4d:dc:90:44:89:93:24:80:c9:33:17:
         a7:e6:b3:63:cd:69:75:0f:eb:1a:8d:c9:33:2c:99:d1:6a:48:
         18:7a:fc:f1:de:ca:15:b1:82:25:52:00:8f:5f:61:a5:d0:6a:
         a7:4c:d4:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 09:39:50 2025 by rpki-client