Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/Cpyy8-4H6PCRLLMgWggRfb78rag.roa
File:                     Cpyy8-4H6PCRLLMgWggRfb78rag.roa (raw, json)
Hash identifier:          xs7saMrNz5MC3/RkcQlR2xHhqb8e9eRKcE1CuUk3QtE=
Subject key identifier:   0A:9C:B2:F3:EE:07:E8:F0:91:2C:B3:20:5A:08:11:7D:BE:FC:AD:A8
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       84
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/Cpyy8-4H6PCRLLMgWggRfb78rag.roa
Signing time:             Tue 01 Jul 2025 01:34:17 +0000
ROA not before:           Tue 01 Jul 2025 01:34:17 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     131079
IP address blocks:        115.69.239.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Jul  1 01:34:17 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=0A9CB2F3EE07E8F0912CB3205A08117DBEFCADA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:42:6c:bc:ac:6a:81:68:6f:c1:f8:2c:09:4a:
                    36:7e:2a:5d:96:b9:6d:71:d9:9a:40:bd:33:8a:58:
                    63:c7:83:97:eb:c6:4b:54:49:05:61:9a:eb:d0:c1:
                    65:49:87:33:e9:6e:ac:b7:8f:ee:f7:42:51:39:40:
                    7a:34:bd:ee:63:e7:8e:b5:37:dc:dc:7e:28:2e:dc:
                    d4:ec:15:c3:c5:ff:64:41:52:7a:ff:fa:3d:b6:3d:
                    a6:c7:11:f4:ae:fc:41:18:94:07:1d:d1:74:cd:b9:
                    0b:36:c7:85:08:df:e9:b8:5f:34:98:79:ea:a2:a1:
                    4c:bd:77:f0:53:3e:1d:17:5e:84:6e:46:34:87:2f:
                    07:bd:00:fe:2e:79:4b:64:78:14:f9:c8:79:c3:e0:
                    4a:9d:fd:30:4c:31:5c:0a:e4:9f:30:37:8a:dc:9d:
                    2d:3b:38:80:46:f8:5d:92:5d:7a:e4:7d:61:34:c3:
                    09:6f:2f:4f:47:fe:8a:db:29:bd:a6:b9:8a:94:49:
                    54:5b:8c:66:58:ae:fc:48:54:fa:c4:ad:47:19:e8:
                    9f:b5:31:19:1c:86:a7:63:90:ed:c3:73:46:d9:4c:
                    8e:98:68:e1:14:69:6f:2b:9f:f1:15:09:78:a6:99:
                    4f:d7:03:d3:cc:d6:dc:66:6c:7a:11:ef:ee:b1:81:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9C:B2:F3:EE:07:E8:F0:91:2C:B3:20:5A:08:11:7D:BE:FC:AD:A8
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/Cpyy8-4H6PCRLLMgWggRfb78rag.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:80:41:7d:c6:56:8d:3c:6f:e5:e0:a4:0f:83:14:c2:a3:1f:
         6b:1a:c4:3c:9a:73:2e:da:67:a4:97:e0:55:e4:1b:58:74:83:
         77:0d:d6:7c:9a:db:0d:e6:40:8c:3b:dd:9e:f4:c5:2b:ac:c0:
         f8:f9:7c:40:ac:ff:1e:03:e0:30:b5:4b:97:e9:58:39:4f:5c:
         5a:d3:88:3d:da:9e:82:d4:85:fe:0d:18:dc:07:43:f1:39:cc:
         d4:43:67:91:69:43:3a:53:a4:2d:b3:08:1d:4d:25:89:9c:6d:
         58:22:e2:2b:51:16:44:cb:d2:ee:6f:24:13:c0:f5:28:d7:08:
         3f:fb:79:d0:d1:4a:e6:8e:53:00:dc:e2:0b:29:65:d2:2b:93:
         7f:b0:e6:a3:ab:5a:82:e6:12:5e:cc:43:cb:cd:bb:bb:6e:8f:
         8e:5d:53:8c:27:9c:15:16:ef:32:12:6c:5f:6e:c2:92:e8:02:
         d9:4b:e6:62:98:59:ae:49:d4:ad:7c:e6:d7:c3:92:d0:ae:8c:
         17:ff:bd:f8:26:5a:4b:08:1f:85:66:ac:a4:de:32:bc:b6:52:
         90:45:47:3e:5d:f2:40:3a:ce:cb:1a:d5:5a:71:ea:4b:3c:c7:
         e1:6a:01:0c:79:20:78:07:77:7d:f0:ae:75:7b:23:b6:0d:cc:
         e6:2c:09:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:07 2025 by rpki-client