Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/TYlEkGq0LY2kodHeG10cOzJ_QRE.roa
File:                     TYlEkGq0LY2kodHeG10cOzJ_QRE.roa (raw, json)
Hash identifier:          aI0RUfT5hXL3IR9I7a+n4QYtBWy0pgUtbVH1S3IkcOo=
Subject key identifier:   4D:89:44:90:6A:B4:2D:8D:A4:A1:D1:DE:1B:5D:1C:3B:32:7F:41:11
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       83
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/TYlEkGq0LY2kodHeG10cOzJ_QRE.roa
Signing time:             Tue 01 Jul 2025 01:34:17 +0000
ROA not before:           Tue 01 Jul 2025 01:34:17 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     38644
IP address blocks:        115.69.238.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Jul  1 01:34:17 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=4D8944906AB42D8DA4A1D1DE1B5D1C3B327F4111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d6:2e:16:e2:6d:28:42:4e:84:bb:d7:b9:39:
                    2b:9a:49:8d:e1:f6:2f:1d:11:34:ac:af:82:46:1f:
                    0f:92:7e:d6:fb:18:6f:2d:08:45:6c:55:3d:9f:22:
                    1f:e9:16:71:f2:a5:92:44:ba:f2:35:f4:41:2f:92:
                    63:c2:e9:15:57:81:48:b4:38:f0:42:dd:7a:58:68:
                    c8:49:2d:64:d0:65:4d:cb:c7:7b:c7:77:8d:81:6e:
                    79:ab:04:93:35:75:3b:23:46:14:22:61:b1:14:93:
                    83:fc:79:ef:9c:f3:45:2f:42:ca:9b:b9:c2:7b:8b:
                    d5:ae:17:62:d3:7b:fc:93:47:18:8e:10:99:6d:51:
                    7d:02:aa:00:a5:db:de:b9:2d:52:fe:be:b3:7a:c9:
                    9b:ef:d1:d2:57:b3:53:3a:e8:7b:87:cf:7f:02:a6:
                    06:6b:f1:59:99:2c:3d:d2:ed:b6:0c:bd:75:ae:5c:
                    fd:ab:ba:76:cb:57:71:45:68:74:2b:dd:77:8a:a1:
                    87:b2:43:a4:27:8b:85:57:fc:d5:a4:1a:c9:e1:fa:
                    87:e7:db:14:e6:de:ef:2f:57:df:98:f0:c1:b1:73:
                    a5:ea:61:d8:c8:a7:da:2c:91:13:ef:80:8b:3a:32:
                    42:b0:2d:7e:08:d5:95:77:79:68:46:51:1a:a9:2a:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:89:44:90:6A:B4:2D:8D:A4:A1:D1:DE:1B:5D:1C:3B:32:7F:41:11
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/TYlEkGq0LY2kodHeG10cOzJ_QRE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:88:4f:be:58:00:68:a4:bf:61:b4:52:86:1a:38:79:4d:a1:
         fd:7d:ea:67:7d:09:09:c2:90:fc:80:be:d1:79:69:45:09:8b:
         a3:27:4a:e6:b8:b8:7e:9c:b5:38:96:45:84:01:b7:0f:98:2a:
         95:66:50:bc:f8:a4:52:db:54:4f:c3:63:c9:08:79:b7:53:1b:
         2e:d4:25:c6:13:ec:b7:47:de:23:92:63:00:63:50:7a:f0:36:
         8d:3f:4c:23:03:de:5f:a3:94:22:6c:2c:b4:5a:4d:6e:d5:a6:
         61:e8:13:3d:dc:bc:dc:c9:9f:74:eb:37:9d:8d:91:76:37:7f:
         ce:6d:03:75:65:8d:3e:d2:a6:94:e1:c7:f2:40:9d:3c:af:75:
         d6:fd:4e:3e:b9:44:03:e0:5f:ae:9a:d2:c2:ae:1d:c4:ff:65:
         e8:68:f7:a8:76:8d:05:f3:ce:48:8b:50:ca:89:b7:66:b0:81:
         89:45:fb:5c:af:ec:1b:de:f4:b5:65:d0:7c:bf:62:18:14:85:
         7f:ff:ff:fd:2c:e2:e5:12:40:6f:17:66:2f:88:90:4f:ee:85:
         90:21:d3:11:4b:9e:b4:b0:b0:cd:ab:e9:8e:8a:6b:e8:80:8f:
         cc:80:15:7b:53:e7:0c:ec:73:c3:69:8f:2b:3b:29:fe:02:8d:
         5b:09:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:30:27 2025 by rpki-client