Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/sDUAbYP5W1L-KZhuwX4nSKXJAuk.roa
File:                     sDUAbYP5W1L-KZhuwX4nSKXJAuk.roa (raw, json)
Hash identifier:          nr9mIEytyDJrji1jzD5JrHDmJvfaPE0W95Yk7o31QVg=
Subject key identifier:   B0:35:00:6D:83:F9:5B:52:FE:29:98:6E:C1:7E:27:48:A5:C9:02:E9
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       82
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/sDUAbYP5W1L-KZhuwX4nSKXJAuk.roa
Signing time:             Tue 01 Jul 2025 01:34:17 +0000
ROA not before:           Tue 01 Jul 2025 01:34:17 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     146984
IP address blocks:        115.69.236.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Jul  1 01:34:17 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=B035006D83F95B52FE29986EC17E2748A5C902E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:a8:84:03:54:55:2a:11:db:95:45:a2:ad:
                    52:12:48:56:41:f3:12:fa:a5:24:1e:85:ad:1d:81:
                    6a:1f:27:28:cb:07:2c:61:2b:5c:21:a7:fb:4c:13:
                    af:32:3e:36:b8:f3:be:63:14:c5:f8:26:6e:ee:45:
                    99:02:2e:fa:00:81:9b:e8:a3:a7:a2:0e:7b:af:7f:
                    55:2d:35:17:42:bc:b5:11:0a:46:bc:58:fe:14:dc:
                    d5:8e:7c:15:32:68:33:8b:cd:31:ef:e6:78:4e:42:
                    63:be:ed:4a:df:5d:09:1b:17:78:fa:2e:5b:7c:55:
                    a2:b1:f0:34:61:55:49:ed:44:3a:f1:4e:09:04:d1:
                    5f:05:01:fe:ba:79:7a:6f:3c:72:38:5b:d2:8d:15:
                    05:b7:96:91:65:77:ac:3f:7f:2f:ab:1e:60:84:b3:
                    a3:db:43:b5:30:bf:8c:55:b7:43:04:37:83:74:c2:
                    9c:39:8e:c7:4b:e7:ac:0d:39:b3:b1:fb:5a:08:d4:
                    7b:5c:70:04:9d:13:42:2f:eb:bd:d4:cf:d3:e1:6f:
                    11:1a:61:e7:a4:3d:a7:ee:b8:6c:f7:2d:6c:a5:44:
                    3e:9f:78:ef:c7:e4:b5:65:98:24:86:51:6e:ba:a8:
                    a2:c6:1b:9e:d9:10:ef:aa:e9:31:c3:ed:d4:9a:45:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:35:00:6D:83:F9:5B:52:FE:29:98:6E:C1:7E:27:48:A5:C9:02:E9
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/sDUAbYP5W1L-KZhuwX4nSKXJAuk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:71:4b:38:7a:29:99:93:29:0c:97:ad:c0:6a:86:fe:83:
         ff:4e:a0:8f:c0:46:ad:c5:6d:34:70:50:e4:32:ab:26:7b:55:
         c2:59:f9:ad:c8:6b:a2:68:47:90:f6:68:d1:d4:58:de:29:06:
         da:46:6d:de:73:cb:9d:3e:37:6b:1c:15:c2:25:67:42:b3:56:
         18:ed:3d:a7:c8:54:9e:cf:fc:c1:98:48:34:0d:8b:07:a8:b0:
         f2:61:13:df:ec:13:59:a2:22:36:6b:0a:13:c4:f9:55:39:55:
         88:c3:63:dc:45:78:c8:6f:0e:51:10:45:24:e7:35:2a:4e:0e:
         45:f4:a7:5c:72:1e:91:55:6a:2b:03:15:9b:75:db:b0:1a:46:
         4e:af:7b:99:92:ea:27:9a:37:c1:b9:3e:1d:43:6a:60:41:8d:
         42:b6:7d:e5:49:5e:a5:11:b9:dd:fc:63:46:04:3f:44:15:06:
         7c:c1:d0:40:d7:81:a9:79:d0:ec:7c:46:da:10:34:f5:61:1b:
         69:af:37:c4:74:8d:1b:15:a7:d0:01:f8:48:b5:93:08:af:c7:
         19:bc:20:3b:c5:7a:c4:c5:dd:5a:9a:22:2a:58:12:f7:9a:90:
         26:31:ed:f1:ff:15:81:ef:1b:fa:78:f6:cf:25:65:81:79:38:
         24:c9:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:50:31 2025 by rpki-client