Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/18ElEKwVzJ6PB7qHT-nMIr8QOnY.roa
File:                     18ElEKwVzJ6PB7qHT-nMIr8QOnY.roa (raw, json)
Hash identifier:          J/fxBnbz+JCbKbUe9wdJCp8ZA5grqd5da/dw0sc4+nw=
Subject key identifier:   D7:C1:25:10:AC:15:CC:9E:8F:07:BA:87:4F:E9:CC:22:BF:10:3A:76
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       7F
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/18ElEKwVzJ6PB7qHT-nMIr8QOnY.roa
Signing time:             Tue 10 Jun 2025 10:50:43 +0000
ROA not before:           Tue 10 Jun 2025 10:50:43 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     23816
IP address blocks:        202.239.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jun 10 10:50:43 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=D7C12510AC15CC9E8F07BA874FE9CC22BF103A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:28:cf:ca:bc:ee:2b:a2:83:8d:3c:13:76:
                    82:39:ba:80:39:32:54:05:0c:ac:44:fb:a3:33:03:
                    dc:fb:84:b4:f9:cb:c2:0c:14:7e:c8:88:c4:e6:54:
                    97:67:3c:d1:bd:4a:48:ad:20:5b:98:99:64:ec:b2:
                    0f:0b:5c:53:e3:5b:90:fb:7b:3e:4f:58:40:ed:17:
                    39:ad:91:84:d5:6b:bf:62:40:d9:0b:ab:68:36:b1:
                    5f:06:aa:b8:c5:0b:ad:52:79:bc:c1:2a:e2:05:d2:
                    55:55:7e:f3:7b:63:fd:52:90:b5:c7:0e:a0:03:66:
                    39:d0:9e:20:1e:a2:96:df:e0:5a:ad:d5:46:4c:a3:
                    60:10:21:99:7d:ac:57:09:6c:f6:3b:64:14:a1:7c:
                    83:bf:7a:92:88:e8:a7:88:4a:54:65:54:9b:b1:03:
                    14:1d:cd:52:2b:40:3d:06:64:03:85:15:9e:eb:f8:
                    81:1b:9f:f3:9d:27:64:d1:47:5e:17:28:8f:f2:f6:
                    3a:9d:91:2e:5d:6a:c7:f8:c8:81:24:af:4b:47:ec:
                    ec:ab:85:4b:c7:cb:a1:a3:86:08:52:33:9d:77:e5:
                    9d:0c:74:34:7b:24:0f:3e:01:34:fd:07:19:36:f7:
                    24:d9:d6:c6:d7:1f:e9:40:6e:b6:fb:4e:9c:89:05:
                    70:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C1:25:10:AC:15:CC:9E:8F:07:BA:87:4F:E9:CC:22:BF:10:3A:76
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/18ElEKwVzJ6PB7qHT-nMIr8QOnY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.239.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:73:28:48:da:d5:2a:90:c6:2e:ea:e3:9a:a8:21:b2:0c:
         ef:43:a0:e3:a2:17:f5:55:46:cf:9c:2f:ac:c8:22:ce:44:a6:
         b1:01:d6:a8:bb:06:cb:84:11:37:1f:68:d3:01:ff:3d:d1:4e:
         15:81:6d:27:0e:8a:69:81:e7:94:43:d7:7e:61:c3:a7:37:23:
         96:0c:f6:4c:96:b4:d2:71:68:8d:10:04:a5:e7:61:ac:23:e6:
         43:4a:04:7a:0c:0d:01:b8:57:d3:b6:6e:ad:13:4c:a6:50:a6:
         d3:cf:37:6d:50:bb:eb:fc:c5:ff:e8:36:2e:ce:01:88:4d:60:
         32:59:5f:6b:f3:f2:ed:35:da:7f:60:8c:f3:e1:cf:30:06:80:
         2d:66:67:f2:b1:9a:9b:b9:a1:c0:eb:50:b2:84:ff:fc:28:11:
         c9:80:89:fa:40:8f:14:83:a8:cc:21:9e:00:34:2f:9d:36:b6:
         9a:ee:08:8e:b7:a6:17:32:51:98:66:a3:b4:6e:b2:f4:9e:89:
         f2:e5:4e:65:17:18:b9:ac:f1:e1:34:02:b3:d0:62:8f:e8:67:
         d2:9f:d5:4f:e7:ef:26:d0:99:05:ac:f5:52:9a:cf:13:8a:6d:
         44:f8:c1:40:07:69:af:f4:e1:43:0a:a8:6c:b7:e3:ff:a2:b3:
         0b:a3:4a:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:24:41 2025 by rpki-client