Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20153/dGXonicCWYqLhc4MeLsDFp5yNg0.roa
File:                     dGXonicCWYqLhc4MeLsDFp5yNg0.roa (raw, json)
Hash identifier:          7QrnaPsHrOKCE8HcWdKNTrgTrX7Et16ulUXp5thZdSE=
Subject key identifier:   74:65:E8:9E:27:02:59:8A:8B:85:CE:0C:78:BB:03:16:9E:72:36:0D
Certificate issuer:       /CN=5C57DDC59248271E71E1325877992B9738E043D4
Certificate serial:       17
Authority key identifier: 5C:57:DD:C5:92:48:27:1E:71:E1:32:58:77:99:2B:97:38:E0:43:D4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/dGXonicCWYqLhc4MeLsDFp5yNg0.roa
Signing time:             Sat 26 Jul 2025 06:00:26 +0000
ROA not before:           Sat 26 Jul 2025 06:00:26 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     131986
IP address blocks:        133.32.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C57DDC59248271E71E1325877992B9738E043D4
        Validity
            Not Before: Jul 26 06:00:26 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=7465E89E2702598A8B85CE0C78BB03169E72360D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:bf:ee:19:62:01:ea:3e:de:7f:6d:1d:db:
                    ba:64:a2:68:31:40:6b:9a:ab:79:c0:bc:d2:65:7e:
                    5d:7c:73:3a:fd:17:7a:f8:14:fe:af:63:21:5d:7c:
                    af:c1:6a:2e:3a:09:6b:3f:b9:ec:44:96:40:e1:2d:
                    a6:c2:3b:9a:b7:6b:7c:19:38:69:06:53:44:52:78:
                    c0:4b:00:3c:0d:c2:1c:8f:e9:15:82:9f:3c:8c:96:
                    a1:d4:f5:c4:b7:4f:15:e7:5a:7a:c5:75:e7:6e:67:
                    df:33:8c:92:1f:79:e9:d6:9b:42:af:46:d6:6e:ef:
                    45:8d:7f:98:bb:58:e1:9c:b2:40:17:49:d2:b9:2d:
                    8f:fa:03:31:a2:99:34:9d:16:1a:a0:80:47:89:df:
                    51:42:f2:bb:0d:1a:00:5b:b6:20:23:a7:4f:35:05:
                    57:43:54:a2:55:6a:5c:54:d2:48:d6:90:df:2d:c0:
                    f2:ed:77:e0:7a:7a:75:68:7e:2d:25:08:42:e1:8d:
                    79:5a:03:74:e5:53:76:39:1c:6f:29:06:08:18:e0:
                    6d:8d:9f:4e:5c:b3:42:e4:1c:2d:45:54:c5:14:8d:
                    34:93:ea:56:b8:4a:5f:1e:53:b4:6a:ad:84:b0:17:
                    b0:22:08:f9:b9:93:0a:a6:df:2a:2b:7f:8a:00:e5:
                    61:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:65:E8:9E:27:02:59:8A:8B:85:CE:0C:78:BB:03:16:9E:72:36:0D
            X509v3 Authority Key Identifier:
                keyid:5C:57:DD:C5:92:48:27:1E:71:E1:32:58:77:99:2B:97:38:E0:43:D4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/dGXonicCWYqLhc4MeLsDFp5yNg0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.32.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:3d:09:c9:a7:32:3e:6f:d3:4f:84:eb:8c:b7:5e:ff:b9:08:
         9d:28:62:9b:12:a0:d1:00:45:21:ab:f8:88:4a:db:7e:82:29:
         25:30:19:5d:14:99:96:bb:7c:5a:ed:e0:39:ca:84:0f:9a:4e:
         e2:c2:b0:dd:bd:12:58:2b:07:5d:7d:e6:4d:40:b1:35:4b:2b:
         01:70:f6:87:91:55:57:cd:f9:d2:57:20:9c:8f:c8:17:72:f8:
         b8:88:4a:e2:ff:40:4a:74:02:30:23:69:74:a1:b6:f7:4f:bb:
         53:88:22:c1:49:73:33:df:27:45:0e:9d:6b:d2:5f:72:d3:ff:
         09:66:48:fa:00:4f:a0:e1:f4:31:2b:79:9a:92:b6:eb:c7:a9:
         e3:33:8f:23:c0:08:3c:0b:19:fe:25:58:9f:4e:b9:28:8a:4e:
         a1:ad:a8:bd:ab:65:39:02:96:8a:90:ce:fd:5e:35:ae:d3:17:
         af:a4:29:3f:cd:27:e4:d3:a4:7c:1a:61:53:25:ec:f0:6b:88:
         5d:08:d9:26:d7:27:aa:00:1b:58:12:4f:ba:fc:7f:f7:d6:43:
         b3:1a:b9:90:7b:a8:94:11:0d:ff:56:5e:c7:7a:6f:ad:3c:1d:
         4d:b8:42:35:7f:f5:88:75:2c:0c:68:79:d4:6d:4d:61:a4:16:
         80:0f:2b:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:29:34 2025 by rpki-client