Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/fP63g23JtLOVWlQfdzQ67BKIOvU.roa
File:                     fP63g23JtLOVWlQfdzQ67BKIOvU.roa (raw, json)
Hash identifier:          VpLywGMpRBh4VSKGkCxq6/c47UjCUK7KOaatc/f6cos=
Subject key identifier:   7C:FE:B7:83:6D:C9:B4:B3:95:5A:54:1F:77:34:3A:EC:12:88:3A:F5
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       23
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/fP63g23JtLOVWlQfdzQ67BKIOvU.roa
Signing time:             Thu 19 Jun 2025 05:03:09 +0000
ROA not before:           Thu 19 Jun 2025 05:03:09 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18282
IP address blocks:        202.238.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jun 19 05:03:09 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=7CFEB7836DC9B4B3955A541F77343AEC12883AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:38:fd:c6:80:87:d9:66:29:b8:ce:62:f3:
                    d5:fb:2c:8b:c9:75:c3:75:40:f9:71:72:87:3e:a1:
                    8c:82:e1:e2:9e:99:bd:e2:f0:d9:c2:f4:bd:b7:3d:
                    15:8f:7d:a8:50:d2:2d:70:9a:7d:c5:16:d1:b2:b4:
                    80:91:11:8b:06:7b:9f:79:4a:a3:0b:74:78:0a:2e:
                    87:65:40:51:7f:67:ce:dc:0c:e5:d2:5b:09:66:ad:
                    a8:80:65:ef:39:40:12:0f:f0:84:80:c1:22:be:f4:
                    8a:4d:62:3f:f0:f9:bf:86:81:91:f5:ca:42:ba:ed:
                    62:a5:75:4a:3d:7a:02:94:c0:e3:2e:ee:d5:58:67:
                    55:3e:09:aa:b5:ee:70:bf:be:f1:af:d0:ab:70:9b:
                    cd:45:cb:1e:9a:63:e9:5c:75:7e:cc:87:b6:a3:45:
                    27:d7:48:57:ed:9a:cd:00:56:cf:d1:ae:06:58:f3:
                    d2:89:4d:b9:56:a1:32:0c:46:77:a9:ef:b3:13:55:
                    56:2c:57:55:0c:60:99:4d:45:a5:f9:bf:d1:b7:20:
                    0e:2c:f9:fd:53:ad:91:e4:40:f7:c2:5f:98:18:c1:
                    3e:3d:d4:fd:94:60:fd:0a:4f:be:4e:52:70:ee:75:
                    39:f5:f3:87:35:a4:76:d9:5f:ab:48:d2:01:d9:61:
                    cb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FE:B7:83:6D:C9:B4:B3:95:5A:54:1F:77:34:3A:EC:12:88:3A:F5
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/fP63g23JtLOVWlQfdzQ67BKIOvU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.238.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:e3:c3:4f:0e:a2:51:8f:ba:02:60:b9:4f:d6:04:e5:a0:9b:
         8c:05:ef:08:64:93:80:77:b9:94:13:a3:87:01:ba:fe:bf:ca:
         3c:07:c6:6e:75:a4:dc:bc:20:5d:22:7e:d9:21:a3:19:21:f0:
         96:a5:e2:95:12:ca:36:84:7a:74:2f:0f:c0:3f:3b:ad:2e:5c:
         7a:31:0d:97:a5:20:ca:59:10:0f:2e:75:11:3e:ad:c0:52:6c:
         2d:63:60:b8:2b:c1:03:15:80:d7:b5:e5:60:58:e5:c3:f9:8d:
         3a:44:0a:84:68:4e:09:e6:b7:af:df:d9:88:b4:78:1b:5a:1d:
         be:14:06:a1:81:d9:7f:90:ad:68:dd:6e:39:e7:68:f8:ea:fd:
         fa:b6:4a:a0:e2:90:ed:94:28:51:1e:70:5c:33:d5:a8:96:1a:
         a5:17:e2:9a:80:27:41:3d:4e:7f:da:46:94:49:8e:22:f1:4b:
         07:bf:52:86:a0:be:36:b4:ad:30:07:f4:11:25:2e:2f:cc:26:
         dd:c8:f9:3b:6f:b0:c9:f3:45:89:0b:9c:68:00:0f:59:0a:57:
         5b:14:ef:45:8b:32:23:3a:eb:04:3a:3b:ae:06:ff:d7:1b:8f:
         2c:e6:b2:c1:77:74:c0:b6:4c:0e:54:91:78:26:de:cd:cb:7a:
         54:bc:4c:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 12:14:55 2025 by rpki-client