Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/iZ8N4IJyEDDtZcDv2WQqpwTqqQQ.roa
File:                     iZ8N4IJyEDDtZcDv2WQqpwTqqQQ.roa (raw, json)
Hash identifier:          F8de6jluboRfJ55YyU+98c/vn5rcYLIP/5napsDocNM=
Subject key identifier:   89:9F:0D:E0:82:72:10:30:ED:65:C0:EF:D9:64:2A:A7:04:EA:A9:04
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       03AA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/iZ8N4IJyEDDtZcDv2WQqpwTqqQQ.roa
Signing time:             Tue 10 Jun 2025 10:44:53 +0000
ROA not before:           Tue 10 Jun 2025 10:44:53 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     146979
IP address blocks:        202.236.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938 (0x3aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Jun 10 10:44:53 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=899F0DE082721030ED65C0EFD9642AA704EAA904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:c5:b9:b8:69:23:9d:fb:07:04:16:be:73:
                    9a:39:39:36:94:e9:58:fa:ea:df:53:df:6b:71:0a:
                    9f:8b:0d:e9:4e:7c:cb:a8:87:6b:6f:51:b5:2c:46:
                    12:be:dc:10:4b:0f:cb:71:0a:13:e4:ad:fc:3c:5a:
                    23:81:c0:fe:20:39:cc:5e:bd:bb:2c:15:b5:1e:a2:
                    c3:a9:9c:6b:a1:d5:da:b6:c6:59:5b:70:7e:06:64:
                    c4:52:c6:6f:9f:7a:48:7d:b3:66:d8:0c:35:fe:84:
                    7e:09:61:e9:57:4a:cc:6e:8a:08:b6:88:ce:c8:a8:
                    09:c7:7a:97:f1:cc:e5:69:3f:04:e0:e2:79:01:c3:
                    18:12:4c:26:ba:b8:33:a2:32:66:ea:97:ed:b6:83:
                    5d:1e:f2:d4:26:e9:f1:f6:0f:ce:3b:55:05:7a:e6:
                    96:7c:42:7e:54:f1:75:df:d3:2e:a6:cf:d1:2f:9d:
                    11:1c:55:67:29:03:e5:94:f3:90:ce:3e:81:1e:78:
                    c6:6a:be:13:94:cc:93:90:23:2e:ad:fe:2b:a4:64:
                    ee:7e:bb:5e:41:81:69:64:c2:5b:90:04:9b:d5:2a:
                    ca:d1:29:7b:01:6b:62:e0:56:2f:62:68:9f:4f:06:
                    fc:75:73:48:e6:c8:bb:93:a2:42:48:b5:3a:9d:73:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9F:0D:E0:82:72:10:30:ED:65:C0:EF:D9:64:2A:A7:04:EA:A9:04
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/iZ8N4IJyEDDtZcDv2WQqpwTqqQQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:88:b7:13:2f:b1:d5:1d:2a:b7:ae:00:43:14:d2:ef:90:a7:
         37:18:01:c5:07:a4:0a:ce:e6:f0:8f:28:57:7e:15:c7:78:60:
         bc:cc:28:db:8c:2a:05:58:dd:ce:92:27:6f:b6:c0:01:34:7a:
         9f:99:5d:5e:84:bf:13:57:f6:59:61:3f:1c:5e:9f:65:65:1e:
         97:47:10:8c:17:6d:1d:fa:de:3d:3c:97:3f:66:ea:6c:00:44:
         2e:37:e8:c8:7c:c6:bc:33:45:72:29:f0:12:c6:3e:e7:34:c2:
         d9:85:cc:53:ff:11:26:7f:80:9b:38:04:ce:ab:e5:55:a5:2f:
         99:aa:02:9a:21:1f:55:ea:35:23:04:c5:25:21:e9:22:f8:0d:
         27:04:40:c3:d1:a9:9e:f3:38:b8:18:dc:bd:82:77:62:bf:9e:
         e6:e5:7f:e5:20:99:c1:01:98:84:7b:17:a0:99:8e:49:f7:7f:
         cb:f0:a2:3c:ce:ff:ad:ce:b0:b2:7c:8f:55:b3:58:4a:8f:5c:
         3b:8d:93:99:50:39:29:bf:43:c0:68:e9:d7:64:7a:cf:d4:db:
         20:1e:f1:df:ba:90:86:35:86:83:9b:a2:5f:aa:67:2e:c0:b8:
         79:ca:b8:47:96:56:85:cd:1b:ec:43:7d:e1:c7:60:e7:3e:8c:
         67:8c:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:30:43 2025 by rpki-client