Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/208/a7Iys949BjrMJvbLqR2e0sblle8.roa
File:                     a7Iys949BjrMJvbLqR2e0sblle8.roa (raw, json)
Hash identifier:          uAsV4v2jX018jiMAUtoDTc2cufn/L9CTC+7OLvuFU+I=
Subject key identifier:   6B:B2:32:B3:DE:3D:06:3A:CC:26:F6:CB:A9:1D:9E:D2:C6:E5:95:EF
Certificate issuer:       /CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Certificate serial:       2D
Authority key identifier: 7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/a7Iys949BjrMJvbLqR2e0sblle8.roa
Signing time:             Tue 10 Jun 2025 10:45:37 +0000
ROA not before:           Tue 10 Jun 2025 10:45:37 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     7682
IP address blocks:        210.229.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
        Validity
            Not Before: Jun 10 10:45:37 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=6BB232B3DE3D063ACC26F6CBA91D9ED2C6E595EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:2b:23:2a:f5:38:cb:83:de:b2:64:b8:8f:
                    56:e5:31:88:5f:38:d0:c1:fe:f1:5e:f6:17:dd:9b:
                    39:b0:7d:53:ab:15:f0:01:0c:a8:57:bb:d6:c8:a8:
                    a2:14:02:2d:4e:4c:9d:a0:6e:67:65:eb:39:8b:ac:
                    5a:43:52:f7:f6:34:75:58:fb:1e:48:a5:8f:19:23:
                    0d:d3:36:6b:30:c9:68:cc:5f:f4:42:a4:0b:5d:30:
                    1c:32:70:d3:f2:d8:4e:57:bf:6f:3c:b3:3d:30:8c:
                    c4:ef:23:55:40:ff:a6:66:f3:3d:7b:ae:62:bd:c9:
                    27:fe:18:97:ca:df:28:af:c1:87:90:03:12:9c:5a:
                    49:31:ec:96:90:05:c0:fd:46:48:82:5d:d6:cd:b3:
                    31:5a:e9:59:51:9d:b1:0f:1d:bf:63:eb:41:f1:cd:
                    38:93:8f:c7:d6:1a:11:96:81:4f:a3:de:84:a1:d5:
                    9a:26:99:6c:ec:fe:0f:34:99:46:9c:3f:ea:de:46:
                    4e:fe:19:cb:dc:b2:47:7e:0c:46:5f:85:00:f4:f0:
                    8f:7b:b1:1c:11:0b:c0:14:59:30:8a:31:f0:2b:f3:
                    e6:fc:c2:09:19:69:a7:18:57:00:81:f6:11:0b:ab:
                    d2:bb:c1:53:2f:02:25:2b:e6:f1:b0:fd:04:d0:11:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B2:32:B3:DE:3D:06:3A:CC:26:F6:CB:A9:1D:9E:D2:C6:E5:95:EF
            X509v3 Authority Key Identifier:
                keyid:7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/a7Iys949BjrMJvbLqR2e0sblle8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:d8:68:4f:12:61:75:4f:57:5c:ad:91:96:db:87:27:ce:3e:
         74:34:6c:73:8a:bd:3e:ab:e8:75:1c:e4:5a:2b:26:b9:9d:91:
         b3:52:c4:08:eb:fc:6c:e9:a3:19:0e:08:6f:50:b9:e3:ea:5a:
         3b:b6:3f:f0:dd:37:f2:8d:79:e3:bb:ef:e3:4b:70:31:05:ba:
         f4:98:f3:d8:65:2d:0a:31:f1:70:70:53:26:81:d5:3a:65:66:
         65:06:fe:3d:ac:04:60:0f:fa:0c:56:4e:16:8d:93:ed:84:be:
         bc:f0:09:65:dd:13:b2:60:a2:ac:ed:5b:9f:92:9d:02:4c:98:
         03:9f:65:85:fd:73:44:ac:6e:9f:15:61:94:da:94:40:69:6b:
         ee:8e:fd:0f:e3:d1:29:42:ad:0b:20:ce:dc:7b:dd:3b:d2:2c:
         53:3e:ae:e9:d3:90:2c:8f:52:69:9a:29:82:5b:05:7b:73:56:
         06:1b:e1:bd:b2:6a:8a:e3:ad:63:c8:2c:53:79:8d:7d:f1:1a:
         f0:4a:79:74:c1:cd:9d:6f:eb:2b:5f:cd:c8:eb:c4:d9:36:cb:
         3e:1d:d4:87:17:51:a8:d3:59:8d:62:5b:dc:11:c2:2a:61:3d:
         b6:b3:3b:24:fe:78:84:a9:33:23:55:da:7d:4f:2b:74:12:db:
         e2:54:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:54:17 2025 by rpki-client