Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/egVcwCzCy-x1ZNAIaBTm2N6B_tA.roa
File:                     egVcwCzCy-x1ZNAIaBTm2N6B_tA.roa (raw, json)
Hash identifier:          CdWezscXCSfHzLndbW2/EN/HNxmSPNh2sQygxHozZUM=
Subject key identifier:   7A:05:5C:C0:2C:C2:CB:EC:75:64:D0:08:68:14:E6:D8:DE:81:FE:D0
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       69
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/egVcwCzCy-x1ZNAIaBTm2N6B_tA.roa
Signing time:             Tue 10 Jun 2025 10:51:01 +0000
ROA not before:           Tue 10 Jun 2025 10:51:01 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     24296
IP address blocks:        210.189.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Jun 10 10:51:01 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=7A055CC02CC2CBEC7564D0086814E6D8DE81FED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:16:b8:12:08:45:2c:d5:55:1b:47:8e:fe:
                    57:f3:61:75:ec:8b:fe:63:6e:7c:f3:5d:24:53:26:
                    60:13:dd:e0:a3:4e:96:15:08:26:d6:1f:85:4c:9e:
                    6b:11:72:99:75:80:41:4d:97:55:16:f1:7b:d9:38:
                    b7:50:6b:78:4d:27:81:df:66:bc:d0:2f:fd:6c:be:
                    dc:83:b3:5b:15:c7:bf:db:fd:9a:2e:60:a1:29:7b:
                    f4:fd:9c:c8:d6:8c:21:dc:ed:a1:57:97:91:b4:7f:
                    f9:2b:a2:09:ca:2b:04:a5:8a:f2:c9:62:52:af:85:
                    dc:6b:c0:0e:d8:ab:7c:fe:4c:4b:26:94:2a:24:74:
                    b2:64:78:44:e2:2b:86:96:cd:25:0b:1d:cf:e3:07:
                    47:3e:94:2a:b7:8c:fe:ba:6b:94:b6:ff:82:b8:f6:
                    30:ef:f1:2e:fa:fe:d7:f1:d4:36:3f:a1:11:c0:c0:
                    a8:b8:f7:61:c9:7c:2b:6c:56:6e:68:de:cc:4a:de:
                    52:6b:7f:fc:e2:f9:fc:78:ab:8e:65:88:68:4f:48:
                    a5:22:71:b3:43:ce:9b:e1:e6:91:ee:29:33:95:6b:
                    89:c0:f1:ec:8a:4a:f5:45:a2:66:10:bc:30:ca:20:
                    63:6c:5e:0d:bd:8b:70:90:4e:f7:6b:7b:1c:a3:d6:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:05:5C:C0:2C:C2:CB:EC:75:64:D0:08:68:14:E6:D8:DE:81:FE:D0
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/egVcwCzCy-x1ZNAIaBTm2N6B_tA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.189.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:dd:68:70:a2:cb:21:6d:67:a9:e1:fe:18:6c:81:17:0e:2d:
         10:7d:18:c1:93:6b:6c:b2:12:ef:90:fe:13:38:47:ef:1e:3a:
         1b:e5:b7:f3:fd:eb:e7:1c:69:a6:1b:8a:7f:4e:6a:3f:1e:0d:
         41:eb:22:e6:a1:19:40:48:c3:7f:d4:7a:8d:81:76:00:f7:5c:
         c8:3a:e2:a8:9c:a6:f6:60:de:66:41:a8:19:88:51:1b:5f:dc:
         58:8e:3e:4f:04:43:91:84:b2:55:ed:d9:b4:15:2c:4d:85:97:
         b8:7d:98:de:8a:68:b0:47:2d:55:89:cc:b0:13:26:95:53:09:
         36:76:da:59:63:34:64:49:4c:2f:cb:3d:72:b5:f6:49:23:07:
         0b:53:e8:c1:e8:b0:d9:93:76:ee:c3:29:92:50:98:2c:cc:6c:
         d5:f0:2b:30:93:52:99:07:26:6a:8d:57:7b:00:4e:e8:f6:df:
         90:51:a0:27:bb:07:25:f6:31:40:26:19:18:72:fe:18:97:d2:
         01:15:a3:95:02:a8:4b:6b:30:e7:73:35:23:8d:b9:a3:40:04:
         fc:98:cf:8a:fa:69:ce:eb:b0:73:b0:67:a6:6a:1b:1c:7c:68:
         01:d0:b0:f8:7f:d4:87:9f:f4:07:05:22:02:3f:10:db:44:17:
         10:32:c0:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:10:02 2025 by rpki-client