Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/CtAvKT8_YWGFqZvKPiugHpskbis.roa
File:                     CtAvKT8_YWGFqZvKPiugHpskbis.roa (raw, json)
Hash identifier:          /WBcH2raY2azD7Ac5wW9HSok+nWwXwpMUWRAaF+X7p4=
Subject key identifier:   0A:D0:2F:29:3F:3F:61:61:85:A9:9B:CA:3E:2B:A0:1E:9B:24:6E:2B
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       7C
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/CtAvKT8_YWGFqZvKPiugHpskbis.roa
Signing time:             Tue 01 Jul 2025 01:37:19 +0000
ROA not before:           Tue 01 Jul 2025 01:37:19 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        210.136.0.0/16 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul  1 01:37:19 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=0AD02F293F3F616185A99BCA3E2BA01E9B246E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:f6:ed:03:9c:7b:87:c2:01:98:1a:9e:e4:
                    cd:12:e7:f9:e3:7d:c1:2e:60:29:1d:61:ec:36:4f:
                    51:de:41:53:1e:72:ca:58:2b:e5:b6:4c:a4:e9:7e:
                    f5:ae:9b:fc:40:ba:83:64:92:4f:1a:b9:14:35:4b:
                    b2:99:29:3b:71:af:1d:30:32:07:d6:09:9c:cf:45:
                    9d:ca:fd:8a:cb:33:58:bc:a1:ba:2a:11:32:26:0b:
                    01:3f:f7:2c:10:64:f9:a0:a0:91:07:10:e2:3f:65:
                    9a:9c:ac:5d:bf:f4:37:22:89:81:49:35:4c:3e:dc:
                    74:0f:8b:8c:9a:ae:97:cc:74:84:aa:da:6b:c2:22:
                    f7:27:fc:88:f7:e8:8e:bb:47:87:cb:69:e8:30:00:
                    d2:f7:9b:df:8a:2d:72:17:a4:ca:c0:a1:bf:88:98:
                    8f:97:0c:cc:b5:d7:67:26:e2:eb:1f:9e:2e:f7:6b:
                    bd:24:bb:68:a7:9b:1c:da:5a:a6:5a:88:00:52:57:
                    9f:bb:cb:94:90:5f:06:74:2c:76:ae:f1:0e:37:75:
                    6c:d4:e5:30:35:7d:ad:f2:e8:c8:72:17:42:76:64:
                    60:0f:77:6f:c3:6e:ad:f6:6e:c1:77:e6:58:d4:89:
                    0e:1b:89:ac:4d:90:82:76:0e:ba:6e:95:4b:f7:96:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D0:2F:29:3F:3F:61:61:85:A9:9B:CA:3E:2B:A0:1E:9B:24:6E:2B
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/CtAvKT8_YWGFqZvKPiugHpskbis.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         58:b6:1d:fe:97:22:f7:5a:29:48:f4:ac:07:af:be:de:db:6c:
         57:03:53:97:f4:c9:e1:7e:5c:1f:ac:77:64:41:43:eb:0d:09:
         8e:a8:6e:b9:1a:ec:af:83:2f:ca:09:b8:be:8b:25:bd:19:dd:
         24:d2:c9:42:39:c5:27:35:e2:67:24:b5:63:40:14:1f:d2:60:
         2b:e5:5b:f3:4f:8e:bf:7b:5c:00:63:a5:b1:0e:de:dc:3f:85:
         04:55:a4:91:54:48:a6:29:58:72:60:91:a9:61:d0:5b:20:97:
         02:c6:86:2c:cf:fc:27:e1:7a:8a:4a:8a:ba:e8:03:9b:e3:5e:
         e2:21:af:e4:85:c9:2b:62:b7:47:e1:e7:c0:3e:22:8e:34:97:
         63:72:84:ed:e0:e1:52:d0:ef:7d:9f:a3:a9:8a:09:41:e4:96:
         05:99:7d:9f:3b:f8:54:39:9f:39:8f:df:11:79:3b:cd:d6:26:
         71:6a:3f:0a:6a:94:54:83:aa:db:0f:b0:cd:2e:bc:43:4c:3b:
         2b:37:c1:5d:53:a5:ee:7d:13:13:a2:72:81:e3:ad:b8:7e:a3:
         57:01:aa:7c:3b:70:14:d8:30:1c:d7:b6:70:d6:d0:f0:32:09:
         3b:8e:e8:97:71:8d:2a:15:62:5e:b7:ea:0e:9e:e7:ce:ac:8f:
         32:92:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:38:43 2025 by rpki-client