Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/gzYp2FVVHjqwCk5tynMWTwTGQtQ.roa
File:                     gzYp2FVVHjqwCk5tynMWTwTGQtQ.roa (raw, json)
Hash identifier:          SW3hSpZOPdLVEnQu4E99nffi6nCqd5bUHwgeJ0YO/ug=
Subject key identifier:   83:36:29:D8:55:55:1E:3A:B0:0A:4E:6D:CA:73:16:4F:04:C6:42:D4
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       7E
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gzYp2FVVHjqwCk5tynMWTwTGQtQ.roa
Signing time:             Tue 01 Jul 2025 01:37:20 +0000
ROA not before:           Tue 01 Jul 2025 01:37:20 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        210.153.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul  1 01:37:20 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=833629D855551E3AB00A4E6DCA73164F04C642D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:d4:01:b4:67:77:fb:4e:9d:fe:88:4e:42:
                    35:60:bf:24:a2:38:98:53:44:09:e0:ab:db:c2:1d:
                    84:aa:1f:98:ab:27:f0:b3:24:4c:a9:fc:83:d4:e7:
                    29:02:61:ff:53:6b:09:28:1c:8c:1a:b8:ff:0d:31:
                    73:96:0f:52:bf:0b:59:31:a5:4a:c9:38:0c:9b:cb:
                    4d:00:23:52:e9:1a:04:40:94:38:64:1c:61:28:6b:
                    2a:1c:c6:8a:e0:dc:af:62:87:bb:94:81:19:9b:d0:
                    cd:7f:8a:88:19:3d:45:25:23:f0:43:36:af:7b:eb:
                    32:ab:27:e6:cb:b9:e2:ce:f3:39:24:e9:46:3e:6d:
                    1e:86:ea:53:10:0d:ca:86:87:65:38:11:23:1d:4a:
                    a7:f3:87:72:94:4a:02:b1:61:ec:c0:7d:61:10:6b:
                    ab:d6:52:5f:85:8a:dd:e8:ae:8e:40:cc:80:61:dd:
                    11:af:49:5e:4b:00:ba:94:01:55:85:32:62:b4:88:
                    45:db:27:76:eb:2d:71:b6:9e:2d:2f:7e:cb:47:a4:
                    b6:99:20:98:cc:3b:bf:f8:18:f8:c9:a4:01:7c:22:
                    83:15:9d:97:c0:8d:fd:af:c4:a5:07:8e:98:f1:4e:
                    dc:95:b2:80:32:d9:7d:0b:63:3b:b2:43:2b:5d:53:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:36:29:D8:55:55:1E:3A:B0:0A:4E:6D:CA:73:16:4F:04:C6:42:D4
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gzYp2FVVHjqwCk5tynMWTwTGQtQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:0b:3d:07:f9:fb:1f:51:dc:a2:73:e5:58:9e:b0:13:3a:13:
         09:3f:e4:0a:31:17:e9:e4:1c:4d:20:db:d9:8c:1a:76:5e:a6:
         1b:1e:06:81:d3:7e:1d:e0:b3:8c:95:d8:a4:df:fc:48:98:07:
         4f:11:00:2e:0c:4d:96:bb:50:9e:c0:87:1e:a5:31:3d:ee:6f:
         6f:1d:52:6f:8a:e9:a2:c6:e9:24:df:4d:c5:36:37:26:2c:9a:
         82:e2:85:1a:4d:c6:56:b6:72:ea:d8:8c:2d:70:c8:41:c1:a0:
         aa:15:97:cd:bf:38:43:9a:3d:e3:65:f0:bb:8e:63:34:a7:37:
         1c:8d:08:ab:f0:2a:ae:7e:dc:1e:71:54:06:af:71:b4:29:95:
         1a:d8:aa:e7:d8:a9:15:ae:d1:f3:0f:d3:d6:55:9d:db:7d:88:
         2b:84:64:9e:be:97:6e:ee:4b:ac:be:46:0a:99:22:06:73:ed:
         23:c5:fd:1c:f1:db:a4:95:1d:19:24:4e:4c:c1:b1:64:d0:4d:
         a6:b0:51:5e:90:9d:51:79:0a:ea:fe:73:76:fa:6d:99:a4:a6:
         66:63:5f:26:2b:89:f7:2d:d3:6e:0c:4e:da:dd:2e:dc:e1:73:
         59:c3:f0:e6:f6:84:69:bd:8b:a8:ed:4e:ee:96:19:c3:3a:81:
         32:06:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:01:04 2025 by rpki-client