Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/tCCmk3IjOBUDc1c6ltQhsGp2BYc.roa
File:                     tCCmk3IjOBUDc1c6ltQhsGp2BYc.roa (raw, json)
Hash identifier:          HbM/RH/MO8DTotYdnT3fKeZ01gLeG2WsqTuDMd4Bjq8=
Subject key identifier:   B4:20:A6:93:72:23:38:15:03:73:57:3A:96:D4:21:B0:6A:76:05:87
Certificate issuer:       /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial:       49
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/tCCmk3IjOBUDc1c6ltQhsGp2BYc.roa
Signing time:             Tue 01 Jul 2025 08:35:50 +0000
ROA not before:           Tue 01 Jul 2025 08:35:50 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2519
IP address blocks:        202.233.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
        Validity
            Not Before: Jul  1 08:35:50 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=B420A693722338150373573A96D421B06A760587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:d3:f4:15:5f:7d:c2:5e:66:c8:13:28:f0:
                    e1:df:50:25:e4:4e:ff:2a:2e:8e:55:ae:c3:95:56:
                    93:76:c2:05:49:ca:d1:16:d8:0d:b1:cf:32:c5:b8:
                    ea:c6:1d:b4:5c:3b:07:c3:eb:f2:2a:1d:7a:50:d6:
                    44:ea:20:d5:60:f5:fa:bd:aa:cc:a7:bc:4e:77:88:
                    6d:42:c4:c8:5d:84:8a:1b:c0:ac:0d:ee:4d:dd:21:
                    8b:12:66:d7:51:46:6b:59:b8:01:63:1d:8a:52:55:
                    f7:4a:11:7d:9e:57:0a:dc:be:16:96:15:f6:d0:ee:
                    46:9c:e7:f5:81:01:32:a6:f2:64:21:26:7b:a7:fb:
                    cf:59:b2:8a:3c:ef:36:5d:82:ea:e8:1f:7a:9a:01:
                    97:21:56:83:04:a9:c3:bd:92:ff:2f:a5:48:0a:c0:
                    32:7c:e4:01:e9:2b:ad:e5:3a:e7:a9:09:0a:09:e8:
                    f7:44:e4:06:12:a2:e4:de:56:c1:bb:85:6c:01:20:
                    8e:b6:32:fb:d9:98:3d:6d:90:c0:e8:62:ba:81:bb:
                    e6:e0:78:22:3b:d7:de:bc:2c:b3:7e:33:8a:cf:b9:
                    d2:d8:79:d5:1f:fd:76:48:bf:0e:1e:38:ba:e2:fa:
                    5b:8d:82:96:ba:c5:ce:f5:81:d9:12:db:0d:ff:57:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:20:A6:93:72:23:38:15:03:73:57:3A:96:D4:21:B0:6A:76:05:87
            X509v3 Authority Key Identifier:
                keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/tCCmk3IjOBUDc1c6ltQhsGp2BYc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.233.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:36:9b:00:39:a2:bb:70:82:fa:c6:a4:70:98:6c:a7:b4:85:
         28:58:82:27:35:0d:9d:0e:0f:44:53:55:0e:74:d0:0d:44:f0:
         2c:4b:5d:18:28:90:26:9f:f1:79:cf:be:49:da:16:19:2e:ea:
         32:f7:70:29:94:a9:c6:16:5c:75:8e:23:c5:49:b5:fc:1f:d1:
         e0:7d:aa:a0:90:c9:ec:25:cb:15:0c:94:22:ac:7f:b8:42:a6:
         f0:e4:4d:c6:d1:9c:2d:40:9b:4e:d9:b7:67:31:25:41:56:55:
         60:19:4d:8b:9c:fd:0a:16:fa:41:ab:98:7c:98:7b:15:c4:2e:
         c3:b9:ff:7c:6c:d7:1c:52:26:27:14:6c:c9:2e:33:9c:6c:6a:
         6d:56:13:17:5a:11:35:e6:08:57:ec:60:27:9c:00:d8:08:f7:
         90:9c:bc:dd:f4:25:57:03:09:28:27:b8:e5:a4:6f:87:31:9b:
         74:4b:57:1d:ae:0c:e0:c8:f5:88:14:53:0b:1e:40:9e:58:d7:
         ed:2b:a4:29:68:5f:df:bf:43:8d:60:1f:07:fb:73:07:bb:ec:
         34:3b:17:66:39:78:5c:63:20:d0:d2:7f:cc:04:8c:23:5e:d0:
         85:dd:50:5f:52:4a:78:e0:bd:de:00:dc:4a:ef:99:75:f3:64:
         a5:eb:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:57:15 2025 by rpki-client