Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/hHFuTlwo7DH4aE2NTwWoalMa1Gs.roa
File:                     hHFuTlwo7DH4aE2NTwWoalMa1Gs.roa (raw, json)
Hash identifier:          P5cSelIHfRErRfSAuqmJayW7X02Wo8RLt7hbsLvmeKs=
Subject key identifier:   84:71:6E:4E:5C:28:EC:31:F8:68:4D:8D:4F:05:A8:6A:53:1A:D4:6B
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       46
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/hHFuTlwo7DH4aE2NTwWoalMa1Gs.roa
Signing time:             Fri 27 Jun 2025 02:29:34 +0000
ROA not before:           Fri 27 Jun 2025 02:29:34 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     24257
IP address blocks:        202.90.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Jun 27 02:29:34 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=84716E4E5C28EC31F8684D8D4F05A86A531AD46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:78:34:3d:df:be:9c:43:c1:fd:e8:f9:5c:95:
                    a7:c3:fe:c1:8a:f9:94:1b:02:ea:5e:2b:56:4a:da:
                    97:7d:d2:bd:5d:28:b1:ee:ae:04:c0:ed:2d:e9:7e:
                    c7:70:82:01:5d:8f:ef:a4:aa:5e:b9:47:b7:d4:3e:
                    bc:72:84:db:73:b0:87:34:df:f9:72:32:e9:19:4f:
                    f1:cb:01:75:28:8c:8a:3f:04:a0:cc:0d:bc:5a:ec:
                    01:e7:cf:ce:96:12:52:96:7f:2b:3d:9f:67:db:0f:
                    06:eb:e0:15:93:ee:2a:20:ab:1b:00:88:6c:3d:a5:
                    4c:59:81:d0:da:46:21:a1:9f:0a:eb:9b:01:90:ab:
                    6d:68:0a:a3:f8:7d:78:2a:c1:ab:1f:5d:b3:a6:c7:
                    62:9c:2e:c7:76:b1:27:e4:ac:62:3e:de:89:cb:b4:
                    48:f9:51:ad:bc:45:a0:83:7c:df:71:dc:52:5e:c0:
                    8f:30:51:3d:70:3b:37:c8:d8:a8:6f:6b:2f:43:35:
                    a5:4f:0b:6e:12:9c:ff:73:aa:5c:63:66:a1:84:c2:
                    ca:ab:13:7a:39:d1:1a:93:e0:98:66:ff:90:04:b3:
                    45:06:ca:59:72:82:8c:1b:c5:21:00:a3:d1:c3:c4:
                    44:40:8b:bb:e6:83:c4:ec:89:36:e6:80:18:6f:5a:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:71:6E:4E:5C:28:EC:31:F8:68:4D:8D:4F:05:A8:6A:53:1A:D4:6B
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/hHFuTlwo7DH4aE2NTwWoalMa1Gs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.90.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:7b:cd:ac:c9:06:26:55:7d:8d:87:ed:60:c6:a4:58:4c:1e:
         10:4d:54:a5:5c:60:ce:43:8c:04:f2:fe:95:be:8c:aa:d5:83:
         bc:84:dd:8b:0d:5c:bc:92:f9:94:7f:02:5f:56:f8:bf:73:1f:
         f0:dc:99:f5:90:27:52:df:59:d0:2f:93:e1:88:4f:bd:ab:19:
         a9:03:50:45:d1:a3:5c:3e:ef:ec:b4:e1:7f:b8:1c:44:0b:9d:
         8c:35:e3:39:e3:cb:4e:11:d6:ff:e8:05:ba:bc:1c:6d:6d:26:
         c5:b6:7a:45:52:ef:cf:43:62:4e:a2:64:84:24:ec:ed:d9:33:
         aa:5f:03:e7:61:3a:e6:02:62:2b:3a:06:3f:07:64:40:55:bd:
         fe:aa:48:03:09:4a:04:ce:b6:e2:8f:2b:3e:a3:4e:bf:5b:1f:
         0e:c0:b0:51:2e:4e:e6:75:2b:f9:78:10:38:5b:3f:fb:dd:9d:
         9f:8f:06:24:47:2c:40:14:a6:69:30:07:bd:f4:d1:a2:76:cf:
         61:17:0a:28:20:2b:79:c7:cf:a5:54:f3:5d:cb:52:35:8f:d2:
         ed:f8:e0:95:04:c3:c0:45:3e:f7:69:1e:30:fa:db:4e:72:20:
         11:49:e3:77:07:b4:b7:01:1e:22:d9:f3:53:8a:28:cf:09:66:
         ff:9c:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:19:18 2025 by rpki-client