Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/rvxqcyUm6jIOc5oyEhgiv9SLBWo.roa
File:                     rvxqcyUm6jIOc5oyEhgiv9SLBWo.roa (raw, json)
Hash identifier:          iFcLi6Y3DkxuGpRVxHnJzKi9sazOoyDRWzaLpwAVL5Q=
Subject key identifier:   AE:FC:6A:73:25:26:EA:32:0E:73:9A:32:12:18:22:BF:D4:8B:05:6A
Certificate issuer:       /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
Certificate serial:       2A
Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/rvxqcyUm6jIOc5oyEhgiv9SLBWo.roa
Signing time:             Fri 01 Aug 2025 01:35:56 +0000
ROA not before:           Fri 01 Aug 2025 01:35:56 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4695
IP address blocks:        202.231.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
        Validity
            Not Before: Aug  1 01:35:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=AEFC6A732526EA320E739A32121822BFD48B056A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:dd:19:59:e3:cd:fc:52:6b:f6:30:49:97:
                    eb:46:2d:4c:4f:71:f9:11:6c:b0:15:ad:58:dc:00:
                    56:88:49:70:e2:6d:87:48:5a:58:ae:69:26:18:53:
                    10:49:75:cb:b5:30:3e:74:ab:7f:41:8d:f8:7d:c6:
                    aa:8d:48:cd:ea:69:ac:f5:d4:01:fb:6d:ea:51:e1:
                    07:4e:cd:43:9c:69:80:1b:a9:b7:de:4f:aa:30:cd:
                    27:ef:73:99:ff:85:fb:a4:84:72:8c:88:9d:47:1e:
                    c4:eb:89:fc:1f:c8:7e:ab:51:13:7b:94:01:6d:b8:
                    7f:f1:a3:92:ce:07:5b:dd:ae:5b:2f:c5:f0:e3:1a:
                    8d:b0:9c:0f:62:67:3d:ab:d3:2f:1e:29:7e:4b:9c:
                    92:38:3c:18:75:44:f2:34:2c:b1:88:e4:27:52:7e:
                    85:d2:c4:6f:ec:ba:4c:8e:15:1b:19:1d:f0:ac:10:
                    b6:bb:a0:e0:ec:25:78:20:cd:95:ef:1d:78:6d:0e:
                    f9:c5:32:39:b6:27:03:51:89:e2:f6:4c:c6:48:7f:
                    99:0c:27:88:b8:6d:73:5c:fd:b1:c0:df:50:73:28:
                    28:04:49:43:ec:61:68:db:38:f4:de:4f:9d:19:7d:
                    90:b1:4e:d8:fc:3f:42:46:d0:71:d6:58:b1:cb:fc:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FC:6A:73:25:26:EA:32:0E:73:9A:32:12:18:22:BF:D4:8B:05:6A
            X509v3 Authority Key Identifier:
                keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/rvxqcyUm6jIOc5oyEhgiv9SLBWo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.231.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:25:74:aa:f4:f0:bc:de:0f:01:47:96:3a:de:0b:2a:e1:c5:
         4e:f7:2f:52:8f:a7:43:c1:aa:82:c4:d5:c6:e4:3c:60:a5:35:
         79:5b:7a:8a:d7:48:50:cc:ae:a4:f6:93:a0:00:aa:92:56:02:
         26:d7:d2:ef:5c:ff:5f:7e:1e:18:55:7d:a8:8a:30:d5:e0:42:
         9c:24:47:a8:5b:12:e9:08:2b:04:b9:22:5f:9b:0b:06:0d:61:
         17:62:71:3e:24:c9:3a:ac:b7:20:5f:3f:5e:fc:53:3c:e8:a8:
         1e:6a:2d:89:7f:e0:aa:f6:18:11:bc:f9:69:ce:28:5f:e9:2f:
         e0:b8:94:1f:b6:62:b1:ef:93:42:be:3d:c2:7b:97:92:c7:b3:
         18:54:78:b8:d0:ea:84:61:e6:ac:ec:93:f8:55:3d:20:92:cf:
         e7:0b:a5:01:d0:9f:05:c4:60:24:c1:59:37:11:58:b4:22:2f:
         c1:e6:df:da:37:c4:da:33:6b:05:ca:53:57:9c:c3:c4:78:8a:
         bd:69:ab:8b:7b:5d:fc:14:9e:d8:59:1e:74:9d:7e:83:66:4e:
         a6:3a:8c:3e:52:1b:09:e7:6f:0c:ff:09:55:9d:e7:00:1f:33:
         5c:16:09:a5:b5:ab:5b:2e:6f:79:90:33:59:90:ff:33:e4:e7:
         75:b2:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:43:01 2025 by rpki-client