Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/50QkpmZlreBgD21UOgHBOJeHhYI.roa
File:                     50QkpmZlreBgD21UOgHBOJeHhYI.roa (raw, json)
Hash identifier:          J/FLy1GLgl5MFuzJ4a/fBJiwtYf2lnq2Qfn6JVXSwhI=
Subject key identifier:   E7:44:24:A6:66:65:AD:E0:60:0F:6D:54:3A:01:C1:38:97:87:85:82
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01D3
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/50QkpmZlreBgD21UOgHBOJeHhYI.roa
Signing time:             Tue 01 Jul 2025 01:42:27 +0000
ROA not before:           Tue 01 Jul 2025 01:42:27 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        202.221.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:42:27 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E74424A66665ADE0600F6D543A01C13897878582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:cd:0b:0d:ee:9d:b7:c0:46:98:95:24:36:
                    37:21:ce:de:65:8d:17:ca:d0:9a:ce:45:ec:c1:81:
                    2d:6b:a7:bc:20:44:a0:0d:3b:41:f8:8b:92:7a:38:
                    a3:0c:73:9d:76:f5:47:67:b3:ad:f0:b6:06:20:b6:
                    4f:3d:0c:12:c1:68:ee:63:16:ed:6e:b5:c2:fd:5c:
                    5c:2d:9c:d7:22:4a:1f:fa:fe:be:12:36:44:91:b5:
                    fb:96:01:13:b4:73:a5:3e:29:82:b0:90:07:39:ab:
                    1f:76:a4:05:e8:65:fe:1b:71:9a:38:77:bb:f7:c3:
                    7d:d5:c0:d8:3b:ae:e1:33:7b:b9:fe:a7:7f:61:a6:
                    6e:a6:bb:48:1b:13:83:41:ed:64:1a:5a:ac:4f:5c:
                    3f:ca:ff:2d:72:d0:40:31:cf:65:9d:5b:80:5c:16:
                    3d:ea:fe:81:e3:da:f9:84:81:89:cf:a1:d3:77:e3:
                    46:08:4d:df:59:b6:bf:e2:ef:07:1e:34:d4:34:22:
                    e3:73:5d:50:dc:e5:d0:5f:33:7a:82:29:f4:8f:55:
                    d5:67:38:a4:aa:7b:b7:db:c1:68:cb:19:72:29:cf:
                    cd:7f:77:b6:29:35:cd:3b:3a:27:40:27:cb:0b:5a:
                    62:a8:6a:7c:69:6f:e5:21:f2:70:f3:51:c9:22:65:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:44:24:A6:66:65:AD:E0:60:0F:6D:54:3A:01:C1:38:97:87:85:82
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/50QkpmZlreBgD21UOgHBOJeHhYI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:3c:27:e8:a2:64:f7:c8:0f:08:41:65:d5:be:3a:74:5c:cb:
         eb:c5:98:14:2e:e3:25:55:2c:00:61:c5:b1:d5:31:a4:aa:bc:
         7c:f1:64:7c:2f:bf:50:0a:0d:63:6a:c1:e9:78:d1:26:5d:a7:
         58:8f:77:48:53:c2:20:7a:2c:2b:0f:ff:0b:07:ed:51:ee:14:
         09:8a:6c:81:8c:0a:a4:87:f8:9b:1f:a9:ad:b4:a3:a8:3c:58:
         23:7b:0e:02:5a:b8:5d:52:18:d5:62:3d:9e:e7:98:ac:f0:c1:
         2e:e9:f3:ef:00:27:6e:92:81:bf:60:8c:f4:20:ab:d4:b7:1a:
         2b:1b:e1:f3:fb:af:8e:87:6f:ac:15:92:21:64:e8:73:ef:f7:
         64:91:21:29:3d:61:c5:6e:72:65:32:c5:3f:fc:fb:1c:f8:cb:
         04:58:52:c8:f0:af:19:c8:bf:7b:07:ff:be:e3:30:c6:f4:d5:
         68:87:e4:80:14:ff:c0:36:bf:8b:48:97:db:70:e6:1a:a4:87:
         c7:48:43:18:86:d2:d6:db:57:13:10:c6:d1:61:24:d8:9c:09:
         1c:f9:94:6d:de:b3:5c:cf:9e:71:eb:63:e6:82:cf:7d:c4:fd:
         f0:e1:aa:1d:fa:f8:66:43:73:60:cb:25:8d:1f:62:79:e9:59:
         4f:2f:33:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:28:04 2025 by rpki-client