Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/792ve__70B0e2lk7QqaG4Y9SPN8.roa
File:                     792ve__70B0e2lk7QqaG4Y9SPN8.roa (raw, json)
Hash identifier:          qiyGaqANz8k9WQXVPbW9rm477Yo708ox7emgl+QXWRw=
Subject key identifier:   EF:DD:AF:7B:FF:FB:D0:1D:1E:DA:59:3B:42:A6:86:E1:8F:52:3C:DF
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01B2
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/792ve__70B0e2lk7QqaG4Y9SPN8.roa
Signing time:             Mon 23 Jun 2025 05:15:51 +0000
ROA not before:           Mon 23 Jun 2025 05:15:51 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     10000
IP address blocks:        163.131.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jun 23 05:15:51 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=EFDDAF7BFFFBD01D1EDA593B42A686E18F523CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:56:0f:66:5c:e9:ec:f2:ea:6d:f7:0f:fb:
                    b8:f2:8f:ab:77:21:fe:de:fa:be:fd:55:55:c6:3a:
                    ce:05:39:0e:cb:75:6d:f6:3d:4a:cf:e7:c0:18:78:
                    f9:de:25:ec:0e:ce:8b:84:98:61:b7:c7:9e:fe:dc:
                    ae:3a:b1:0e:43:f5:88:47:52:76:a5:2d:04:31:cf:
                    c2:d0:59:e3:bd:4c:f4:2e:c2:f1:3f:35:cc:1c:47:
                    97:c3:59:4c:49:c4:d3:5e:a4:a0:60:f0:13:d8:c0:
                    27:25:35:87:aa:38:ba:1b:13:4c:60:7b:72:0f:41:
                    83:39:73:26:5d:e2:71:a2:08:b7:0f:ad:f5:78:31:
                    c2:bf:c3:3a:77:39:d7:26:53:30:10:48:76:75:58:
                    82:bf:24:e6:58:72:79:04:92:0b:58:2f:f3:70:b8:
                    80:7f:8d:bd:90:41:97:f5:5a:e8:1d:d3:e2:f5:1f:
                    a0:38:67:73:96:3b:1e:83:e2:7f:4a:61:46:2c:dd:
                    79:44:1f:85:5d:b7:9a:ef:9d:f9:89:e9:cd:23:87:
                    40:8f:e6:52:52:68:ab:b5:5b:94:7d:52:93:a7:ca:
                    4e:ab:a0:b9:b2:90:0d:ad:98:5e:36:ff:31:a0:68:
                    06:eb:79:77:cf:96:09:0a:1c:e2:1a:10:e1:26:92:
                    8f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DD:AF:7B:FF:FB:D0:1D:1E:DA:59:3B:42:A6:86:E1:8F:52:3C:DF
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/792ve__70B0e2lk7QqaG4Y9SPN8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.131.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:73:e1:0e:49:77:c8:a4:d3:f3:f1:4e:37:6b:03:e7:43:05:
         4c:f3:cf:ac:09:df:19:1c:63:cc:58:d6:51:6b:1b:2e:e1:ef:
         32:f7:75:ce:88:3f:da:58:d5:72:fe:88:1e:04:43:90:46:10:
         07:3a:4c:45:d3:e7:ec:a3:6e:c8:3f:bb:ea:af:3a:a0:7f:13:
         ff:da:37:72:42:92:ba:3b:d5:1a:2e:1a:59:e9:89:95:55:37:
         55:11:2a:d2:92:36:a9:63:88:27:ee:e0:ea:9a:a7:46:4e:94:
         74:84:4a:f0:ef:d8:f8:f6:b9:b3:1c:12:49:a2:85:57:ab:8c:
         ca:79:5c:20:5a:79:60:e2:64:9e:1c:3f:fd:6f:ff:ff:6d:74:
         14:f0:cf:91:fc:57:78:66:3d:6c:41:5c:e8:17:04:35:ac:c7:
         2f:90:60:da:fc:de:90:a2:36:31:b0:5a:a9:ab:d0:84:f2:9e:
         5f:98:ac:e5:88:a5:fb:03:8c:1f:ff:67:73:2d:23:99:10:9b:
         e3:16:9f:22:ab:3a:81:39:e8:b7:23:98:3c:02:20:a7:a4:ca:
         b8:ee:c7:ab:b1:40:ff:83:e8:96:d9:fd:2d:d2:5d:53:08:29:
         41:ff:74:21:0b:7c:7b:70:60:e2:85:cf:4e:19:fd:20:2d:2e:
         03:0d:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:46:18 2025 by rpki-client