Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ao3X-NKBeh79IntBfz7JVTfyKKI.roa
File:                     Ao3X-NKBeh79IntBfz7JVTfyKKI.roa (raw, json)
Hash identifier:          KsFZTDZVdZOCFaM6qW8boeRloR24B56VIjh2Gi1ackQ=
Subject key identifier:   02:8D:D7:F8:D2:81:7A:1E:FD:22:7B:41:7F:3E:C9:55:37:F2:28:A2
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01B4
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ao3X-NKBeh79IntBfz7JVTfyKKI.roa
Signing time:             Tue 01 Jul 2025 01:34:34 +0000
ROA not before:           Tue 01 Jul 2025 01:34:34 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        202.48.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:34:34 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=028DD7F8D2817A1EFD227B417F3EC95537F228A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:cd:4e:7d:92:f6:c5:ae:73:a9:55:b2:ed:
                    ff:ec:ce:33:61:c7:76:bd:33:69:16:2f:1b:44:35:
                    10:ea:dc:ec:ae:9b:46:58:8a:58:5f:18:2f:f7:47:
                    a2:f0:de:0a:f4:b0:1c:31:28:14:2b:03:81:fa:af:
                    fb:ec:7b:08:bb:d4:45:d6:a6:0d:7d:d3:31:d2:8e:
                    6a:28:33:ac:44:09:6c:a7:ed:7d:cf:bb:7a:e7:b5:
                    59:5a:2a:7e:41:d2:d6:42:7b:01:36:43:98:06:f0:
                    06:50:b5:04:e7:02:f1:b0:26:04:2f:77:4e:b4:79:
                    bd:bf:44:02:aa:1a:19:fa:70:b7:aa:0a:2b:2b:cb:
                    b6:43:7b:19:37:6f:5d:a7:0a:18:35:8a:3a:21:5c:
                    c6:35:8f:5f:26:1c:fe:2c:66:04:04:35:7c:5c:c9:
                    c8:cb:ce:dd:c3:45:be:fe:d6:13:bf:10:d1:d7:00:
                    13:62:1e:d3:ce:9b:ad:80:a1:d7:6e:94:69:64:73:
                    b9:0c:ed:c1:5f:32:d7:6c:05:8d:74:28:d8:b6:a3:
                    40:23:5a:ca:57:e1:e1:6c:e4:a4:01:66:01:06:08:
                    f1:93:5c:98:5e:c2:a4:31:a5:74:12:7f:2f:6d:e2:
                    1c:66:a6:90:60:04:e3:8e:66:d1:eb:1f:e6:40:c5:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8D:D7:F8:D2:81:7A:1E:FD:22:7B:41:7F:3E:C9:55:37:F2:28:A2
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ao3X-NKBeh79IntBfz7JVTfyKKI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.48.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:28:25:62:d9:ed:47:ca:5d:a0:2b:bf:1b:d1:1a:71:bf:8d:
         af:29:0f:ef:e6:6f:30:44:10:fc:b7:df:55:48:5b:1e:96:fa:
         6b:a3:63:bb:41:21:74:56:87:bf:4b:5e:dc:1a:61:71:79:c2:
         b0:ea:c9:52:d6:59:33:b3:5e:f7:cb:d0:f9:76:36:b7:23:c0:
         74:c8:ab:b3:3b:e8:b4:34:9f:91:57:ff:7f:4d:81:42:3f:92:
         0c:5c:0d:73:bc:4d:31:6b:c6:bc:c8:ab:64:e0:06:f7:7d:be:
         03:5e:2c:8e:0f:33:60:3c:29:e6:0f:9d:6d:b2:89:aa:ce:85:
         5f:5f:f3:b0:39:30:c3:66:d6:a8:7e:c4:79:0e:9a:e8:34:83:
         1d:e1:e2:a0:f8:d6:e4:0a:98:6d:35:ca:fa:93:e1:31:b4:e6:
         e0:34:85:30:b8:a5:84:6f:47:d2:f7:2b:b4:04:28:63:60:01:
         02:64:97:54:a3:05:9f:e8:64:98:05:0e:22:0e:be:66:a4:07:
         c0:d7:52:44:e2:56:b0:2e:b4:52:4c:93:23:e8:63:ea:f5:bb:
         b2:e6:37:22:d1:00:20:3f:c1:b2:b2:30:df:90:58:bc:d3:be:
         e6:11:c0:2a:89:df:0b:a5:de:ab:a3:d0:3c:f7:3e:4e:df:3f:
         d9:dd:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:11:12 2025 by rpki-client