Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/J2Vx99J_fD3GSaq4zN8iSwCQKgI.roa
File:                     J2Vx99J_fD3GSaq4zN8iSwCQKgI.roa (raw, json)
Hash identifier:          HSmknl8i1fmYB4Stcst9Er1D+jIiLmP2CanzX9bE03A=
Subject key identifier:   27:65:71:F7:D2:7F:7C:3D:C6:49:AA:B8:CC:DF:22:4B:00:90:2A:02
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01C4
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/J2Vx99J_fD3GSaq4zN8iSwCQKgI.roa
Signing time:             Tue 01 Jul 2025 01:34:45 +0000
ROA not before:           Tue 01 Jul 2025 01:34:45 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        220.100.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:34:45 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=276571F7D27F7C3DC649AAB8CCDF224B00902A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:65:1b:32:7d:59:db:d3:a6:98:50:71:c4:
                    da:a1:38:50:11:d0:b0:5f:a6:42:36:6e:2a:6a:37:
                    df:51:8c:cb:3d:c0:fe:8f:c7:03:bc:6f:72:89:92:
                    42:88:cf:80:02:fd:f8:30:62:0a:45:00:4d:a1:b5:
                    2f:ce:1b:12:6e:e6:68:47:4f:1e:fb:17:95:72:2e:
                    86:91:ab:9f:02:0f:a2:da:33:81:a6:e1:1e:5a:04:
                    fd:28:e2:fb:ac:89:5d:94:dc:39:32:0a:f5:15:1a:
                    ec:8d:ac:d4:39:44:f0:c5:f9:63:3e:bd:00:8b:f7:
                    e7:8a:2d:e3:34:1a:48:b9:54:27:c4:38:06:2a:d2:
                    7e:6a:18:78:33:ce:8a:0d:e3:c4:7c:e9:fe:11:1d:
                    76:f6:3d:ec:cf:29:fd:1b:14:09:b7:70:64:89:da:
                    9a:41:ac:07:fa:e6:2d:8a:29:55:d2:32:c9:eb:fe:
                    46:36:b5:fb:52:df:61:23:08:66:32:79:ae:8d:1f:
                    12:69:db:95:99:c2:08:e6:6e:4f:36:99:95:f7:0d:
                    1d:ac:68:46:fe:9c:88:fb:eb:1d:76:82:95:ea:b5:
                    94:65:d0:84:3c:d1:d3:a6:ae:cb:e9:00:64:d8:a5:
                    f3:04:22:7c:cd:6b:ac:b0:50:06:ea:c5:a8:28:e3:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:65:71:F7:D2:7F:7C:3D:C6:49:AA:B8:CC:DF:22:4B:00:90:2A:02
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/J2Vx99J_fD3GSaq4zN8iSwCQKgI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.100.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         25:1d:3d:ff:9a:1d:b3:e9:b0:63:e5:d0:af:0b:61:d4:5d:ae:
         39:e8:44:16:7c:20:4d:ba:ed:89:83:b3:41:c3:42:0e:55:60:
         c6:0b:7e:cc:12:c7:63:d8:a9:d9:b6:88:f2:f6:3d:73:96:62:
         3f:6b:33:1e:95:89:2e:84:0a:50:45:7c:77:d0:f5:57:e8:c1:
         7e:6a:1a:16:9f:fc:c4:e9:e4:6c:4a:27:6c:c1:ec:a6:11:6f:
         07:bf:c3:ae:fe:90:71:c8:71:60:01:ca:4a:c3:e1:81:41:3d:
         a0:5d:f1:09:ce:93:80:fa:21:f8:6a:a5:25:c4:ec:3e:db:b5:
         3f:af:97:d1:a4:11:e4:89:d0:d6:bc:bb:3f:f2:7b:42:55:a7:
         2b:bb:10:79:cd:ab:a6:32:3f:69:b4:f6:7c:b9:73:9c:be:ad:
         f9:e8:35:04:2c:b9:8a:ae:37:9a:15:a5:38:0f:2f:f5:26:b0:
         5b:09:3f:a4:f3:1b:70:e2:01:23:f7:81:25:d8:e0:58:01:d9:
         d6:32:4c:23:78:46:38:eb:0c:38:b7:5a:90:63:65:62:7f:20:
         32:87:5b:d1:4f:21:a5:54:15:3e:25:b4:cf:4c:9d:3a:f8:3d:
         21:22:e6:9b:dd:84:75:30:1a:8b:8e:4f:24:1f:2c:54:81:a0:
         4f:55:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:00:00 2025 by rpki-client