Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/YrLfUnE5pC6J6YJgh7YjQwMIBPg.roa
File:                     YrLfUnE5pC6J6YJgh7YjQwMIBPg.roa (raw, json)
Hash identifier:          J7YN+U8/LPeth8Se7rqNbaKQGeEt6yTYPAU/KaoUs+U=
Subject key identifier:   62:B2:DF:52:71:39:A4:2E:89:E9:82:60:87:B6:23:43:03:08:04:F8
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       2C
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/YrLfUnE5pC6J6YJgh7YjQwMIBPg.roa
Signing time:             Fri 01 Aug 2025 01:36:01 +0000
ROA not before:           Fri 01 Aug 2025 01:36:01 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     24255
IP address blocks:        219.100.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Aug  1 01:36:01 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=62B2DF527139A42E89E9826087B62343030804F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1d:6f:a0:d1:ec:aa:ad:43:46:b0:bc:8c:45:
                    1d:40:01:39:76:8a:54:2b:3e:19:5e:4b:ea:4e:55:
                    a7:75:37:d6:cc:e0:19:98:57:a8:82:5f:86:14:b1:
                    a0:1a:fb:3a:ab:06:26:4e:d6:f5:3a:1c:7b:49:f6:
                    30:a3:16:26:8c:73:2b:23:87:32:af:90:05:fc:83:
                    64:aa:be:38:35:81:fa:f5:7f:1c:0d:99:7e:d5:fd:
                    89:83:91:66:0e:da:e9:39:95:8b:1d:a8:5b:23:03:
                    3d:b2:4d:59:1f:88:4b:30:c2:c2:ba:28:26:d8:41:
                    27:bf:6d:43:cf:4e:36:16:80:ec:6e:45:c5:57:6c:
                    97:d6:32:8e:09:65:46:9a:db:2c:f9:ca:2b:dd:09:
                    c4:e1:f6:bc:9f:2e:58:f3:70:62:d2:08:4c:b5:f3:
                    67:00:71:15:d2:22:24:57:84:8c:a0:e9:5d:50:1b:
                    75:60:50:8e:9b:0a:50:cd:0d:a5:0f:06:74:4e:95:
                    10:be:46:58:49:f8:3e:3b:4d:55:9a:06:66:52:3f:
                    85:22:b5:1c:fc:0a:00:38:98:3d:12:2c:84:76:df:
                    1e:14:a8:f5:2b:68:ae:04:34:96:85:2e:51:44:5c:
                    74:a1:a5:4a:f1:87:3c:fe:fb:ca:54:1c:bb:79:33:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B2:DF:52:71:39:A4:2E:89:E9:82:60:87:B6:23:43:03:08:04:F8
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/YrLfUnE5pC6J6YJgh7YjQwMIBPg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:9b:39:a6:ae:be:c2:11:0a:27:7c:29:b9:f5:02:00:b6:72:
         19:2e:96:2b:b6:61:24:72:13:d2:13:90:b6:ae:b0:19:c3:29:
         78:2c:fb:55:2a:10:cb:44:fb:ed:c6:a0:f7:19:0a:d9:91:d7:
         b7:7f:40:c7:af:a0:35:5a:d7:41:e0:25:63:4e:d5:17:75:ea:
         04:dc:be:aa:8c:22:6a:f9:6d:16:b0:22:f1:97:f4:71:38:ed:
         19:38:f4:1a:e5:6e:de:fe:4e:99:28:dd:ea:87:3f:77:48:f3:
         1a:26:e1:69:94:ac:63:60:19:db:bd:f3:f3:a5:00:86:4b:3c:
         6b:ca:1f:ff:c1:41:5e:d1:fe:06:57:1e:53:a5:43:c4:41:02:
         32:a8:21:88:c4:56:12:e7:0f:58:fb:6a:2e:1e:fc:5e:f9:ab:
         85:30:d7:e5:50:26:b8:82:a9:7a:fc:37:e1:e2:39:b3:aa:db:
         72:f9:db:a0:9e:48:87:e4:00:35:17:9e:72:6a:ea:c1:bb:4a:
         1f:8a:a6:37:f0:54:13:c1:94:f7:4b:44:cb:ff:76:91:20:53:
         e6:f8:b1:96:48:c5:a5:53:f6:a6:8c:17:67:a3:6f:e2:1a:24:
         a7:83:58:71:f5:54:66:56:f6:b0:72:ec:89:b5:c4:b4:f9:c1:
         80:f4:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:27:00 2025 by rpki-client