Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/esvavnGBHRHu4w4KCsy1z-mzV_U.roa
File:                     esvavnGBHRHu4w4KCsy1z-mzV_U.roa (raw, json)
Hash identifier:          +fJ7h0q5gYOJ07qkuky9f78LCoHaS8tUC+wfY0eduS4=
Subject key identifier:   7A:CB:DA:BE:71:81:1D:11:EE:E3:0E:0A:0A:CC:B5:CF:E9:B3:57:F5
Certificate issuer:       /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial:       55
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/esvavnGBHRHu4w4KCsy1z-mzV_U.roa
Signing time:             Tue 01 Jul 2025 01:35:51 +0000
ROA not before:           Tue 01 Jul 2025 01:35:51 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     38651
IP address blocks:        114.31.104.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
        Validity
            Not Before: Jul  1 01:35:51 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=7ACBDABE71811D11EEE30E0A0ACCB5CFE9B357F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:18:36:51:59:a8:92:b3:02:63:ce:fe:92:
                    ea:21:39:45:81:77:ef:5c:d5:81:4d:11:b5:d9:35:
                    d6:e4:e7:21:07:5d:c7:eb:10:ad:a8:b9:43:58:d4:
                    4c:7c:b5:2a:0b:24:4c:9d:dc:6e:44:14:58:cf:bf:
                    c2:7f:56:4d:fa:fd:15:fa:95:0e:35:50:d8:58:64:
                    49:39:8c:06:5a:7d:7a:07:8f:d3:47:45:4b:71:82:
                    bc:d4:e9:d7:2e:fa:99:36:5c:41:7d:1c:89:3a:fc:
                    eb:94:7a:e5:23:72:e4:6e:c9:e5:46:93:9e:c6:f6:
                    a9:30:34:24:aa:dc:55:de:b8:5b:d6:12:07:3b:fb:
                    c0:3e:5f:e4:d2:67:12:67:50:3c:2e:c2:42:54:8d:
                    63:75:8a:6b:18:b0:85:66:a3:f3:65:82:0a:0e:02:
                    5c:0e:d2:ec:a6:59:ed:06:06:50:d8:87:94:05:b4:
                    39:36:11:35:42:fe:6b:07:26:0b:c5:fe:79:73:3a:
                    c8:71:66:0e:5f:31:f0:41:31:8f:37:2d:44:1d:e8:
                    75:8d:78:e5:35:42:37:54:fe:f7:d7:72:41:67:fc:
                    ed:3a:89:94:bd:3d:20:7a:d8:84:58:c7:14:c8:20:
                    e4:54:5d:4c:bc:26:de:ae:74:96:50:e1:de:eb:32:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:DA:BE:71:81:1D:11:EE:E3:0E:0A:0A:CC:B5:CF:E9:B3:57:F5
            X509v3 Authority Key Identifier:
                keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/esvavnGBHRHu4w4KCsy1z-mzV_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:bf:b1:7e:41:92:48:d7:4c:d1:47:c3:bc:7d:c3:0a:f6:2a:
         07:fd:8e:fb:19:92:e5:06:52:26:fc:14:6b:09:14:2c:38:73:
         70:82:1c:3d:02:b4:37:a7:3d:74:e3:62:08:a5:6a:e2:20:42:
         ac:64:d3:02:f2:bd:bb:be:cd:c4:6a:6e:d9:64:8f:9c:cc:69:
         74:6d:8a:7e:ee:df:02:6f:7e:8e:0a:c6:06:c8:ac:a1:b4:cc:
         04:4e:b1:d7:20:16:2d:71:72:97:c7:5a:a6:d7:59:ef:d5:58:
         05:8d:9c:4c:20:8f:f0:1a:7e:44:b2:46:c5:0b:b3:31:38:c5:
         3b:c0:dd:7f:45:26:4a:b0:b2:3f:6f:10:66:e0:33:73:b3:0a:
         ac:e3:68:1f:9a:22:db:91:09:b0:96:f4:88:86:9b:1d:95:5a:
         f7:e4:ee:82:4c:09:af:3a:2c:21:9e:38:af:91:aa:3e:e6:94:
         7c:e7:34:bf:cd:c6:a3:f7:63:1c:89:da:86:f4:7f:6b:f5:de:
         52:bd:0c:7b:d6:a7:8e:db:b8:c6:dc:18:9b:da:a3:cb:a4:11:
         36:57:4a:c6:44:fe:7d:24:af:c4:58:90:a4:3c:0a:6b:75:18:
         24:89:24:29:fb:a1:5b:38:45:cb:8a:70:5c:b2:d1:55:96:24:
         df:d3:8a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:27:11 2025 by rpki-client