Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1164/eq0R3Xn9cEKLh-53gsPt1ALfqhs.roa
File:                     eq0R3Xn9cEKLh-53gsPt1ALfqhs.roa (raw, json)
Hash identifier:          i7OshZlid0jP+bObLA0gSlBPE5IvzFxyt0pPA1oQfEc=
Subject key identifier:   7A:AD:11:DD:79:FD:70:42:8B:87:EE:77:82:C3:ED:D4:02:DF:AA:1B
Certificate issuer:       /CN=12301D400962DD987A3C7B83A3366287D47F86FD
Certificate serial:       05
Authority key identifier: 12:30:1D:40:09:62:DD:98:7A:3C:7B:83:A3:36:62:87:D4:7F:86:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/eq0R3Xn9cEKLh-53gsPt1ALfqhs.roa
Signing time:             Sat 09 Aug 2025 16:47:47 +0000
ROA not before:           Sat 09 Aug 2025 16:47:47 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        150.3.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 17:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12301D400962DD987A3C7B83A3366287D47F86FD
        Validity
            Not Before: Aug  9 16:47:47 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=7AAD11DD79FD70428B87EE7782C3EDD402DFAA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:93:a3:51:ca:72:59:f0:77:16:74:a2:f8:9e:
                    70:bc:c6:2b:81:d0:04:26:ff:4f:f5:7c:99:40:62:
                    ec:5b:c4:73:a4:c7:33:fc:5f:9c:c7:66:e1:c9:6e:
                    04:8b:3b:63:b3:c2:71:ac:65:fb:ea:5e:aa:38:f2:
                    25:8e:6d:ff:86:35:27:4e:1d:be:fc:1f:ff:8a:9a:
                    29:3e:f5:a6:ac:a9:63:3f:d2:b2:da:a9:ac:19:29:
                    8e:6c:8c:62:db:f7:59:e6:d9:2e:2a:a6:c0:5b:09:
                    f6:b2:84:e2:75:7c:71:51:c6:12:f5:84:70:23:3f:
                    7c:03:19:2e:9f:76:42:38:0a:b9:32:97:32:52:7c:
                    6c:91:70:aa:0f:49:8e:65:5c:d0:10:a6:07:6e:d2:
                    27:0a:b0:a1:c8:54:f4:db:39:1f:f0:06:cd:27:08:
                    90:ee:07:a3:a2:f1:e7:99:ed:b6:b2:c4:33:02:31:
                    97:08:b8:7e:b9:c1:a7:17:f1:a8:23:2f:17:ec:fc:
                    d8:bc:7e:d2:f6:cb:d8:a9:59:f2:34:89:40:e5:55:
                    7b:15:64:08:b4:e7:60:fd:cc:b6:02:85:e8:c3:8a:
                    f2:e0:5a:d5:9e:e6:64:95:ce:db:13:26:af:8c:95:
                    1e:14:59:e7:30:08:bb:ce:95:1a:a3:00:08:7f:2b:
                    ec:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AD:11:DD:79:FD:70:42:8B:87:EE:77:82:C3:ED:D4:02:DF:AA:1B
            X509v3 Authority Key Identifier:
                keyid:12:30:1D:40:09:62:DD:98:7A:3C:7B:83:A3:36:62:87:D4:7F:86:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/eq0R3Xn9cEKLh-53gsPt1ALfqhs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.3.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:3d:0a:d1:09:44:12:9b:fe:46:a2:96:00:98:e8:a0:6a:f6:
         df:2b:fc:0d:7d:ff:45:88:ab:ce:68:71:b1:bb:26:66:89:a9:
         5f:d1:95:97:47:5e:d3:cb:73:ba:cc:0e:0a:87:f8:32:5a:fe:
         09:d2:f4:e9:1d:70:c3:16:79:c6:7a:d8:a7:dd:f6:60:9c:5b:
         45:00:43:87:b7:8e:ec:04:6a:fe:38:b7:60:ed:86:56:8c:19:
         68:dc:f3:75:b3:0c:d6:21:84:2f:83:9a:bd:dc:77:97:3c:8a:
         e1:d3:96:4c:d2:5f:46:b2:e0:61:13:e0:50:33:80:5a:f6:2f:
         1d:4e:ab:18:fb:05:07:0f:20:59:51:3a:68:23:cb:11:ab:4b:
         22:07:b0:f7:fb:35:55:35:d3:f8:f4:90:af:3c:cd:26:c4:82:
         a6:9a:db:5e:a6:f7:3d:01:19:d2:15:4f:9f:5c:94:48:c8:c0:
         27:36:87:6b:4e:b8:87:45:86:fb:0e:c5:e6:0f:82:10:71:9c:
         01:b9:66:30:7c:a7:46:c6:c5:d7:fb:ab:d5:18:b8:49:48:9b:
         10:71:1b:16:56:4c:a9:db:c9:2c:60:e1:ac:58:61:2c:87:7f:
         48:a2:15:b5:c1:e9:60:47:5d:15:a7:45:d1:73:26:df:64:5c:
         80:fa:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:23:02 2025 by rpki-client