Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/VZWn_-1bGQd-d339wIb-XCxpUUg.roa
File:                     VZWn_-1bGQd-d339wIb-XCxpUUg.roa (raw, json)
Hash identifier:          bfcL1OTITKIvAocbZXkgpiPM0pg2Gywdn4ECEZ3VJrI=
Subject key identifier:   55:95:A7:FF:ED:5B:19:07:7E:77:7D:FD:C0:86:FE:5C:2C:69:51:48
Certificate issuer:       /CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
Certificate serial:       14
Authority key identifier: A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/VZWn_-1bGQd-d339wIb-XCxpUUg.roa
Signing time:             Thu 24 Jul 2025 02:35:07 +0000
ROA not before:           Thu 24 Jul 2025 02:35:07 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        158.205.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 Aug 2025 22:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
        Validity
            Not Before: Jul 24 02:35:07 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=5595A7FFED5B19077E777DFDC086FE5C2C695148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:73:c3:fc:55:4d:c4:e5:79:5a:73:de:d2:
                    d7:1e:11:bd:99:03:3b:48:4b:4f:c4:2c:15:a9:6d:
                    d0:ed:c6:c8:56:8d:06:65:18:e0:3f:a4:0a:b7:9f:
                    64:57:2a:db:b1:ae:24:23:6c:67:1f:ee:21:f7:15:
                    1a:76:3d:d8:0b:17:df:80:49:8f:84:57:a9:24:d5:
                    52:41:74:94:96:8c:c9:bb:e4:8a:96:6e:f5:94:7a:
                    ea:79:03:c6:6f:07:e9:cd:91:06:b1:06:b0:3c:a2:
                    58:07:82:dc:a9:2e:ba:ec:20:6f:13:3c:34:c7:66:
                    7d:91:ed:56:35:2b:ad:ca:fb:ea:f6:0b:b2:01:ec:
                    02:33:4d:9e:74:65:99:45:7c:f4:31:c4:48:a3:87:
                    d5:68:f4:37:15:ce:b1:72:7f:01:09:d9:28:f7:17:
                    cb:84:4c:ea:fe:c2:4c:8c:00:5b:4b:01:49:94:85:
                    b2:0e:2e:21:dc:68:25:9c:74:de:d4:08:91:b2:13:
                    3d:ab:9d:29:8b:9c:63:87:4a:6f:11:12:47:39:d8:
                    1e:f1:34:04:92:f8:95:2b:b9:de:17:f5:96:47:5a:
                    18:06:25:38:ff:0d:2e:63:5a:83:66:3e:7e:47:9a:
                    b9:11:8d:9e:2e:10:14:8f:df:00:51:82:1c:cc:7e:
                    75:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:95:A7:FF:ED:5B:19:07:7E:77:7D:FD:C0:86:FE:5C:2C:69:51:48
            X509v3 Authority Key Identifier:
                keyid:A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/VZWn_-1bGQd-d339wIb-XCxpUUg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.205.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:0f:22:0b:39:16:0b:98:79:15:25:11:f0:e0:71:b4:d4:2f:
         77:d8:a9:04:d2:b4:30:60:be:70:f1:3c:bd:c5:fb:12:9c:27:
         33:f8:c0:74:b6:26:30:48:58:cf:db:01:77:2b:b9:65:ce:85:
         64:ca:53:95:e5:93:74:7b:c4:6d:2c:a0:8b:2c:35:41:40:06:
         0f:9b:6e:a9:d2:d5:d7:d4:02:99:1b:9f:ed:c4:ee:07:ab:c7:
         36:1d:6c:72:6e:e1:66:cb:d7:93:af:1e:b4:39:cd:c2:9b:34:
         23:c9:c0:ef:ec:df:0a:67:42:66:65:ff:78:2f:67:97:96:e4:
         8a:76:a8:28:79:c3:68:f2:55:74:23:00:a8:41:62:d3:b2:94:
         d4:9c:59:aa:5a:ed:ef:02:cc:d6:eb:15:47:45:7d:3e:b9:a4:
         50:f2:56:49:8f:76:20:8f:f0:62:db:fe:cf:aa:28:b4:57:93:
         0f:7d:88:61:0f:73:0d:7d:af:bc:b0:0f:a5:8b:09:c5:a5:f0:
         04:87:7d:b4:ad:bb:9e:3e:be:1f:36:c4:90:c8:dc:db:e0:a7:
         b8:9e:3b:e0:07:ce:44:9d:54:84:aa:d8:ac:81:d6:78:0a:bb:
         9d:7e:ec:6e:23:76:02:0a:46:24:b1:4c:b7:db:db:b5:06:6c:
         5c:4f:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 15 00:23:11 2025 by rpki-client