Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/cjw3qiRqIYqROluuCMJhOEoO-T4.roa
File:                     cjw3qiRqIYqROluuCMJhOEoO-T4.roa (raw, json)
Hash identifier:          8Tmzmxwf5jMnxWJ2ScqjG/5HYTn9Q6yjzS2byZp4PqQ=
Subject key identifier:   72:3C:37:AA:24:6A:21:8A:91:3A:5B:AE:08:C2:61:38:4A:0E:F9:3E
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       66
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/cjw3qiRqIYqROluuCMJhOEoO-T4.roa
Signing time:             Fri 01 Aug 2025 01:34:36 +0000
ROA not before:           Fri 01 Aug 2025 01:34:36 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        203.140.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug  1 01:34:36 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=723C37AA246A218A913A5BAE08C261384A0EF93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4d:26:e8:ef:cf:1d:57:bf:a2:ec:b7:73:02:
                    56:df:0c:91:5f:db:1c:e8:f5:85:d2:4d:f3:b3:2b:
                    2e:da:39:83:a5:36:4a:6d:73:8d:42:ab:5c:0d:2e:
                    9b:f7:00:f4:81:1a:ae:56:09:0e:e1:6b:e5:68:e1:
                    c3:9b:7f:b1:02:58:82:2d:eb:d1:9c:8e:e7:4e:81:
                    cd:6d:76:7a:87:ef:80:a3:df:04:3f:52:b5:89:d2:
                    39:f3:83:e5:95:d1:de:79:8c:ce:89:f7:50:16:33:
                    e8:15:ef:4e:37:95:90:21:39:7c:9d:20:45:7e:ee:
                    92:4a:bf:6b:c6:57:9b:99:d3:b7:e7:ef:88:98:be:
                    e6:52:7f:75:1a:e0:70:4f:59:ce:60:ae:5a:7c:0f:
                    66:1d:e7:a9:bf:6f:ca:95:7c:0b:a2:34:b2:51:35:
                    77:fe:4b:37:99:18:e0:94:04:64:c9:00:ce:12:f3:
                    9a:c8:e4:75:aa:d9:db:10:dd:fe:e8:2a:d3:d0:4f:
                    75:aa:6b:36:16:cc:08:40:be:a2:7d:ac:94:d5:8a:
                    0d:f3:4f:4f:bd:9b:ee:04:3f:60:8c:12:c5:b5:b9:
                    37:91:65:fe:a7:45:25:f0:bb:28:10:b0:2b:ff:f3:
                    c0:43:21:0a:af:73:b7:8a:cb:21:1c:5a:9d:9d:b0:
                    9d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:37:AA:24:6A:21:8A:91:3A:5B:AE:08:C2:61:38:4A:0E:F9:3E
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/cjw3qiRqIYqROluuCMJhOEoO-T4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:40:c5:64:7c:9b:c9:60:98:e5:84:d3:b7:dc:c9:54:f3:8f:
         be:e1:fc:08:d9:3a:86:e0:37:99:2b:fc:33:1d:1e:66:bd:20:
         b6:74:cb:bf:b7:2c:25:ea:87:e1:69:19:b3:80:05:c3:16:8a:
         77:93:45:81:9a:4b:38:b9:41:d9:16:11:b9:13:7e:cd:7c:96:
         5f:5c:dd:37:0e:15:b0:fb:05:09:2a:60:93:d3:2d:da:94:b0:
         b0:b4:fa:3a:2d:b5:0e:b4:9c:cc:57:d6:e9:97:5c:03:30:86:
         fd:5a:d2:c2:f4:44:1f:58:1d:6a:7a:14:bd:bb:19:af:af:d4:
         aa:29:40:a0:67:f4:a3:2c:7f:b4:50:09:55:42:72:57:af:96:
         3c:7d:5f:e2:01:89:5f:61:0a:2f:6d:e4:ab:14:0c:13:8b:60:
         7b:d0:4a:28:59:38:bc:32:a6:25:68:e8:56:38:c9:a2:77:de:
         e2:65:78:6a:6c:7f:a5:62:3d:e8:46:4b:69:11:12:2b:5d:6d:
         15:07:9d:9a:0e:a2:0c:a5:bc:d7:f3:e4:7f:bc:4d:20:f2:cf:
         b8:9d:20:69:59:95:bb:73:71:39:fb:58:a6:d7:cb:20:4d:72:
         ad:b3:b7:79:c1:f6:bd:9c:9c:ee:43:ac:46:dd:93:c1:43:fb:
         b9:b8:76:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:00:23 2025 by rpki-client