Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/-44w3H7mHC3P6MEkJ64gddWl05o.roa
File:                     -44w3H7mHC3P6MEkJ64gddWl05o.roa (raw, json)
Hash identifier:          ekAEa04AtpxTpm27NgIehyLMgTqp2cJO/JqEpvVq0mY=
Subject key identifier:   FB:8E:30:DC:7E:E6:1C:2D:CF:E8:C1:24:27:AE:20:75:D5:A5:D3:9A
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       76
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/-44w3H7mHC3P6MEkJ64gddWl05o.roa
Signing time:             Fri 01 Aug 2025 01:30:58 +0000
ROA not before:           Fri 01 Aug 2025 01:30:58 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10000
IP address blocks:        202.169.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug  1 01:30:58 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=FB8E30DC7EE61C2DCFE8C12427AE2075D5A5D39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:bf:8b:10:63:ca:4f:0d:69:dc:fe:e5:17:
                    74:e8:57:a4:b1:d5:82:6d:bf:6c:20:a0:95:4f:58:
                    80:94:f8:f4:5d:b2:ac:f1:d2:9e:25:1b:37:15:bb:
                    3b:ec:5b:8f:29:c2:d1:38:d4:8a:07:4b:65:db:d3:
                    2e:95:4c:75:24:36:0e:fa:f6:be:9b:16:4b:51:c8:
                    69:89:46:72:85:cb:23:9c:1d:c8:a2:f7:01:25:ae:
                    51:bd:7b:72:69:7f:35:3e:69:c7:c3:c9:ab:59:fe:
                    b2:58:68:56:3b:1c:6c:5e:9e:7b:01:6a:b8:34:dc:
                    ee:97:7c:b5:3f:10:32:89:5f:7e:45:97:36:67:2c:
                    3d:05:5e:9e:fe:23:ce:aa:30:13:b7:b9:28:62:00:
                    84:d3:e9:83:bc:c4:df:75:34:13:f7:04:1b:8c:3f:
                    25:97:ba:90:ad:44:87:ca:b1:2f:df:cf:42:e0:21:
                    1a:45:ff:a3:cb:09:ab:21:81:76:e5:19:f2:fa:dd:
                    71:6a:0b:59:47:12:66:b6:80:14:de:a6:d9:bb:e6:
                    b5:32:f4:fe:80:83:ea:b9:a7:1c:74:f4:77:64:c7:
                    e9:07:7c:4c:ba:d0:e2:e9:c7:9c:88:15:74:ea:fb:
                    fd:53:98:5a:df:28:33:3a:50:ba:c4:15:39:54:5a:
                    00:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8E:30:DC:7E:E6:1C:2D:CF:E8:C1:24:27:AE:20:75:D5:A5:D3:9A
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/-44w3H7mHC3P6MEkJ64gddWl05o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:8b:14:a5:3d:0b:88:66:d4:9c:a8:e2:0f:07:c4:71:5a:
         9e:bd:cd:2d:cc:cf:2e:40:e0:45:de:e1:aa:69:b7:c2:69:11:
         ae:4d:c2:5c:80:9a:03:ab:d8:02:7e:ac:af:87:23:bf:c0:98:
         a5:fe:73:45:47:9c:f7:d3:fe:a2:18:5b:28:c4:d1:9d:e3:75:
         1c:01:7a:d4:7e:8c:e5:82:c8:6a:55:bb:03:67:36:4d:e9:b5:
         27:5f:49:50:47:0c:7f:4e:cd:d1:06:60:ac:53:f5:e4:2c:72:
         6d:19:b2:ae:99:af:30:a2:6d:37:1a:46:a8:53:23:c5:71:ef:
         18:55:09:73:d6:1e:55:55:44:c0:0e:63:01:58:08:0b:63:a2:
         9d:6e:b5:02:14:fb:fb:a1:12:86:98:10:22:53:01:a6:ea:32:
         a8:95:1a:52:05:8d:6e:91:8a:5a:de:59:02:e3:ca:b2:20:50:
         53:3f:75:aa:82:6e:b4:65:93:a9:2e:8f:c5:62:a1:2d:ca:fd:
         65:81:9c:40:17:1e:8e:87:f8:dd:a3:7b:a4:30:56:26:cd:aa:
         75:34:e6:49:0a:7e:2d:14:1a:f6:7f:e8:89:9d:47:51:cf:49:
         70:5d:57:a0:41:fc:7a:88:d8:39:ec:18:a5:1c:99:53:f8:7b:
         f0:83:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:49:41 2025 by rpki-client