Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/6Mv8n_-nNYPrx73GFrVaC_jSM_Y.roa
File:                     6Mv8n_-nNYPrx73GFrVaC_jSM_Y.roa (raw, json)
Hash identifier:          pGOiUwrcijbOh7s/fIQGYME7OWobKUFgc6nuexCXFrU=
Subject key identifier:   E8:CB:FC:9F:FF:A7:35:83:EB:C7:BD:C6:16:B5:5A:0B:F8:D2:33:F6
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       73
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/6Mv8n_-nNYPrx73GFrVaC_jSM_Y.roa
Signing time:             Fri 01 Aug 2025 01:30:56 +0000
ROA not before:           Fri 01 Aug 2025 01:30:56 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10000
IP address blocks:        219.100.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug  1 01:30:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=E8CBFC9FFFA73583EBC7BDC616B55A0BF8D233F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:74:60:d4:72:a8:b7:56:bf:6c:4f:a1:ae:
                    fa:c2:49:26:74:ff:9e:5f:31:97:30:77:2e:65:c0:
                    6e:15:6f:43:e1:fe:28:ec:db:90:ab:f9:5d:7a:55:
                    ba:95:b3:2c:4c:90:18:53:a6:a5:e2:ad:2d:20:aa:
                    23:26:66:57:b2:e3:18:44:69:22:dc:06:22:33:36:
                    1d:72:2c:03:ec:07:7d:bb:56:84:a0:0f:98:90:22:
                    70:6d:3a:06:a4:4a:5a:82:52:ae:cf:5e:6d:ee:6b:
                    82:2a:56:5a:9b:58:f4:9f:f8:14:6f:12:f8:99:45:
                    84:ac:d4:98:40:c8:57:34:df:34:22:45:19:ce:b8:
                    63:f1:01:35:0e:10:76:85:a3:c7:10:ba:66:5e:37:
                    d6:3c:74:7d:36:19:f7:ea:de:5d:1c:52:93:af:23:
                    d7:0e:7e:70:27:a2:41:f4:2a:d4:00:43:03:be:eb:
                    19:63:48:15:75:19:47:4d:30:84:b1:06:f5:fb:eb:
                    ce:81:7c:97:5b:fc:d3:dc:a7:1f:9e:a2:b9:14:2f:
                    31:83:b8:61:b2:49:7f:0b:c5:41:32:1b:11:88:4f:
                    54:0d:bd:dd:85:72:77:c8:c2:8a:e3:fa:11:84:07:
                    9a:f6:86:5f:c8:55:b1:f8:36:ee:b0:a5:0b:9d:3e:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CB:FC:9F:FF:A7:35:83:EB:C7:BD:C6:16:B5:5A:0B:F8:D2:33:F6
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/6Mv8n_-nNYPrx73GFrVaC_jSM_Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:fc:6d:cc:dd:b6:0a:12:57:f6:93:63:0d:cc:4e:c2:0e:
         6e:2f:c4:53:fe:ca:9d:c0:0f:a1:d1:01:e1:06:8e:6f:14:a8:
         63:11:21:e7:50:20:dc:29:51:1f:10:d1:f9:3b:0c:9f:95:01:
         87:48:78:31:34:14:b3:6c:de:01:20:99:88:98:eb:e3:34:31:
         b5:4b:89:a3:01:db:58:f6:3e:fa:10:f0:45:3d:4e:82:b6:d2:
         34:f8:bb:70:ae:39:d5:b7:66:67:79:26:83:86:6c:7b:fa:84:
         9c:47:a0:0d:ad:a3:16:b1:c6:46:4f:a4:7d:45:2f:92:08:30:
         14:8e:4b:72:2d:0d:e6:50:54:d0:ae:27:15:3d:d2:c7:76:77:
         40:b2:62:ab:7f:af:c6:69:51:ef:78:30:75:ee:2a:bb:d4:f4:
         65:f9:99:c3:4c:4d:6b:3b:3e:e5:17:5a:0a:78:10:89:ec:34:
         8b:7c:3a:5e:4c:20:01:6d:dd:93:7b:88:c8:b4:ce:63:2f:85:
         d5:d1:1f:e2:24:c4:6c:86:75:61:cd:39:17:7a:61:f9:23:86:
         bb:6f:61:d4:2e:7d:4b:e3:68:28:c5:66:45:d3:b5:ae:ce:28:
         5a:2f:7b:06:56:aa:40:08:03:2b:cf:25:48:4d:02:78:64:23:
         9e:b6:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:06:51 2025 by rpki-client