Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/HN6uSuSNYKSq-o1ItoW5XzQa-R4.roa
File:                     HN6uSuSNYKSq-o1ItoW5XzQa-R4.roa (raw, json)
Hash identifier:          BPNwftNmWWMNHfVTqGf57CYHqCpkli1hpywyFPnsEOM=
Subject key identifier:   1C:DE:AE:4A:E4:8D:60:A4:AA:FA:8D:48:B6:85:B9:5F:34:1A:F9:1E
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       69
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/HN6uSuSNYKSq-o1ItoW5XzQa-R4.roa
Signing time:             Fri 01 Aug 2025 01:30:51 +0000
ROA not before:           Fri 01 Aug 2025 01:30:51 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10000
IP address blocks:        111.91.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug  1 01:30:51 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1CDEAE4AE48D60A4AAFA8D48B685B95F341AF91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:c0:dc:7b:f8:40:a7:68:d7:4a:d4:d2:95:
                    80:ff:70:66:02:c5:a7:ec:82:58:b5:1b:62:b6:d0:
                    70:0b:3b:a2:48:2d:c9:4c:46:c0:80:a6:e0:d3:5e:
                    19:ce:dd:f1:ea:2b:de:e7:6c:97:39:71:f6:da:45:
                    b6:06:27:ae:a9:13:4c:0d:25:16:26:d1:eb:e2:59:
                    66:31:8a:ed:ab:af:55:b5:96:b3:92:52:f6:14:8b:
                    d6:9a:cc:dd:77:e3:e6:ec:1f:8d:5d:61:e4:e7:ba:
                    07:ca:ca:db:86:4f:49:40:83:3a:b2:60:22:c2:83:
                    34:21:51:13:7c:e2:ed:1b:7b:6c:05:ec:72:45:62:
                    32:85:4f:0b:c8:4e:2e:60:35:58:b2:e3:ff:d3:0a:
                    14:0c:f4:e7:f8:48:a8:81:21:b2:30:dd:c1:be:97:
                    40:e9:45:6d:83:c1:0d:42:07:57:ff:11:78:6e:98:
                    bf:50:d0:35:7b:d6:4e:a6:ef:a7:1d:e3:41:f9:14:
                    e9:f9:2d:60:d0:04:74:42:82:9c:a0:f2:1e:aa:ab:
                    98:74:71:30:f5:dc:0c:f1:87:69:ff:eb:b6:5d:45:
                    c3:fb:42:6e:29:b1:4e:4a:01:f3:c0:f1:98:60:d8:
                    ab:46:aa:77:9f:07:fb:f5:b0:11:c1:48:2c:1a:4f:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:AE:4A:E4:8D:60:A4:AA:FA:8D:48:B6:85:B9:5F:34:1A:F9:1E
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/HN6uSuSNYKSq-o1ItoW5XzQa-R4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.91.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ca:41:de:e9:c3:a7:0b:25:a8:5b:2d:4f:0e:97:95:b7:38:71:
         d2:0e:de:31:da:3a:f8:51:d7:46:da:3f:7d:51:5e:0a:88:50:
         23:84:06:ec:46:67:cb:e6:d5:5b:1b:05:f3:a2:7b:e9:dd:a1:
         b3:e6:a6:6b:48:7b:00:2d:db:fa:74:42:bb:e2:0e:0e:19:9e:
         09:84:8d:47:d9:67:3c:9d:f1:ae:f2:2c:6f:48:4a:63:17:56:
         c3:c1:65:76:dd:3f:67:8a:36:bf:be:c5:be:c0:d6:b0:39:d3:
         d6:5c:28:12:e6:60:7c:c3:c2:ab:e3:c7:b9:e2:36:02:b9:a1:
         31:28:c2:6b:12:29:da:39:af:c3:03:85:9d:54:f8:87:70:07:
         84:d8:af:58:85:f9:ec:99:d7:9a:93:90:00:10:75:3d:2b:84:
         91:24:a0:db:4a:30:1d:c8:78:ff:05:5c:0c:b7:b8:76:93:ca:
         29:8d:b3:de:45:50:f9:bf:c3:1c:98:57:1e:3c:51:c8:40:6c:
         b5:b8:a0:d1:36:9c:af:9b:2c:c4:37:fa:3c:23:d5:10:6f:9c:
         a8:07:b7:b9:3f:c6:21:c7:6d:75:80:f1:15:24:e9:b0:91:84:
         40:ac:b2:ce:2b:98:3c:12:3b:13:36:9c:4a:12:53:a8:9a:cc:
         2e:90:87:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:37:10 2025 by rpki-client