Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/fC50YiCiaZH3Owk7bRKOueaq30U.roa
File:                     fC50YiCiaZH3Owk7bRKOueaq30U.roa (raw, json)
Hash identifier:          0gp4Fc9J1EouRt/DpBNacd4J8HJztuVvZzbhlIw/M44=
Subject key identifier:   7C:2E:74:62:20:A2:69:91:F7:3B:09:3B:6D:12:8E:B9:E6:AA:DF:45
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       6E
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/fC50YiCiaZH3Owk7bRKOueaq30U.roa
Signing time:             Fri 01 Aug 2025 01:30:54 +0000
ROA not before:           Fri 01 Aug 2025 01:30:54 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10000
IP address blocks:        203.129.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug  1 01:30:54 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=7C2E746220A26991F73B093B6D128EB9E6AADF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:06:20:77:4f:6d:d4:b5:9f:77:e4:d3:f3:2f:
                    c2:ee:36:88:c9:ae:97:b7:df:46:40:70:6a:7a:a4:
                    f7:5e:24:28:ff:78:99:95:33:d5:90:db:1f:7b:6c:
                    01:df:66:32:44:8d:c4:de:d8:a4:a1:de:03:43:12:
                    ba:58:c5:4e:4d:3c:f6:38:48:2f:2f:bf:1b:41:db:
                    cf:87:ec:5f:3a:10:4b:bd:e5:67:76:8b:bf:55:f0:
                    70:38:da:8e:fd:3c:93:55:9d:b7:dc:a3:fe:18:3d:
                    d3:48:c8:03:1d:ee:2d:46:97:9e:bf:9b:72:98:a9:
                    be:aa:c7:44:6f:0c:c1:76:18:47:bc:1c:91:5b:fe:
                    73:e1:f0:97:d4:4e:9f:55:6d:2a:53:ab:7c:69:0d:
                    ed:f3:9e:cc:ff:9a:53:7a:d3:5e:96:ba:43:1a:7d:
                    04:cf:11:e1:64:61:3f:20:7f:fc:d0:04:0b:03:5c:
                    49:d7:be:8f:46:5f:fb:73:ad:ae:c7:54:0a:a9:46:
                    02:6d:67:a9:a1:fb:79:a6:18:a3:24:9c:a8:ed:4c:
                    f9:63:83:72:ef:4d:c1:7d:7b:aa:d2:58:5c:54:de:
                    fc:01:9c:47:4e:76:42:98:01:6e:4f:07:66:68:d1:
                    d4:c7:22:7c:46:f8:e4:e2:2f:f7:c0:7d:3f:8e:b3:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2E:74:62:20:A2:69:91:F7:3B:09:3B:6D:12:8E:B9:E6:AA:DF:45
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/fC50YiCiaZH3Owk7bRKOueaq30U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:00:7e:9d:03:26:32:e0:98:c5:4f:ac:ad:cd:4d:78:7d:ff:
         9d:b5:3c:8b:25:02:9d:8b:fc:e3:20:79:24:67:bf:be:54:e4:
         77:29:1b:d4:98:cf:a4:68:7a:3b:c8:57:da:5e:a0:47:9b:57:
         ad:7e:bf:76:d4:6e:db:39:16:54:ad:0f:56:fb:37:68:b5:c6:
         d7:2b:1f:8b:78:1c:ee:1c:a5:de:fe:af:49:d7:eb:63:1f:94:
         c4:3c:8b:b9:bc:a5:19:42:09:50:e2:a5:32:35:b3:91:e9:fb:
         4b:15:41:44:7f:29:c1:ff:26:cb:dd:f0:6a:e0:0c:1f:36:4f:
         0a:2a:1a:77:35:06:42:18:a5:fb:7a:94:fe:d4:49:47:41:52:
         ac:27:6c:41:76:33:da:bd:f2:bb:8b:6f:43:38:ff:a2:3c:38:
         67:64:be:19:1d:9b:cd:8d:01:6a:50:e4:3a:c2:bb:09:f9:78:
         04:2e:b7:8a:3c:af:b4:ea:c8:6d:6c:79:81:19:f8:a0:a8:df:
         39:68:a0:37:2f:74:4c:73:c3:57:54:79:9d:77:b4:d1:17:2b:
         60:4d:d6:49:28:2c:e0:35:e0:b3:24:56:52:b1:35:f4:ec:ce:
         fb:6d:bb:2c:b1:8b:a3:6b:5b:d3:ba:a7:1d:93:14:6b:31:f7:
         65:51:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:53:29 2025 by rpki-client