Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/tRLeb59T51PVsvVpprenQhiMVWo.roa
File:                     tRLeb59T51PVsvVpprenQhiMVWo.roa (raw, json)
Hash identifier:          i4d2pqwxG4pMmE33R5zS3XsYKlS18ktc/FzQlP11Osc=
Subject key identifier:   B5:12:DE:6F:9F:53:E7:53:D5:B2:F5:69:A6:B7:A7:42:18:8C:55:6A
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       65
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/tRLeb59T51PVsvVpprenQhiMVWo.roa
Signing time:             Fri 01 Aug 2025 01:30:48 +0000
ROA not before:           Fri 01 Aug 2025 01:30:48 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10000
IP address blocks:        14.1.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug  1 01:30:48 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B512DE6F9F53E753D5B2F569A6B7A742188C556A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:f0:7d:01:35:92:d3:53:6e:c2:70:e9:d5:
                    05:7c:6a:c1:8d:dd:df:02:9b:9f:dd:7b:64:ee:53:
                    9b:69:98:b1:93:b6:e9:4d:00:a9:00:62:71:08:f5:
                    f7:d8:f4:50:7e:0d:9d:b7:ea:fc:0e:01:c0:4c:a3:
                    80:43:19:33:17:2d:43:66:ad:15:91:96:f6:7e:99:
                    f8:76:2c:b1:aa:04:4b:52:1f:f4:59:a7:e5:b9:45:
                    90:31:b7:6c:1d:39:8e:35:4d:67:ed:c9:08:fb:20:
                    cd:03:fb:cc:4f:ee:19:5f:15:2e:fb:54:46:ab:0a:
                    43:ff:e9:4e:b3:93:1a:b8:f2:00:d9:22:38:41:dc:
                    2e:e9:cf:a2:25:d4:bf:51:21:cd:9f:db:aa:b5:08:
                    1e:82:e4:f4:9d:54:f3:b6:47:ce:9c:25:8a:c5:ae:
                    26:0d:29:d4:78:a5:fb:5c:ba:2a:59:d8:e0:13:76:
                    cc:39:4b:32:90:ce:a6:9e:a6:ec:70:b1:cd:7b:f8:
                    1b:78:1d:62:ec:2b:22:9c:47:60:a7:56:e2:0b:e7:
                    1c:42:68:a4:33:88:e7:23:65:dd:f5:bf:3d:16:ee:
                    94:14:9a:50:b4:12:55:80:5e:0b:e3:b6:6e:4e:9c:
                    fc:db:93:31:17:46:fe:7a:18:93:e4:e6:30:79:77:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:12:DE:6F:9F:53:E7:53:D5:B2:F5:69:A6:B7:A7:42:18:8C:55:6A
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/tRLeb59T51PVsvVpprenQhiMVWo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.1.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:4f:72:78:78:2e:25:69:01:4d:0b:03:0c:7a:1c:b7:89:22:
         aa:ea:a1:c9:16:45:51:69:34:96:98:35:21:8d:ba:d4:9f:00:
         e6:c2:20:0b:25:f6:cf:f6:91:5b:d4:91:2d:1f:59:51:e8:c7:
         7e:d2:87:0e:fe:74:cc:ba:4a:05:b1:1b:07:c0:f2:74:7a:d8:
         a0:71:18:3c:c8:fd:f1:0b:bc:2b:8e:7b:a5:21:ca:8c:e9:6f:
         7e:05:d2:c3:98:94:7c:7c:1a:c2:5d:1f:32:e9:4c:14:c5:25:
         4e:8a:34:fd:08:61:d3:b0:68:14:34:1d:8e:a1:7c:a5:41:f0:
         c7:dc:48:f1:fe:94:99:3d:39:8a:92:22:96:e0:94:38:54:b3:
         4f:3d:80:c8:c2:86:ed:d1:e4:7e:24:83:a3:90:d5:15:c4:44:
         aa:e6:de:38:d5:f4:00:14:ce:a0:98:82:82:ae:75:81:46:25:
         0b:bd:67:37:1c:ea:01:04:4c:b3:a8:32:b7:36:93:56:95:66:
         89:89:49:0e:05:1f:90:4f:cb:06:04:62:de:d5:fe:4a:b8:31:
         c2:07:99:f7:84:56:6c:1f:d7:bc:3e:f9:1f:60:b3:1c:1d:43:
         f4:37:0f:59:b6:b7:b5:0a:d6:6f:ab:46:6b:4a:60:24:ed:1d:
         50:6c:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:03:15 2025 by rpki-client