Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/R53rS6GslAA14Wl0i509bDI4Fco.roa
File:                     R53rS6GslAA14Wl0i509bDI4Fco.roa (raw, json)
Hash identifier:          HpOAMB8ZGv46vUXQZhpYEMcUPD5y4467Mn2BvlUq0HE=
Subject key identifier:   47:9D:EB:4B:A1:AC:94:00:35:E1:69:74:8B:9D:3D:6C:32:38:15:CA
Certificate issuer:       /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial:       3C
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/R53rS6GslAA14Wl0i509bDI4Fco.roa
Signing time:             Fri 01 Aug 2025 01:30:46 +0000
ROA not before:           Fri 01 Aug 2025 01:30:46 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     55376
IP address blocks:        202.6.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
        Validity
            Not Before: Aug  1 01:30:46 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=479DEB4BA1AC940035E169748B9D3D6C323815CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:6d:fe:a9:1f:ad:15:29:da:70:f3:b2:1c:
                    1c:55:f7:fd:aa:be:16:6c:40:32:e8:54:f4:43:3f:
                    85:d9:3b:26:8d:5b:52:b2:ee:4f:1c:8d:c2:3b:af:
                    23:18:c5:f9:93:aa:31:b6:8a:46:96:d1:3d:db:75:
                    35:92:71:8b:f9:e2:09:1c:cd:83:bc:24:aa:87:70:
                    57:42:dd:dc:bd:e7:f6:e7:17:23:00:66:68:bf:a1:
                    e8:5a:b6:ca:7b:8b:a7:20:4b:2c:28:91:53:0f:70:
                    1b:0f:d9:2a:3f:b5:f7:8f:93:37:74:e7:6d:ba:2a:
                    75:9b:32:81:df:9d:74:cf:3b:7d:a0:47:75:0b:95:
                    5b:d4:ff:71:b4:d7:7d:c2:0e:c2:f9:f0:00:07:3a:
                    d9:ef:51:e0:b7:0c:1c:63:43:4d:2a:c1:6a:22:52:
                    97:3c:40:be:2a:80:c8:97:b0:b1:e7:0b:65:44:e7:
                    56:f6:ae:13:82:1d:fb:f1:8e:81:12:8b:92:6e:15:
                    4b:a7:83:e4:75:ff:52:1b:ca:fb:b4:30:a3:8b:24:
                    06:e4:ec:dd:03:d7:d7:c8:b8:df:f5:db:20:16:4a:
                    61:d8:34:44:1a:f1:ff:08:d1:5c:0c:64:72:23:68:
                    e1:76:de:f2:34:dd:f0:18:30:09:ad:81:de:c3:41:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9D:EB:4B:A1:AC:94:00:35:E1:69:74:8B:9D:3D:6C:32:38:15:CA
            X509v3 Authority Key Identifier:
                keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/R53rS6GslAA14Wl0i509bDI4Fco.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:57:44:db:e3:b7:1a:8f:bb:14:12:36:81:a1:9b:18:83:7e:
         09:21:c9:d2:48:30:8f:12:72:d5:f1:54:55:4a:b5:0b:b0:31:
         0e:09:8d:5d:b1:4c:6a:b4:53:eb:a4:6c:2e:2e:92:57:f2:eb:
         98:b6:87:f2:86:36:94:60:19:1d:19:11:a1:b5:bd:3a:93:99:
         c9:c9:01:b7:ef:e1:90:31:0c:d6:26:8b:9e:91:75:17:aa:d6:
         e0:11:9a:4a:92:6e:8c:08:25:5f:ca:1f:d8:fa:04:39:7e:87:
         d9:06:f2:0a:a5:6e:55:5a:62:fc:ac:17:c2:de:cf:01:90:8c:
         c3:82:ca:8b:df:cc:1a:aa:f7:97:c6:76:71:32:66:d5:d3:43:
         37:36:de:0d:e4:22:02:9c:3b:e4:7e:65:0d:5c:2f:f6:f5:67:
         a3:d8:f0:40:a5:ca:d6:63:ed:e2:09:b7:d4:66:36:0a:01:1a:
         90:4d:d2:b7:3c:59:15:5a:fa:1b:30:90:0b:dc:4c:ec:d9:9b:
         bd:76:87:ba:ee:c8:fd:22:00:43:06:4d:ea:03:3d:6f:f4:16:
         dd:c3:57:3c:0a:24:2d:fa:ac:ea:60:08:d4:0b:2e:8c:27:b3:
         38:b5:29:46:3d:58:a5:f7:56:10:2f:1b:6b:e4:f0:cd:e2:0b:
         fc:f9:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:37:36 2025 by rpki-client