Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/C7B6k4E95uhboYpssarRvYUN8Mk.roa
File:                     C7B6k4E95uhboYpssarRvYUN8Mk.roa (raw, json)
Hash identifier:          ldKyIIAvheZG3vcrtZAOjlYBXrFXkb/WPdXtDW+tjkk=
Subject key identifier:   0B:B0:7A:93:81:3D:E6:E8:5B:A1:8A:6C:B1:AA:D1:BD:85:0D:F0:C9
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01E6
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/C7B6k4E95uhboYpssarRvYUN8Mk.roa
Signing time:             Fri 01 Aug 2025 01:33:42 +0000
ROA not before:           Fri 01 Aug 2025 01:33:42 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     2497
IP address blocks:        133.110.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug  1 01:33:42 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=0BB07A93813DE6E85BA18A6CB1AAD1BD850DF0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:58:68:df:4f:f8:6a:d9:c1:0c:f2:26:9c:b4:
                    c0:3b:fd:f5:5c:76:f1:9d:34:c8:a8:b3:38:fa:3a:
                    76:12:bc:78:d7:27:b6:bb:1c:06:8d:c8:7a:c3:f1:
                    56:2b:e9:63:b2:8d:cd:e5:6c:07:96:81:94:d7:7e:
                    8c:58:28:4d:a2:c4:3a:88:2b:6f:db:e4:29:da:48:
                    82:1d:e0:ed:76:98:22:2c:41:bd:16:c0:ef:a5:42:
                    08:e1:2e:20:24:16:08:e1:31:60:2f:81:c9:46:c3:
                    8f:97:e2:16:af:4d:46:d3:f6:16:14:62:83:ff:87:
                    16:64:cf:26:2b:e7:2b:e3:88:82:27:f0:a4:8d:ac:
                    1c:ac:0b:d4:dd:3d:eb:f9:b1:b1:26:4a:80:aa:f3:
                    12:70:dc:34:60:45:a2:c4:8f:19:35:56:5f:3d:97:
                    13:b4:c3:af:1c:a8:01:10:af:a2:33:f2:ed:36:a6:
                    4c:43:2d:62:d1:f3:de:2f:b0:45:ec:ae:f1:0e:63:
                    8d:88:c0:da:20:8a:92:12:6e:ed:8f:35:16:e9:2d:
                    e1:e7:b0:12:c0:20:59:ad:34:de:92:0e:fd:fe:99:
                    5b:df:a2:24:38:32:36:5b:c1:82:39:6d:c7:e4:27:
                    11:0e:39:c5:10:10:49:8e:5c:58:83:34:f8:62:46:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B0:7A:93:81:3D:E6:E8:5B:A1:8A:6C:B1:AA:D1:BD:85:0D:F0:C9
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/C7B6k4E95uhboYpssarRvYUN8Mk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:ec:38:ca:09:66:25:92:32:43:05:f6:19:75:50:a3:2d:dc:
         ce:33:c1:d2:05:14:66:02:7e:9d:36:93:5c:19:1e:e0:db:85:
         85:98:ef:ce:26:9b:40:a3:48:b6:9a:18:c1:ad:24:d0:78:5a:
         4a:26:ac:2a:86:f3:9a:b9:ed:92:ea:09:b5:e7:d3:69:4c:de:
         c5:2d:f3:d1:a7:17:55:0c:40:90:97:a0:76:0b:89:34:64:6a:
         a2:66:27:f8:72:3f:5a:e1:44:34:05:1c:2c:f4:f0:b7:38:56:
         e9:58:3f:b6:bf:11:24:ca:21:03:a2:99:e5:93:ae:b0:ac:52:
         72:bf:a1:ea:41:73:03:92:fe:fe:11:c7:b0:9a:82:b5:a0:e3:
         4b:c6:cc:c1:17:22:21:e6:dc:6a:fd:76:a7:38:1e:85:e6:4f:
         d3:91:f5:72:81:9e:e6:a8:b9:e0:81:ba:e6:70:bd:eb:37:1f:
         f0:32:69:b6:83:0c:fc:7c:3d:9b:70:18:d6:c4:9f:1c:93:19:
         c0:7c:7a:2e:5a:09:68:87:20:2e:b9:ff:d6:bd:15:2d:ea:d1:
         d0:85:46:bb:61:e7:a4:97:8e:df:b7:eb:d0:03:d7:81:69:6e:
         13:a1:93:31:48:af:9c:24:4d:86:1d:c5:ff:ab:dc:2c:54:af:
         00:91:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:33:50 2025 by rpki-client