Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/r2QDGJZ6Wkdwv89SnFRwvK6S99Q.roa
File:                     r2QDGJZ6Wkdwv89SnFRwvK6S99Q.roa (raw, json)
Hash identifier:          g3vK5sA65v+7PdOd+BP2GUpSj+7FPNKIBilvXl2ubRQ=
Subject key identifier:   AF:64:03:18:96:7A:5A:47:70:BF:CF:52:9C:54:70:BC:AE:92:F7:D4
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       71
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/r2QDGJZ6Wkdwv89SnFRwvK6S99Q.roa
Signing time:             Fri 01 Aug 2025 01:31:10 +0000
ROA not before:           Fri 01 Aug 2025 01:31:10 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9374
IP address blocks:        117.18.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug  1 01:31:10 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=AF640318967A5A4770BFCF529C5470BCAE92F7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:11:e8:25:dc:14:14:75:03:93:3b:8a:da:
                    89:c4:d3:30:a8:6f:f3:9a:e4:7d:e2:8a:be:84:d1:
                    8f:1b:22:60:4a:84:eb:23:c2:04:b6:a6:99:bc:f9:
                    ee:14:35:a7:7e:fe:15:48:40:d6:da:e4:8d:8c:bc:
                    22:74:11:3e:06:da:93:e3:52:31:93:49:53:38:d9:
                    09:72:80:08:60:1e:af:d8:b1:83:ce:a8:f2:25:65:
                    d1:f4:8c:41:8f:66:bc:07:61:28:b8:2d:65:99:a5:
                    96:fc:8a:56:af:34:ac:9a:86:7a:5a:c5:6c:2d:54:
                    5b:10:5a:ae:bd:5f:0b:18:60:6b:74:e3:06:46:0a:
                    6c:3b:cb:22:c5:d0:95:c1:b7:c3:5f:6c:24:8e:f7:
                    89:5f:3c:23:b3:0f:1a:8b:7c:7b:41:1d:b7:c0:2d:
                    6b:4b:c9:08:b7:19:65:83:7b:8b:cd:e6:be:56:25:
                    ca:32:08:c5:9c:d8:9d:d8:b5:7e:d9:bb:8b:77:ab:
                    cd:6c:a2:a9:0a:ee:3d:ee:ff:61:68:04:ab:3b:36:
                    7b:7d:52:52:c6:86:d8:7b:2d:4b:80:b0:63:62:d2:
                    ca:27:17:87:e5:20:e1:20:97:e5:5f:2a:ba:d2:e6:
                    25:39:22:99:25:f2:20:ca:3f:e4:be:5d:f2:b5:98:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:64:03:18:96:7A:5A:47:70:BF:CF:52:9C:54:70:BC:AE:92:F7:D4
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/r2QDGJZ6Wkdwv89SnFRwvK6S99Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:99:c9:fb:fd:02:7c:09:b2:0b:15:32:8d:15:00:6e:0b:f6:
         1c:99:01:1a:b1:9a:c8:a2:58:a8:2e:7a:24:78:9a:c0:d3:e4:
         f8:f0:16:06:6b:65:e7:7c:70:dc:07:44:f9:56:af:59:67:57:
         d8:78:3b:6d:03:33:38:73:07:6e:ca:dd:ba:69:bf:58:81:ce:
         2c:88:d2:07:db:df:5e:94:e1:3e:66:ba:17:4b:a7:bf:12:74:
         cf:53:84:6b:ae:19:2d:e5:d4:f4:98:22:ac:6c:36:c1:60:5a:
         27:0d:0b:f1:64:19:4e:a5:8b:94:ef:96:56:91:8c:cc:61:4e:
         19:23:55:02:bd:64:b3:a3:02:01:b6:b3:3c:d0:79:71:bc:f3:
         19:33:92:b1:bb:64:0b:0d:2e:37:5d:74:49:09:28:01:57:57:
         bf:d2:26:c0:e4:4e:07:7d:e1:90:a1:67:fe:eb:74:c7:8e:6a:
         10:71:35:36:e0:6a:61:4b:be:be:a6:6b:85:c1:b3:82:ed:e6:
         32:9e:7c:8a:2f:2e:6f:59:af:fe:84:c5:c3:2e:63:0e:65:c5:
         17:95:7d:ae:2a:1a:74:ad:f0:da:5f:80:3b:f8:d4:32:99:ed:
         06:57:d2:07:59:e0:b6:c9:c5:65:cb:80:9d:1b:d5:93:f4:a4:
         f5:b8:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:17:07 2025 by rpki-client