Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/tVQHM3_tvlE7l8ycGZ2JOeBtu7E.roa
File:                     tVQHM3_tvlE7l8ycGZ2JOeBtu7E.roa (raw, json)
Hash identifier:          N4KG3gTOGo7Zd83+VCkS921nAuZGli8Qz7MLBCCr5Qw=
Subject key identifier:   B5:54:07:33:7F:ED:BE:51:3B:97:CC:9C:19:9D:89:39:E0:6D:BB:B1
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       34
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/tVQHM3_tvlE7l8ycGZ2JOeBtu7E.roa
Signing time:             Fri 01 Aug 2025 01:32:07 +0000
ROA not before:           Fri 01 Aug 2025 01:32:07 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     2519
IP address blocks:        202.88.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Aug  1 01:32:07 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B55407337FEDBE513B97CC9C199D8939E06DBBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:da:1b:16:85:ef:05:3e:a5:7b:ad:6a:42:
                    32:57:53:17:f9:bd:e6:f5:fd:85:ae:4e:d4:4a:87:
                    63:1c:1b:bb:30:41:49:db:66:5a:75:ad:83:d4:08:
                    65:c6:61:58:6e:a7:94:d3:25:7d:bb:18:d0:bc:50:
                    a2:b3:97:ff:b1:af:4b:fe:f2:ce:00:1d:5f:4a:07:
                    6e:1d:22:b0:bf:cb:44:bd:4f:92:09:aa:8b:8b:40:
                    e9:79:65:cf:ce:e4:ff:1b:eb:7d:b1:13:8e:73:75:
                    5b:ae:71:89:65:79:df:86:5a:e2:45:3d:69:5c:4c:
                    10:0e:31:55:35:c8:10:c6:3e:b6:bb:e4:51:b6:b6:
                    6b:a0:55:f3:27:0b:1f:ad:7f:f3:83:cd:4a:e9:34:
                    4a:ff:dc:34:ce:90:08:16:8a:95:6f:75:c9:0d:c2:
                    62:38:9c:41:b5:aa:e6:78:a3:e9:30:05:e1:e7:bd:
                    41:8b:b5:be:ef:0f:71:21:b1:92:88:67:cf:59:0a:
                    be:5e:57:c7:c7:8c:fc:00:52:bd:25:0f:2f:c2:25:
                    1b:4a:9d:b8:86:80:5e:27:60:c2:5d:01:fe:29:ff:
                    18:76:7a:43:b9:5c:90:9d:5c:4f:4d:64:0a:fb:81:
                    24:bd:4e:97:04:95:3e:91:bb:e1:b6:89:65:8c:9a:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:54:07:33:7F:ED:BE:51:3B:97:CC:9C:19:9D:89:39:E0:6D:BB:B1
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/tVQHM3_tvlE7l8ycGZ2JOeBtu7E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.88.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:04:59:f7:4a:b3:4a:24:f2:8d:a4:48:7f:0f:ca:5f:d7:f2:
         7f:5c:57:06:e8:d9:d9:ab:15:04:fb:bc:ce:18:62:e3:c0:d8:
         39:82:1f:97:82:4f:2c:85:76:f9:4e:7b:a4:1f:c0:4a:f6:9f:
         ad:da:7c:cc:5f:85:2f:9a:b2:18:d7:bb:7c:45:a7:65:c8:7e:
         e7:5b:a9:f7:73:20:14:37:0b:17:3c:ca:20:e7:99:8a:9e:28:
         f6:a3:7c:47:1e:f2:33:a5:02:e7:9b:d7:36:47:c5:ad:45:2a:
         70:91:d4:b4:52:d9:9a:9b:98:2e:28:5e:45:3e:72:93:3d:77:
         a3:7e:5f:4e:a5:85:60:5a:be:01:42:d9:e5:68:d3:c5:bd:2c:
         01:6e:fd:2c:35:54:b9:52:c1:04:49:f0:f0:04:e7:5d:1c:04:
         27:36:39:ee:a8:3e:60:ad:9b:d2:f4:d6:5a:ac:54:66:2e:dd:
         b9:a0:79:b3:0e:1f:96:3c:47:06:6d:9a:4e:0a:76:c1:c2:9a:
         33:3d:55:ee:e0:d5:4b:f6:0f:92:d4:48:d4:77:3b:3e:66:09:
         19:34:08:b4:7f:d2:c2:1c:25:9a:39:29:03:d4:b7:9c:1d:be:
         31:e6:5e:29:ce:14:c0:ea:19:d3:93:7a:b1:99:47:a7:59:a7:
         9a:03:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:23:47 2025 by rpki-client