Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/vW4AiSp-x0IHB_hS_GrLKNx8NYk.roa
File:                     vW4AiSp-x0IHB_hS_GrLKNx8NYk.roa (raw, json)
Hash identifier:          vzy9Awjvy2iS8Vo6h+M+/wFce4emA/j1Z31XXVeysyY=
Subject key identifier:   BD:6E:00:89:2A:7E:C7:42:07:07:F8:52:FC:6A:CB:28:DC:7C:35:89
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       5B
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/vW4AiSp-x0IHB_hS_GrLKNx8NYk.roa
Signing time:             Fri 01 Aug 2025 01:29:13 +0000
ROA not before:           Fri 01 Aug 2025 01:29:13 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     23805
IP address blocks:        202.76.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Aug  1 01:29:13 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=BD6E00892A7EC7420707F852FC6ACB28DC7C3589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:92:8e:22:d7:2a:82:80:87:b2:7a:08:31:e8:
                    76:2b:86:e1:db:2f:4a:01:c1:b2:2a:3c:e1:10:7c:
                    e3:4d:52:8d:46:87:1d:c8:aa:05:64:de:31:05:2e:
                    cb:81:73:f1:d2:83:b0:dd:7b:41:93:17:84:b5:57:
                    3d:b7:fd:c2:b1:b7:2d:21:7d:8e:7f:7c:12:06:38:
                    de:e8:22:f2:c0:d8:af:bc:34:71:4b:86:56:7a:ee:
                    a3:68:7c:2c:0d:e7:d2:19:90:54:4a:1f:79:68:bb:
                    12:09:ac:5e:6b:08:a8:fb:d7:ea:bc:b8:d2:29:42:
                    5a:1f:98:b0:1a:9f:4a:26:02:e1:1d:a5:4d:bd:da:
                    18:5e:9b:8a:c1:14:f7:1d:ca:81:89:24:24:2f:72:
                    96:5f:bd:99:ec:e9:09:a8:2f:0c:81:1c:6f:21:e1:
                    c5:50:2a:fa:b3:b1:0a:06:cf:c5:1b:90:b3:7e:0c:
                    34:49:4e:14:d8:0d:46:f6:cb:d4:9b:0c:6a:e4:ef:
                    dc:1c:5a:26:84:b4:1a:01:3a:22:3d:f5:dc:c2:25:
                    d4:0c:9d:a2:f0:95:05:d4:94:1e:51:8a:d1:08:8d:
                    e6:29:2c:0f:3f:a6:f7:6e:fa:0c:d2:35:50:3c:85:
                    6f:ac:e2:0b:f4:d3:37:15:e5:ec:7a:52:6e:d4:62:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6E:00:89:2A:7E:C7:42:07:07:F8:52:FC:6A:CB:28:DC:7C:35:89
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/vW4AiSp-x0IHB_hS_GrLKNx8NYk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.76.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:2b:b1:f9:ad:db:e4:93:b6:ca:ad:15:fc:06:cd:56:45:14:
         b7:0e:65:71:2e:f6:4f:c2:21:85:97:be:d0:78:44:73:b2:04:
         dd:35:3b:2d:a6:03:57:fd:43:4b:2b:ae:9a:ee:e1:23:7b:ad:
         a3:05:7d:4f:58:5d:78:d0:5b:ea:84:26:5f:ee:31:bd:67:be:
         7b:bd:39:ad:ac:be:42:79:ed:68:30:d4:c7:76:9a:88:df:a2:
         4a:26:57:54:9c:68:57:28:24:2c:38:01:5a:37:5b:38:b2:96:
         b0:1c:d7:e4:fa:0a:0e:4d:86:77:a4:d7:4b:08:60:4a:fa:d3:
         45:5b:49:14:7e:d4:80:a7:eb:29:87:88:f2:d2:73:d0:1a:2f:
         e4:f5:ab:4c:be:27:9e:9e:d4:bd:2a:cc:5d:5f:39:94:5f:c4:
         1e:01:e6:e9:e0:50:37:d9:bd:f3:af:d0:b8:26:74:ac:14:70:
         74:a5:32:9f:91:ec:86:83:d4:d0:c3:3c:eb:e1:e7:6c:da:c0:
         b8:7a:35:5d:99:13:8b:ff:2b:4f:a1:20:ec:5e:c0:e5:52:bd:
         77:71:18:f0:16:9b:11:b4:a0:6b:6e:aa:67:95:03:e7:8d:5d:
         1f:06:45:6a:f1:55:c4:cb:05:20:a5:81:c6:1f:a6:fb:a9:a6:
         4b:47:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:36:22 2025 by rpki-client